GDPR

Riff is operated by Riff Apps Limited, a company registered in England and Wales, which is the controller of your personal information. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page is a short summary; the full detail is in our Privacy Policy.

Our lawful bases

• Contract: to run your account, matching, messaging, calls, circles, AI features and purchases.
• Legitimate interests: safety, verification, preventing fraud and fake accounts, fixing problems, and emailing account holders about news and offers (you can unsubscribe at any time).
• Explicit consent: for sensitive information - who you would like to meet (which can reveal sexual orientation) and the selfie and ID checks.
• Legal obligation: keeping payment and tax records.

Your rights

You can ask for a copy of your information, have it corrected or deleted, restrict or object to its use, receive it in a portable format, and withdraw consent. Email privacy@riff-app.co.uk. We reply within one month. You can delete your account yourself in the app under Profile. You can also complain to the Information Commissioner's Office at ico.org.uk.

Where your information goes

We use service providers for hosting, AI features, verification, calls, payments, notifications and email. Some are outside the UK, in the European Union, the United States and China (Moonshot AI, which powers AI companions, Debate and Parallel Lives). The Privacy Policy lists every provider and what each receives.

Deleting your data

Deleting your account in the app removes your account and the information linked to it straight away. Safety reports and payment records are kept afterwards, as explained in the Privacy Policy. If you cannot get into the app, email privacy@riff-app.co.uk and we will delete your account within one month.

Contact

Data protection questions: privacy@riff-app.co.uk. ICO registration number ZC258314.