Privacy Policy

This describes what RYZZ actually stores and does. Where the answer is “nothing”, that is because the system was built so there is nothing to store, not because we promise to be careful with it.

Who we are

RYZZ UP is operated by Ryzz Up LLC. Contact us at info@ryzzup.com for any privacy question, including a request to see or delete your data.

What we collect

• Your email address and a password hash. We never store the password itself.
• Your profile — display name, age, description, intents, interests, photo.
• How you present, because it decides which genres you may enter.
• An approximate area. See below; this is the important one.
• Activity — who you have skipped or shown interest in, and when you were last active.
• Messages, encrypted, described below.
• Payment records from Stripe. We never see or hold your card number.

Location: what we do not have

We do not store your coordinates. Your device turns your position into a geohash cell — a square of the map — and only the cell is sent and saved. The square is widened automatically where there are fewer people around, so a cell never describes a small enough area to identify a home, and it is widened further in higher-risk countries.

Other members never see a distance in numbers. They see a band, and that band is nudged differently for each viewer, so nobody can compare readings to triangulate you. Presence records expire on their own.

The map is drawn from tiles we fetch on your behalf. The map provider sees our server, never your device or your IP.

Messages

Messages between members are end-to-end encrypted in your browser. The key is generated on your device and never sent to us; our API rejects anything shaped like one. We hold ciphertext we cannot read.

Two honest limits. Conversations with clearly-labelled demo profiles are not encrypted, because those profiles have no keys. And if you report someone, your device attaches the conversation it can already read — that copy is visible to moderators, because otherwise a report would be unactionable. Nothing else opens it.

How long we keep things

• Messages — on the free and PLUS plans, messages older than seven days are deleted automatically. PRO and ELITE keep conversation history until you delete it. If either person blocks, the conversation is deleted immediately at every plan.
• Location cells — expire on their own, in hours.
• Your account — until you delete it. Leaving a genre deletes your profile in that genre and touches no other.
• Child-safety evidence — where we are legally required to preserve material, we do so for one year, as US federal law requires.

Who else touches your data

• Stripe — payments. They handle card data; we never receive it.
• Resend — the emails we send you.
• Neon — the database.
• Vercel — hosting.
• Esri and OpenStreetMap — map tiles, fetched by us, never by you.
• Anthropic — screens every photo you upload before it is published, and answers the in-app assistant when you use it. Photos are sent for that check; assistant messages are sent so it can reply. Neither is used to train their models, and neither is used for advertising.
• Cloudflare — a second photo screener, used only when the first is unavailable. It sees the same photo and nothing else.
• The Canadian Centre for Child Protection — every photo is checked against their database of known child sexual abuse material before it is published, through their Arachnid Shield service. They are a child-protection charity, not an advertiser, and the check is the reason this platform can be confident about what it hosts.

Both of those see photographs of you. We list them for the same reason we list the others: a service that handles your data belongs in this list whether or not it is the part you would have guessed.

We do not sell your data. We do not share it with advertisers.

Advertising

Free accounts see occasional sponsored cards in the discovery flow. These are chosen by position, not by anything about you — there is no ad network, no tracking pixel, no profile built for targeting, and no data leaves RYZZ to serve them. Paid plans see fewer or none.

Your rights

You can ask for a copy of your data, correct it, delete it, or object to how we use it. In the UK and EU those are rights under the GDPR; in California, under the CCPA/CPRA. Email info@ryzzup.com. You can withdraw marketing consent at any time without affecting your account.

Where your data lives

RYZZ is operated from the United States and your data is processed there. Where you are in the UK or EU, that transfer relies on Standard Contractual Clauses with our processors.

Children

RYZZ is strictly 18+. We do not knowingly hold data about anyone under 18, and any account we believe belongs to a minor is removed.