This Privacy Policy explains how Rifelan ("Rifelan", "we", "us") collects, uses, shares and protects personal data when you use the Rifelan mobile applications, website and related services (together, the "Service"). We act as the data controller for this processing.
Account data: username, email address, password (stored hashed), date of birth or age confirmation, and optional profile details such as display name, avatar, bio, country and interests.
Content data: messages you send in public chat rooms, private messages, images or files you upload, and room memberships. Public room messages are visible to other participants.
Technical data: device model, operating system, app version, language, approximate location derived from IP address, IP address, crash reports and diagnostic logs.
Usage data: sessions, features used, rooms visited, and interaction events used to improve the Service.
Support and safety data: reports, blocks, moderation decisions and correspondence with our support team.
We use personal data to create and manage your account; deliver messages and chat room functionality; personalise room and category recommendations; keep the Service secure; detect abuse, spam and illegal content; provide customer support; comply with legal obligations; and analyse and improve the Service.
We rely on: performance of a contract (providing the Service you signed up for); legitimate interests (security, abuse prevention, product improvement); consent (optional analytics, marketing communications, push notifications where required); and legal obligation (responding to lawful requests, retaining records).
Where we rely on consent, you can withdraw it at any time in the app settings or by contacting us.
We do not sell your personal data. We share data with service providers acting on our behalf — hosting and database providers, push notification services, crash reporting and analytics providers, and content moderation tooling — under contracts that limit their use of the data.
We may disclose data where legally required, to enforce our Terms and Conditions, or to protect the rights, safety and property of users and the public. If Rifelan is involved in a merger, acquisition or asset sale, data may be transferred as part of that transaction.
Your data may be processed in countries outside your own, including outside the European Economic Area. Where this happens, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses or transfers to countries with an adequacy decision.
We keep account data for as long as your account is active. Public room messages may be retained to preserve conversation history. After you delete your account, we delete or anonymise your personal data within 90 days, except where a longer period is required for legal, security, fraud-prevention or dispute-resolution purposes.
Depending on where you live, you may have the right to access, correct, delete or export your data; to object to or restrict certain processing; to withdraw consent; and to lodge a complaint with your local data protection authority. To exercise these rights, contact us using the details below. We respond within one month.
California residents may additionally request disclosure of the categories of personal information collected and shared, and may opt out of "sharing" for cross-context behavioural advertising. We do not sell personal information.
We use encryption in transit (TLS), hashed password storage, access controls and monitoring to protect your data. No system is completely secure; please use a strong, unique password and keep your login credentials confidential.
Rifelan is not intended for children under 13 (or under 16 where local law requires a higher age). We do not knowingly collect data from children below that age. If we learn that we have, we delete the account and its data. Parents or guardians can contact us to request removal.
Our website uses strictly necessary cookies for security and session management, and — with your consent where required — analytics cookies to understand how the site is used. Our apps use device identifiers for crash reporting and analytics. You can control these in your browser or device settings.
We may update this Privacy Policy. When we make material changes, we will notify you in the app or by email before the changes take effect, and update the "Last updated" date above.
Questions or requests about privacy: privacy@rifelan.com.