Draft, not yet reviewed by a lawyer. This text will change before Ridele launches.
Privacy statement
Ridele asks for less than most dating apps, and shows even less. Nobody sees your photos or profile before a mutual yes, and nobody ever sees your answers.
Controller: Ridele B.V. (in formation), the Netherlands. Contact: privacy@ridele.app. Supervisory authority: Autoriteit Persoonsgegevens.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Sign-in identity (Apple or Google) and email | Your account. One account per person. | Contract |
| First name and city | Your profile, and the evenings you can book. A match sees them after a mutual yes. | Contract |
| Date of birth | Ridele is 18+, and each evening has an age group. A match sees your age, never your date of birth. | Contract |
| Who you want to meet | Putting you in the right evenings. It can reveal your sexual orientation, which is special-category data (GDPR art. 9). Nobody else sees it, and it never goes to analytics. | Explicit consent, which you can withdraw in the app |
| Gender | Putting you in the right group for an evening. We treat it with the same care as who you want to meet. | Contract |
| Photos (1 to 6) | Shown only to you, to people you have a mutual yes with, and to the staff who review them. Stored in a private bucket in the EU and served through links that expire after 10 minutes. Location data is stripped before upload. | Contract |
| Bookings, waitlist places and evening attendance | Running evenings, and making sure you are never paired with the same person twice. | Contract |
| Your answer after each talk | Working out mutual yeses. Nobody sees your answers, and a yes that isn't returned is never shown, sent or counted where anyone can see it. | Contract |
| Matches and messages | The chat between you and a match. | Contract |
| Event tickets and check-in | Entry to a meetup. The host sees your first name and approved photo when checking you in. | Contract |
| Talk records: time, length, how a talk ended (never the audio) | Running evenings and handling reports. | Contract, legitimate interest |
| Reports, blocks, moderation decisions, trust score | Safety and preventing abuse. | Legitimate interest |
| Device and push tokens, app version | Reminders before an evening and new-message alerts. Message alerts never contain the text. | Contract |
| Product events with a random ID, not your account | Improving Ridele. Never includes your answers, gender or who you want to meet. You can opt out in the app. | Legitimate interest |
What we don't do
- We don't record your talks.
- The app doesn't ask for your location, your contacts or an advertising ID.
- We don't show ads, don't sell data, and don't let anyone pay to be seen.
- We never ask for or share phone numbers. Matches talk through the chat in the app.
How long we keep it
| Data | How long we keep it |
|---|---|
| Account and profile | Until you delete your account, then erased within 30 days |
| Date of birth | Until you delete your account |
| Who you want to meet, gender | Until you delete your account or withdraw consent |
| Photos | Until you delete them. All photos are deleted within 24 hours of deleting your account |
| Your answers after talks | 30 days after the evening |
| Who you met at which evening (not your answers) | Until one of you deletes your account, so you are never paired twice |
| Matches and messages | Until one of you unmatches, blocks or deletes your account |
| Bookings and tickets | 2 years after the evening or event, for our accounts, then anonymised |
| Talk records | 90 days, longer only when linked to a report |
| Reports and moderation decisions | 3 years |
| Ban records (a one-way hash, not your email) | The ban term plus 12 months |
| Product events | 12 months |
| Backups | 7 days |
A legal hold, for example during a police investigation, can keep specific records longer.
Who processes data for us
Cloudflare (hosting, voice calls, photo storage and email, EU), Neon (database, Frankfurt), Google Firebase (Android notifications), Apple (iOS notifications), Expo (app updates), PostHog (product analytics, EU), Sentry (crash reports, EU), the payment provider for meetup tickets to be confirmed, and contracted hosts at meetups. Apple and Google are independent controllers for sign-in and in-app purchases. Your data stays in the EU, except for Cloudflare handling requests at its nearest location, which standard contractual clauses cover.
Your rights
In your profile in the app you can see, export, correct and delete your data. In the app's settings you can withdraw your consent for who you want to meet (we then delete it, and you can't book new evenings) and opt out of analytics. You can also ask us anything at privacy@ridele.app. We answer within 30 days. You can complain to the Autoriteit Persoonsgegevens.