RynziThis policy explains what personal data Rynzi processes, why, how long we keep it, and the rights you have — written in plain language for users in the EU/EEA, the UK and everywhere else.
1. Data we collect
We collect the following categories of personal data when you use Rynzi.
| Category | What we collect |
|---|---|
| Email and sign-in | Email address, sign-in status, and a one-way hash of your email (used to keep one account per email). Your password is never stored or sent — only a one-way code derived from it on your device. |
| Age decision | Whether you are 18 or older (the birth date itself is not stored) |
| Profile | Profile info you provide (display name, bio, profile photo, interests and content language), plus your follows and followers |
| Interaction content | Direct messages, room chat, rooms you host, the party-room seats you take, gifts you send, and blocks you set |
| Device permissions | Camera and photo library, only when you choose to take or pick a profile photo |
| Purchase | One-time diamond pack purchases (pack, diamonds credited, price label, platform and store transaction ID) and your diamond balance. On the App Store each purchase also carries a pseudonymous account token derived from your Rynzi user ID, so diamonds are credited to the account that paid. We never see your card details. |
| Moderation records | Reports, moderation actions, appeals, and related records |
| Preferences and consents | App language, content language, notification choices, your marketing-measurement choice, when you accepted the Community Guidelines and EULA, and data-rights requests you submit |
| Device & advertising data | Only if you allow marketing measurement: advertising identifier (IDFA, only if you also allow tracking on iOS), IP address, device model, OS version, and install and purchase events, collected by our attribution partner Adjust |
We do not use third-party sign-in, we do not ask for your phone number, and we do not sell your personal data.
2. Purposes and legal bases
- Service delivery (contract): running your account, profile, rooms, and messages.
- Safety moderation (legitimate interest and legal obligation): filtering harmful content, handling reports, blocks, and appeals.
- In-app notifications: room, follow and message reminders shown in the app's notification center, which you can switch off at any time in Settings. Rynzi does not send push notifications.
- Payment (contract): crediting one-time diamond pack purchases made through the App Store, and keeping your diamond balance.
- Marketing measurement (consent): attributing installs and purchases to ad campaigns through Adjust, only if you allow it. The advertising identifier is only used if you also allow tracking on iOS.
- Legal duties (legal obligation): keeping records we are required to keep, such as dispute and fraud-prevention records.
3. Tracking and attribution
Rynzi uses Adjust (Adjust GmbH, Berlin) to measure which ads and campaigns lead people to install the app, and to count purchases, but only if you agree.
- We ask once, right after the age check. On iOS the choice is made in Apple's system prompt (see below); until you allow it the Adjust SDK is not started and nothing is sent to Adjust.
- You can withdraw at any time in Me → Privacy → Marketing measurement (Adjust). We then stop sending data and ask Adjust to erase the data it holds about your device. We make the same request when you delete your account.
- On iOS, this choice is made in Apple's App Tracking Transparency prompt, which we show once after the age check. Only if you tap Allow do we start Adjust and share your device's advertising identifier (IDFA) with it; Adjust may link it with data from other companies' apps and websites for ad attribution. That is "tracking" as Apple defines it.
- If you choose Ask App Not to Track, Adjust is not started and nothing is sent to it.
- We send Adjust two events: the install, and a purchase event with the price, currency and product ID of the diamond pack. We never send your email, profile, messages or room content.
- You can change the iOS tracking choice at any time in iOS Settings → Privacy & Security → Tracking, and switch marketing measurement on or off in Me → Privacy. The app works the same whatever you choose.
Adjust's privacy policy: adjust.com/terms/privacy-policy
5. Retention
- Account and profile: kept while your account exists, and deleted when you delete your account, together with your preferences, the people you follow, your blocks, your diamond balance, data-rights requests and the photos you uploaded. A deleted account can't be signed into or restored: signing up again with the same email creates a brand-new, empty account. The records listed below as kept after deletion (purchase records, reports, moderation records and appeals) are not linked to any account you can sign in to. All that remains of the sign-in is a one-way fingerprint that can't be turned back into your email or password; it keeps the deleted account closed.
- Interaction content: your messages, room chat, rooms and gifts sent are deleted when you delete your account. A report someone else filed may still contain the context they described.
- Account-deletion receipt: a record of when you deleted your account and that you confirmed it, kept so we can prove the deletion took place.
- Reports and moderation records: kept up to 24 months so appeals and repeat-behaviour checks remain possible.
- Purchase records: kept as long as tax and accounting law requires.
- Age decision: only the 18+ outcome and when it was checked are kept; the birth date is discarded immediately. If the check finds you are under 18, that outcome is also remembered on the device so it can't be bypassed by entering another date.
- Attribution data: kept by Adjust under its own retention policy until you withdraw consent or delete your account, when we ask Adjust to erase it. The advertising identifier is only collected while tracking is allowed.
6. Your rights (GDPR)
If you are in the EU/EEA or the UK you can request access, correction, deletion, restriction of processing, objection to processing, and portability of your data. You can also switch off in-app notifications or withdraw consent for marketing measurement at any time, and lodge a complaint with your local supervisory authority.
To make a request, open the app and go to Me → Settings → Data-rights request (also under Me → Privacy). You'll get a tracking number and can follow the status in the app. You can also email kattikari@icloud.com from the address linked to your account. We normally respond within one month; complex requests may take up to two more months, and we'll tell you why. To delete your account entirely, see Delete your account.
7. Contact and complaints
Controller contact: kattikari@icloud.com
Data protection officer: Rynzi DPO, Amsterdam, NL
Cross-border transfers: where data is processed outside the EEA we rely on the European Commission's standard contractual clauses.
If you are not satisfied with our response, you have the right to lodge a complaint with the data protection authority in the country where you live or work.