RynziThis policy explains what personal data Rynzi processes, why, how long we keep it, and the rights you have — written in plain language for users in the EU/EEA, the UK and everywhere else.
1. Data we collect
We collect the following categories of personal data when you use Rynzi.
| Category | What we collect |
|---|---|
| Email and sign-in | Email address, sign-in status, and a one-way hash of your email (used to keep one account per email). Your password is never stored or sent — only a one-way code derived from it on your device. |
| Age decision | Whether you are 18 or older (the birth date itself is not stored) |
| Profile | Profile info you provide (display name, bio, profile photo, interests and content language), plus your follows and followers |
| Interaction content | Direct messages, room chat, rooms you host, the party-room seats you take, gifts you send, and blocks you set |
| Device permissions | Camera and photo library, only when you choose to take or pick a profile photo |
| Purchase | One-time diamond pack purchases (pack, diamonds credited, price label, platform and store transaction ID) and your diamond balance. On the App Store each purchase also carries a pseudonymous account token derived from your Rynzi user ID, so diamonds are credited to the account that paid. We never see your card details. |
| Moderation records | Reports, moderation actions, appeals, and related records |
| Preferences and consents | App language, content language, notification choices, your marketing-measurement choice, when you accepted the Community Guidelines and EULA, and data-rights requests you submit |
| Device & advertising data | Only if you allow marketing measurement: advertising identifier (IDFA, only if you also allow tracking on iOS), IP address, device model, OS version, and install and purchase events, collected by our attribution partner Adjust |
We do not use third-party sign-in, we do not ask for your phone number, and we do not sell your personal data.
2. Purposes and legal bases
- Service delivery (contract): running your account, profile, rooms, and messages.
- Safety moderation (legitimate interest and legal obligation): filtering harmful content, handling reports, blocks, and appeals.
- In-app notifications: room, follow and message reminders shown in the app's notification center, which you can switch off at any time in Settings. Rynzi does not send push notifications.
- Payment (contract): crediting one-time diamond pack purchases made through the App Store, and keeping your diamond balance.
- Marketing measurement (consent): attributing installs and purchases to ad campaigns through Adjust, only if you allow it. The advertising identifier is only used if you also allow tracking on iOS.
- Legal duties (legal obligation): keeping records we are required to keep, such as dispute and fraud-prevention records.
3. Tracking and attribution
Rynzi uses Adjust (Adjust GmbH, Berlin) to measure which ads and campaigns lead people to install the app, and to count purchases, but only if you agree.
- We ask once, right after the age check. Until you tap Allow the Adjust SDK is not started and nothing is sent to Adjust. If you tap Don't allow, nothing is ever sent.
- You can withdraw at any time in Me → Privacy → Marketing measurement (Adjust). We then stop sending data and ask Adjust to erase the data it holds about your device. We make the same request when you delete your account.
- On iOS, after you agree, we also ask for your permission through Apple's App Tracking Transparency prompt. Only if you tap Allow do we share your device's advertising identifier (IDFA) with Adjust, which may link it with data from other companies' apps and websites for ad attribution. That is "tracking" as Apple defines it.
- If you choose Ask App Not to Track, the IDFA is not collected and Adjust only receives non-identifying install and event data (such as IP address, device model and OS version).
- We send Adjust two events: the install, and a purchase event with the price, currency and product ID of the diamond pack. We never send your email, profile, messages or room content.
- You can change the iOS tracking choice at any time in iOS Settings → Privacy & Security → Tracking. The app works the same whatever you choose.
Adjust's privacy policy: adjust.com/terms/privacy-policy
5. Retention
- Account and profile: kept while your account exists, and deleted when you delete your account, together with your preferences, the people you follow, your blocks, your diamond balance, data-rights requests and the photos you uploaded. The records listed below as kept after deletion (purchase records, reports, moderation records and appeals) stay linked to your sign-in: if you later sign up again with the same email and the same password, you return to the same account and those records appear again. Your profile, content and diamond balance do not come back.
- Interaction content: your messages, room chat, rooms and gifts sent are deleted when you delete your account. A report someone else filed may still contain the context they described.
- Account-deletion receipt: a record of when you deleted your account and that you confirmed it, kept so we can prove the deletion took place.
- Reports and moderation records: kept up to 24 months so appeals and repeat-behaviour checks remain possible.
- Purchase records: kept as long as tax and accounting law requires.
- Age decision: only the 18+ outcome and when it was checked are kept; the birth date is discarded immediately. If the check finds you are under 18, that outcome is also remembered on the device so it can't be bypassed by entering another date.
- Attribution data: kept by Adjust under its own retention policy until you withdraw consent or delete your account, when we ask Adjust to erase it. The advertising identifier is only collected while tracking is allowed.
6. Your rights (GDPR)
If you are in the EU/EEA or the UK you can request access, correction, deletion, restriction of processing, objection to processing, and portability of your data. You can also switch off in-app notifications or withdraw consent for marketing measurement at any time, and lodge a complaint with your local supervisory authority.
To make a request, open the app and go to Me → Settings → Data-rights request (also under Me → Privacy). You'll get a tracking number and can follow the status in the app. You can also email kattikari@icloud.com from the address linked to your account. We normally respond within one month; complex requests may take up to two more months, and we'll tell you why. To delete your account entirely, see Delete your account.
7. Contact and complaints
Controller contact: kattikari@icloud.com
Data protection officer: Rynzi DPO, Amsterdam, NL
Cross-border transfers: where data is processed outside the EEA we rely on the European Commission's standard contractual clauses.
If you are not satisfied with our response, you have the right to lodge a complaint with the data protection authority in the country where you live or work.