Privacy Policy

Summary

Rizzly is an AI dating assistant. We are designed to collect as little personal data as possible. This policy explains exactly what we do and don't collect, how we use it, and your rights over it.

Who we are

Rizzly is operated by BasedLabs. Contact: privacy@rizzly.ai. If you're in the EU/UK, this document serves as our notice under GDPR / UK GDPR.

What we collect

• Account identifiers. A device-bound anonymous ID on first launch. Optionally an email and name if you sign in with Apple or Google.
• Screenshots you upload. Images you share for reply generation. Stored temporarily (see retention below), never used to train AI.
• Text you type. Chat context you enter manually or prompts you focus on.
• Generated replies. The AI output we produce for you.
• Subscription state. Whether you have an active trial or paid subscription, via our payments processor RevenueCat.
• Diagnostic events. Anonymous usage events (screen views, feature taps) via PostHog to debug crashes and improve the product.
• Advertising identifiers. If you allow tracking when prompted, your device's Advertising Identifier (IDFA on iOS) and related device identifiers, used to measure the performance of ads we run on Meta and TikTok. See “Advertising and attribution” below.

What we do NOT collect

• We do NOT access your contacts, location, camera roll (beyond what you explicitly share), microphone, or health data.
• We do NOT sell personal data. Period.
• We do NOT use your chats or screenshots to train our AI.
• We do NOT use the Advertising Identifier unless you grant tracking permission when iOS asks — if you decline, no IDFA is collected and ad measurement falls back to privacy-preserving methods only.

Advertising and attribution

We run ads for Rizzly on Meta (Facebook/Instagram) and TikTok, and we measure which ads actually lead to installs and subscriptions so we don't waste money on ones that don't. To do this we include the Meta and TikTok measurement SDKs in the app and, on our website, the Meta Pixel.

• App Tracking Transparency. On iOS we ask for your permission before any cross-app tracking. If you decline, we do not use your IDFA and rely only on Apple's privacy-preserving attribution (AdServices / SKAdNetwork), which does not identify you.
• What's shared for matching. To connect an ad click to an install or purchase, limited identifiers — a hashed email, device identifiers, and ad-network anonymous IDs — may be shared with Meta and TikTok. We never share your chats, screenshots, or generated replies with advertisers.
• RevenueCat. Our payments provider RevenueCat forwards subscription and purchase conversion events to Meta and TikTok on our behalf, server-to-server, using those hashed identifiers.

You can withdraw tracking consent any time in iOS Settings → Privacy & Security → Tracking, or limit ad tracking in your Meta and TikTok account settings.

Third-party AI data sharing

To generate replies, Rizzly sends the text you type and any screenshot you attach to one of the AI providers below, proxied through fal.ai (our infrastructure provider). Nothing else is sent — not your name, contacts, location, or any other app data. You are asked to explicitly consent before the first AI call; you can revoke that consent any time from Settings → Privacy → Revoke AI Data Sharing.

• Anthropic (Claude). Used for sincere / general-mode replies.
• Google (Gemini). Used for fast / casual-mode replies.
• xAI (Grok). Used for NSFW mode, only if you explicitly opt in.
• fal.ai. Routing proxy used to forward requests to the provider above.

Under our API contracts with these providers, none of them train their models on content generated through Rizzly. We never share your chats, screenshots, or generated replies with advertisers, data brokers, or social platforms — the only data shared with ad platforms is the limited attribution identifiers described under “Advertising and attribution.”

Retention

• Uploaded screenshots: deleted within 30 days of upload (usually much sooner).
• Generated replies: retained while your account is active; deleted on account deletion.
• Subscription records: kept for 7 years to satisfy tax / accounting law.
• Diagnostic events: rolling 90-day window in PostHog.

Your rights

• Delete your account. Settings → Delete Account, OR visit rizzly.ai/delete-my-account. This removes all your generated replies, screenshots, and account data within 24 hours.
• Export your data. Email privacy@rizzly.ai and we'll send a JSON export within 30 days.
• Opt out of diagnostic events. Settings → Privacy → toggle off.
• EU/UK users: you have the right to object to processing, to restrict processing, and to lodge a complaint with your supervisory authority.

Children

Rizzly is 17+ and not intended for anyone under 18. We do not knowingly collect data from minors. If you believe we have, email privacy@rizzly.ai for removal.

Changes

If we change this policy materially, we'll notify you in the app before the change takes effect.