Privacy Policy

1. Who is responsible for your data

The controller under the General Data Protection Regulation (GDPR) is Jaimy Koorndijk, sole trader, trading as Rizzable. Postal address: Rivierenpark 19, 4535 EJ Terneuzen, the Netherlands (not a visiting address: please do not drop by, all contact goes by email). Email: support@rizzable.eu. Phone: +31 6 14375271. Jaimy builds and runs Rizzable on his own.

Contact for every privacy question or request: support@rizzable.eu. Put “Privacy” in the subject line so it is picked up first. There is no data protection officer, because the law does not require one for Rizzable; you deal with Jaimy directly.

2. What we collect and why

Below is everything the app and website process, grouped by purpose, with the legal basis (GDPR article 6) for each.

• Account: username, email address, password (stored only as a bcrypt hash), display name, date of birth, city and app language. Used to create and secure your account, to check that you are at least 13 and to place you in the teen (13–17) or adult group. Basis: performance of the contract with you (art. 6(1)(b)).
• Sign-in and security: login and reset codes sent by email (stored hashed, valid for 10 minutes, max. 5 attempts), session tokens (access 15 minutes, refresh 30 days) and the time you were last active. Basis: contract and our legitimate interest in keeping accounts secure (art. 6(1)(b) and (f)).
• Profile: bio (max. 180 characters), area, vibe, up to 8 interests, room colour, whether you appear in Discover, who may message you, notification settings and, if you asked for it, your verification status. Basis: contract.
• Location: only the city you choose. The app turns your city into a fixed city-centre point from a built-in list, to show plans and people nearby. We do not use GPS and never store your exact location. Basis: contract.
• Social activity: friendships (with an optional private note), blocks, circles you join or create, moments (text, max. 400 characters, erased 24 hours after posting), private reactions to moments, plans you host or join, plan reminders and plan share links. Basis: contract.
• Messages: direct messages and group chats, so they can be delivered and shown to the people in the conversation. Basis: contract.
• In-app notifications: notices about friend requests, plans, messages, moderation decisions and giveaways, shown inside the app. Basis: contract.
• Conversation starters (icebreakers): when you open one, our server fills a template sentence with interests you share with the other person. Nothing is stored and no AI is used (see AI & automation). Basis: contract.
• Safety and moderation: reports you file or that are filed about you (reason, optional note of max. 280 characters, the reported item), moderation decisions, statements of reasons and an audit log of what moderators did. Basis: legal obligation under the Digital Services Act (art. 6(1)(c)) and our legitimate interest in a safe service (art. 6(1)(f)).
• Rizzable Plus: whether you have an active Plus subscription, the product, period and status we receive from Apple or Google. We never see or store your card details. Basis: contract.
• Giveaways: your entry, for entrants under 18 the parent or guardian permission tick, the parent’s email address and the time of consent (and for under-16s the time the parent confirmed), the result of the draw and, only if you win and claim a prize, your shipping name and address. Basis: contract (the giveaway terms) and, for the shipping address, your consent (art. 6(1)(a)).
• Usage counts: per day, whether you were active and which main features you used, so we can see what works and spot abuse. Dashboards only show totals. Basis: legitimate interest.
• App configuration and updates: when the app starts, it asks our server for its settings and for updates, sending the platform, app version, your city and age group. The update request carries a random install ID that is only used to decide whether you get an update early and is not stored. Basis: legitimate interest in a working, up-to-date app.
• Support email: whatever you write to us and your email address. Basis: legitimate interest in answering you, or the contract if it is about your account.
• Website: the site sets no cookies. A small page counter can send the page path, the language and the referring website; the server keeps only daily totals per page and per referring domain. Visitors are counted once per day using a hash of IP address and browser that is calculated in memory with a key that changes daily and is never written to disk. Basis: legitimate interest.

We do not ask for photos, phone numbers, contacts, precise location, or sensitive data such as health, religion or sexual orientation. Please don’t share sensitive data about yourself or others in bios, moments or chats.

3. Teens (13–17) and parents

You must be at least 13 to use Rizzable. Teen accounts start private: they are hidden from Discover until the teen turns it on, only friends can message them, and teens and adults are kept apart, so adults cannot find, message or join plans with teens and the other way around.

In the Netherlands a child under 16 needs permission from a parent or guardian for any processing that is based on consent. Running your account is based on the contract, not on consent. For giveaways, entrants under 18 confirm that a parent or guardian agrees and give that parent’s email address, which we record with the time of consent; for entrants under 16 we email the parent a link and the entry only counts once the parent confirms. The parent’s email address is used for nothing else and is erased 60 days after the giveaway ends.

Parents and guardians can contact support@rizzable.eu to exercise rights on behalf of their child or to ask us to delete a child’s account.

4. Who sees your data

Other users see what you choose to share in the app. We share data with the following service providers only as far as needed:

• Hosting: our server and MariaDB database run in a data centre in the Netherlands. The hosting provider processes data on our behalf and cannot use it for its own purposes.
• Email: our mailbox and the emails the app sends (codes, welcome mail) are handled by ZXCS in the Netherlands, as our processor.
• Apple (App Store) and Google (Google Play): distribute the app and handle the full Plus purchase as independent controllers under their own privacy policies. We only receive the subscription status.
• Expo (EAS, by 650 Industries, USA): compiles the app and submits it to the stores. Expo does not receive user data from the live app: updates are delivered from our own server and we do not use Expo’s push or analytics services.
• Authorities: only when the law requires it, for example a valid order from a Dutch or EU authority, or when we report a threat to someone’s life or safety.

We never sell personal data, never share it with advertisers or data brokers, and do not use advertising or analytics SDKs.

5. Data outside the EU

Rizzable’s own data stays in the EU. Apple and Google may process your purchase data in the United States. Both participate in the EU-U.S. Data Privacy Framework, which the European Commission recognises as offering adequate protection, and they also use the Commission’s Standard Contractual Clauses. Expo, in the United States, only handles our source code and build files, not your personal data.

6. How long we keep data

• Your account and everything linked to it: until you delete your account. Deletion in the app is immediate (see section 8).
• Moments: erased 24 hours after posting. If a moment has an open report, it is kept, hidden, until that report is resolved, and then erased.
• Login and reset codes: valid for 10 minutes; session tokens: up to 30 days.
• Prize shipping addresses: stored encrypted (AES-256-GCM), readable only by the organiser, and deleted automatically 60 days after you provide them, or sooner when the prize has been sent. A parent’s email address on a giveaway entry: erased 60 days after the giveaway ends; unconfirmed entries of under-16s are deleted when the giveaway ends.
• Reports about an account, moderation decisions, statements of reasons and the moderation audit log: kept after an account is deleted for as long as needed to handle complaints, legal claims and repeat abuse, and at most 2 years after the decision. When an account is erased, the audit log keeps only a one-way fingerprint of the email address, not the address itself.
• Database backups: made before every update and deleted after 30 days.
• Support emails: deleted when your question is handled, at the latest 12 months after our last reply.
• Daily usage totals and website page counts: kept as totals that do not identify you.

7. Security

All traffic is encrypted with HTTPS. Passwords are hashed with bcrypt, sign-in codes are hashed, prize addresses are encrypted and app updates are code-signed. The admin desk uses separate accounts with two-factor authentication, role-based access and an audit log. If a data breach is likely to put you at risk, we notify the Dutch Data Protection Authority within 72 hours and tell you without undue delay.

8. Deleting your account

In the app: You → Settings (gear icon) → Delete account → type DELETE (or VERWIJDER in Dutch) → Delete forever. Your account is removed right away, together with your profile, moments, reactions, plans you host, memberships, messages you sent, friendships, blocks, reports you filed, notifications, giveaway entries and claims and Plus status on our side.

Without the app: email support@rizzable.eu from the address on your account with the subject “Delete my account”. We confirm and delete within 30 days, usually much sooner.

What remains: reports filed about you and moderation records as described in section 6, database backups until they expire after 30 days, and totals that no longer identify you. Deleting your account does not cancel a Plus subscription: cancel it in the App Store or Google Play.

9. Your rights

You have the right to access your data, to correct it (most of it you can edit in the app), to have it deleted, to restrict processing, to object to processing based on legitimate interest, to receive your data in a machine-readable format (portability), and to withdraw consent at any time without affecting processing before the withdrawal.

Email support@rizzable.eu. We may ask you to confirm from the email address on your account so we know it is you. We answer within one month; if a request is complex we may extend this by two months and will tell you why.

Not happy with how we handle your data? You can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or to the supervisory authority where you live.

10. Automated decisions and ranking

We do not make decisions with legal or similarly significant effects about you by automated means alone. Discover and the plan list are sorted by simple, fixed rules (shared interests, vibe and distance, explained on the Terms page); moderation decisions are always made by a person. Rizzable Plus never changes how you are ranked or shown.

11. Changes

If we change this policy, we update the date at the top. If a change materially affects how we use your data, we tell you in the app before it takes effect.