Privacy Policy
Rivler · questions any time at m2mb@info.com
PRIVACY POLICY
Rivler — live social video
Effective date: 21 August 2026 · Version 4.2
This Privacy Policy explains what Rivler ("Rivler", "we", "us", "our") collects, why we collect it, how long we keep it, who we share it with, and every choice you have. Please read it carefully — by using Rivler you agree to the practices described here. Capitalised terms not defined here have the meanings given in our Terms of Service. This policy is also available at any time from Settings → Privacy Policy inside the app.
1. WHO WE ARE AND WHAT THIS POLICY COVERS
Rivler is the data controller for the personal information described in this policy. Contact: m2mb@info.com. This policy covers our handling of information collected through the Rivler app and service. It does not cover the practices of third parties we do not own or control — including other users, the app stores you install Rivler from, or external services you reach through Rivler — and we encourage you to review their policies separately.
2. THE SERVICE, IN ONE LINE
Rivler pairs people into live video rooms with games, lets you browse who is online and ask them to meet, and lets people who chose each other stay connected: friends, messaging, and calls. This policy is written around exactly that — nothing more is collected than the product needs.
3. INFORMATION YOU PROVIDE
• A handle you choose (no real name required — and we ask you NOT to use one)
• Your date of birth (to enforce our 18+ policy and to match you with people near your age — never shown to anyone) and your gender
• Your primary language and your interests — these are what the matching actually runs on
• Profile details you CHOOSE to add, all optional: a bio, city, pronouns, what you're looking for, and a profile photo. Your COUNTRY is taken from your phone's region setting (a country, never GPS or a precise location) purely to nudge matching
• Reports you file about other users, and the people you block, save, or add as friends
• Anything you include when you contact us at m2mb@info.com
4. SIGNING IN — APPLE OR GOOGLE, REQUIRED
Rivler requires an account: Sign in with Apple on iOS, Sign in with Google on Android. There is no guest mode — a real, verifiable identity is what makes suspensions actually stick, and it is why your friends, messages and profile survive a reinstall. Whichever you use, we receive and store ONLY the anonymous user identifier that provider issues for Rivler — a random string. We do not request, read, or store your name or email address from Apple or from Google.
5. CAMERA AND MICROPHONE — NEVER RECORDED
WE DO NOT RECORD OR STORE YOUR VIDEO OR AUDIO. When a room ends, the stream ends. There is no archive, no server-side capture, no face or voice recognition, and no use of your video or audio to train AI systems.
One honest exception, and it is a SAFETY CHECK, not a recording: every few seconds the app takes a single still frame of the OTHER person's video on your phone, shrinks it to a thumbnail, and sends it to be checked for nudity and other content that breaks our rules. If it fails that check, their video is covered on your screen straight away. The frame is examined and discarded in the same moment — it is never written to disk, never stored, never attached to your account, never seen by a person, and never used to train anything. Nothing is kept, which is why we can still say your rooms are not recorded. Audio is never analysed at all. Section 15 names the processor that performs this check. In most one-to-one rooms your video travels directly between the two phones and never touches our servers at all; in group rooms and when a direct connection isn't possible, it is relayed in real time by our video provider without being recorded. This is the foundation of Rivler and it does not change.
6. MESSAGES AND MEDIA YOU SEND
When you and another person become friends, you can message each other. To deliver messages across devices and sessions, we store on our servers:
• Your messages — text, voice notes, photos, GIF links, game invites, and call records (who called whom, when, missed/answered) — with timestamps
• Reactions to messages and how far each side has read (read receipts)
• The media bytes themselves for photos, voice notes and profile photos (up to 1MB per item)
Photos and voice notes sent in chats are automatically deleted from our servers 90 days after sending. Profile photos are kept while your account exists (replacing your photo deletes the old one). GIFs are links served by Tenor (a Google service) — when you search GIFs, your search text is sent to Tenor; we never send Tenor your identity.
Remember: the people you message can screenshot, save, or copy what you send, on their own devices, outside our control. Do not send anything you would not want kept.
7. YOUR SOCIAL GRAPH AND GAME RECORD
To make "the people you liked never disappear" work, we store:
• Friendships and friend requests (including who asked, when you matched, and the tier/pin settings you choose)
• An encounter log: who you met in rooms, when, roughly how long you talked, and the countries involved — this powers "Recently met", stops you being rematched with the same stranger immediately, and counts your countries-met stat
• Post-room answers to "Would you meet this person again?" and personality-trait votes you cast and receive (profiles show aggregated tallies; individual votes are never shown to anyone)
• Your persistent record: rooms, streaks, laughs, wins, badges and titles
• Internal quality signals derived from reports, blocks and ratings, used ONLY to improve matchmaking. They are never displayed, never shared, and never sold.
8. IN-ROOM GAMEPLAY
While you play: round answers, votes, and reactions are processed in server memory to run the room, then discarded when the room ends. Moment cards (the shareable game-verdict graphics) are generated and stored on your device only.
9. ANALYTICS
We use Firebase Analytics to understand which screens and games people use, in aggregate (e.g. "how many rooms started today"). We answer "no" to tracking under Apple's App Tracking Transparency because we do not track you across other companies' apps or websites, and we do not use analytics data to identify you.
10. PUSH NOTIFICATIONS
If you allow notifications, we store a device push token so we can tell you things like a friend coming online, a new message, or a friend request. Sending uses Apple Push Notification service and Google Firebase Cloud Messaging. Turn notifications off in your device Settings at any time; the token stops being used.
11. TECHNICAL DATA AND YOUR DEVICE IDENTIFIER
Like every online service, our servers momentarily see your IP address and connection metadata when your device connects. We use it transiently for delivery, rate limiting, and abuse prevention (for example, limiting how many simultaneous connections one address can open). We do not build profiles from it.
We also generate a random identifier for your device and store it in your phone's secure keychain. It is a random string — it contains nothing about you, is not your advertising identifier, and is never shared with anyone. Its only job is safety: it is what stops someone who has been suspended from deleting the app, reinstalling it, and walking straight back in. It is linked to the accounts that have signed in on this device, and to any suspension applied to it.
12. WHAT WE DO NOT DO
• We do not record rooms — no video, no audio, no transcripts of live rooms (the safety check in section 5 keeps nothing)
• We do not request your contacts or address book
• We do not collect GPS or precise location
• We do not use cookies, web tracking, or advertising identifiers
• We do not show ads, and we do not sell or rent personal data to anyone
• We do not use your content or your conversations to train AI systems
To be precise about the one thing people care most about: "never recorded"
means LIVE ROOM video and audio. It does not mean we hold nothing at all —
the things we do hold are listed in sections 3, 6 and 7; the automated
screen every upload passes through is in section 12a, and the places a
human may look at your content are listed in section 12b.
12a. AUTOMATED SCREENING, BEFORE ANYTHING IS EVEN POSTED
On top of report + block, Rivler runs an automated content-safety filter over
photos and text at the moment you submit them — profile photos, chat photos,
your handle, your bio, and messages — and blocks the worst of it outright,
before it is ever stored or shown to anyone. This is automated pattern
matching, not a person, and it runs on every relevant upload, not only after
a complaint. See section 15 for the processor that performs this scan.
The same filter also runs on live video, as described in section 5: a still
frame every few seconds, checked and discarded, so a camera that goes where
it should not is covered on the other person's screen within seconds rather
than after somebody files a report. Repeated failures file a report on their
own. You can always choose to view a covered camera anyway — the check is
automated and occasionally wrong, so it never gets the final word.
12b. WHEN A HUMAN MAY SEE SOMETHING
We would rather over-explain this than let "never recorded" be read as more
than it is:
• If someone reports your profile photo or a photo/voice note you sent, a
moderator may open that specific item to decide whether it breaks the rules,
and may remove it. Reported items are only ever viewed in response to a
report, never browsed.
• Crash and error diagnostics sent to Firebase include the technical error
text from the failure. They do not contain your messages or media.
• Report records contain who reported whom, the category, the time, and which
room it happened in.
Live room video and audio are never in any of this, because they are never
captured in the first place.
12c. DISCOVERY — WHO CAN SEE YOU
Rivler has an Explore tab: a grid of people who are online right now, so the
app still works when the matching queue is quiet.
• While you are online and signed in, other signed-in adults may see a CARD:
your handle, your avatar, your title if you have one, your country, and any
interests you and they share. Nothing else.
• Your date of birth is NEVER shown — only a derived age on the profile you
choose to open.
• Only people who have completed sign-in appear in Explore or can ask
someone to meet — there is no way to browse or be browsed without an
account.
• Tapping your card does not connect anyone to you. It sends a request that
rings, exactly like a call, and nothing happens unless you accept.
• You can switch this off completely: Settings → Discovery → "Show me in
Explore". With it off you disappear from the grid entirely and can still
play, message, and use every other part of Rivler.
People you have blocked, and people either of you answered "never again"
about, never see each other in Explore.
13. HOW WE USE INFORMATION
To run the service you asked for (matching, rooms, games, friends, messaging, calls); to keep the community safe (report handling, blocks, abuse prevention, under-18 removal); to maintain and improve Rivler using aggregate statistics; and to communicate service messages. We do not use your information for marketing to third parties.
14. LEGAL BASES (EEA / UK)
Where GDPR / UK GDPR applies we rely on: performance of a contract (running the service — matching, games, friends, messaging); legitimate interests (safety, security, abuse prevention, aggregate analytics); and consent (camera/microphone access, push notifications, optional profile details — each revocable at any time in device Settings or by removing the details). We do not use automated decision-making producing legal effects; the only automated action is removal after repeated community reports, which you can contest at m2mb@info.com. California residents: we do not "sell" or "share" personal information as defined by the CCPA/CPRA, and we honour access and deletion requests as described below.
15. WHO WE SHARE WITH
We share personal data only with the processors that make the service run, each bound to process it solely on our instructions:
• LiveKit — real-time video relay for group rooms and fallback connections (no recording)
• Railway — server hosting
• Supabase — our database host
• OpenAI — automated content-safety screening of photos, text, and the live-video safety frames described in section 5, at the moment they are submitted (section 12a); used for moderation only, on that single request, never stored by us, and never used to train any model
• Google Firebase — analytics and push delivery
• Apple — Sign in with Apple and push delivery
• Google — Sign in with Google
• Tenor (Google) — GIF search results (receives your search text only)
We may also disclose information: with your consent; to comply with law or valid legal process; to enforce our Terms or protect the rights, property, or safety of Rivler, our users, or the public; and as aggregate, anonymised statistics that identify no one. If Rivler is involved in a merger, acquisition, or sale of assets, user information may be part of the transferred assets — we will notify you (in-app and/or on this page) of any change in ownership or in how your information is handled.
16. GOVERNMENT AND LAW-ENFORCEMENT REQUESTS
We review every government or law-enforcement request individually and require valid legal process that states its legal basis and identifies the account concerned. We may narrow or reject requests that are overbroad. Where permitted, we may notify affected users. If we receive information giving us a good-faith belief of an emergency involving danger of death or serious physical injury, we may disclose the limited information necessary to prevent that harm — remember that we hold no video or audio of anyone.
17. HOW LONG WE KEEP THINGS
• Account and profile data (handle, profile details, photo): while your account exists
• Friendships, encounter log, ratings, votes, stats and badges: while your account exists
• Messages: until you delete your account (your sent messages are then deleted)
• Chat photos and voice notes: 90 days from sending, then deleted automatically
• Push token: until you disable notifications or delete your account
• Reports (including the category and the media item reported, if any): up to
24 months, for community safety, even after account deletion
• Rolling database backups: purged within 30 days
There is no video or audio retention because none is ever captured.
18. DELETING YOUR ACCOUNT
In-app: Settings → Delete account removes your device data AND instructs our servers to delete your account record, profile and photo, friendships and requests, the messages and media you sent, your encounter log, ratings and votes you cast, stats, badges and push token immediately; residual copies leave backups within 30 days. No app access? Email m2mb@info.com from any address with your handle and we will delete within 30 days. Three honest caveats: messages and media already delivered to other people's devices may persist on their side; report records about behaviour may be retained for community safety; and if your account or device is under an active suspension, the record of that suspension is retained so deletion cannot be used to escape it. Deletion is permanent — friendships and messages cannot be recovered. See /delete-account for the step-by-step guide.
19. YOUR RIGHTS
Depending on where you live, you may have the right to access, correct, export, restrict, object to processing of, or delete your personal data, and to withdraw consent at any time. Exercise any of them by emailing m2mb@info.com — we answer within 30 days and may ask you to verify control of the account first (a safeguard, not an obstacle). If you are in the EEA or UK you may also complain to your data-protection authority (in the UK, the ICO at ico.org.uk).
20. CHILDREN
Rivler is strictly 18+. We do not knowingly collect data from anyone under 18. Discovery of an under-18 account leads to removal and deletion of its data. Report one: m2mb@info.com.
21. SECURITY
All traffic is encrypted in transit (TLS). Media access is token-protected. Access to production systems is restricted and logged. In most one-to-one rooms your video never touches a server at all. No internet service can promise absolute security, but our best protection is structural: we simply do not hold your video, audio, real name, email, or precise location.
22. INTERNATIONAL TRANSFERS
Our processors operate in the United States and Europe. Where data leaves the UK/EEA it is protected by appropriate safeguards (standard contractual clauses or an adequacy decision). By using the service you acknowledge this transfer.
23. CHANGES TO THIS POLICY
If we make material changes we will post the new version here and flag it in the app at least 7 days before it takes effect, so you can review it (or delete your account) first. Continued use after the effective date means you accept the new version.
24. CONTACT
Questions, requests, complaints: m2mb@info.com. We read everything.
Rivler — live social video
Effective date: 21 August 2026 · Version 4.2
This Privacy Policy explains what Rivler ("Rivler", "we", "us", "our") collects, why we collect it, how long we keep it, who we share it with, and every choice you have. Please read it carefully — by using Rivler you agree to the practices described here. Capitalised terms not defined here have the meanings given in our Terms of Service. This policy is also available at any time from Settings → Privacy Policy inside the app.
1. WHO WE ARE AND WHAT THIS POLICY COVERS
Rivler is the data controller for the personal information described in this policy. Contact: m2mb@info.com. This policy covers our handling of information collected through the Rivler app and service. It does not cover the practices of third parties we do not own or control — including other users, the app stores you install Rivler from, or external services you reach through Rivler — and we encourage you to review their policies separately.
2. THE SERVICE, IN ONE LINE
Rivler pairs people into live video rooms with games, lets you browse who is online and ask them to meet, and lets people who chose each other stay connected: friends, messaging, and calls. This policy is written around exactly that — nothing more is collected than the product needs.
3. INFORMATION YOU PROVIDE
• A handle you choose (no real name required — and we ask you NOT to use one)
• Your date of birth (to enforce our 18+ policy and to match you with people near your age — never shown to anyone) and your gender
• Your primary language and your interests — these are what the matching actually runs on
• Profile details you CHOOSE to add, all optional: a bio, city, pronouns, what you're looking for, and a profile photo. Your COUNTRY is taken from your phone's region setting (a country, never GPS or a precise location) purely to nudge matching
• Reports you file about other users, and the people you block, save, or add as friends
• Anything you include when you contact us at m2mb@info.com
4. SIGNING IN — APPLE OR GOOGLE, REQUIRED
Rivler requires an account: Sign in with Apple on iOS, Sign in with Google on Android. There is no guest mode — a real, verifiable identity is what makes suspensions actually stick, and it is why your friends, messages and profile survive a reinstall. Whichever you use, we receive and store ONLY the anonymous user identifier that provider issues for Rivler — a random string. We do not request, read, or store your name or email address from Apple or from Google.
5. CAMERA AND MICROPHONE — NEVER RECORDED
WE DO NOT RECORD OR STORE YOUR VIDEO OR AUDIO. When a room ends, the stream ends. There is no archive, no server-side capture, no face or voice recognition, and no use of your video or audio to train AI systems.
One honest exception, and it is a SAFETY CHECK, not a recording: every few seconds the app takes a single still frame of the OTHER person's video on your phone, shrinks it to a thumbnail, and sends it to be checked for nudity and other content that breaks our rules. If it fails that check, their video is covered on your screen straight away. The frame is examined and discarded in the same moment — it is never written to disk, never stored, never attached to your account, never seen by a person, and never used to train anything. Nothing is kept, which is why we can still say your rooms are not recorded. Audio is never analysed at all. Section 15 names the processor that performs this check. In most one-to-one rooms your video travels directly between the two phones and never touches our servers at all; in group rooms and when a direct connection isn't possible, it is relayed in real time by our video provider without being recorded. This is the foundation of Rivler and it does not change.
6. MESSAGES AND MEDIA YOU SEND
When you and another person become friends, you can message each other. To deliver messages across devices and sessions, we store on our servers:
• Your messages — text, voice notes, photos, GIF links, game invites, and call records (who called whom, when, missed/answered) — with timestamps
• Reactions to messages and how far each side has read (read receipts)
• The media bytes themselves for photos, voice notes and profile photos (up to 1MB per item)
Photos and voice notes sent in chats are automatically deleted from our servers 90 days after sending. Profile photos are kept while your account exists (replacing your photo deletes the old one). GIFs are links served by Tenor (a Google service) — when you search GIFs, your search text is sent to Tenor; we never send Tenor your identity.
Remember: the people you message can screenshot, save, or copy what you send, on their own devices, outside our control. Do not send anything you would not want kept.
7. YOUR SOCIAL GRAPH AND GAME RECORD
To make "the people you liked never disappear" work, we store:
• Friendships and friend requests (including who asked, when you matched, and the tier/pin settings you choose)
• An encounter log: who you met in rooms, when, roughly how long you talked, and the countries involved — this powers "Recently met", stops you being rematched with the same stranger immediately, and counts your countries-met stat
• Post-room answers to "Would you meet this person again?" and personality-trait votes you cast and receive (profiles show aggregated tallies; individual votes are never shown to anyone)
• Your persistent record: rooms, streaks, laughs, wins, badges and titles
• Internal quality signals derived from reports, blocks and ratings, used ONLY to improve matchmaking. They are never displayed, never shared, and never sold.
8. IN-ROOM GAMEPLAY
While you play: round answers, votes, and reactions are processed in server memory to run the room, then discarded when the room ends. Moment cards (the shareable game-verdict graphics) are generated and stored on your device only.
9. ANALYTICS
We use Firebase Analytics to understand which screens and games people use, in aggregate (e.g. "how many rooms started today"). We answer "no" to tracking under Apple's App Tracking Transparency because we do not track you across other companies' apps or websites, and we do not use analytics data to identify you.
10. PUSH NOTIFICATIONS
If you allow notifications, we store a device push token so we can tell you things like a friend coming online, a new message, or a friend request. Sending uses Apple Push Notification service and Google Firebase Cloud Messaging. Turn notifications off in your device Settings at any time; the token stops being used.
11. TECHNICAL DATA AND YOUR DEVICE IDENTIFIER
Like every online service, our servers momentarily see your IP address and connection metadata when your device connects. We use it transiently for delivery, rate limiting, and abuse prevention (for example, limiting how many simultaneous connections one address can open). We do not build profiles from it.
We also generate a random identifier for your device and store it in your phone's secure keychain. It is a random string — it contains nothing about you, is not your advertising identifier, and is never shared with anyone. Its only job is safety: it is what stops someone who has been suspended from deleting the app, reinstalling it, and walking straight back in. It is linked to the accounts that have signed in on this device, and to any suspension applied to it.
12. WHAT WE DO NOT DO
• We do not record rooms — no video, no audio, no transcripts of live rooms (the safety check in section 5 keeps nothing)
• We do not request your contacts or address book
• We do not collect GPS or precise location
• We do not use cookies, web tracking, or advertising identifiers
• We do not show ads, and we do not sell or rent personal data to anyone
• We do not use your content or your conversations to train AI systems
To be precise about the one thing people care most about: "never recorded"
means LIVE ROOM video and audio. It does not mean we hold nothing at all —
the things we do hold are listed in sections 3, 6 and 7; the automated
screen every upload passes through is in section 12a, and the places a
human may look at your content are listed in section 12b.
12a. AUTOMATED SCREENING, BEFORE ANYTHING IS EVEN POSTED
On top of report + block, Rivler runs an automated content-safety filter over
photos and text at the moment you submit them — profile photos, chat photos,
your handle, your bio, and messages — and blocks the worst of it outright,
before it is ever stored or shown to anyone. This is automated pattern
matching, not a person, and it runs on every relevant upload, not only after
a complaint. See section 15 for the processor that performs this scan.
The same filter also runs on live video, as described in section 5: a still
frame every few seconds, checked and discarded, so a camera that goes where
it should not is covered on the other person's screen within seconds rather
than after somebody files a report. Repeated failures file a report on their
own. You can always choose to view a covered camera anyway — the check is
automated and occasionally wrong, so it never gets the final word.
12b. WHEN A HUMAN MAY SEE SOMETHING
We would rather over-explain this than let "never recorded" be read as more
than it is:
• If someone reports your profile photo or a photo/voice note you sent, a
moderator may open that specific item to decide whether it breaks the rules,
and may remove it. Reported items are only ever viewed in response to a
report, never browsed.
• Crash and error diagnostics sent to Firebase include the technical error
text from the failure. They do not contain your messages or media.
• Report records contain who reported whom, the category, the time, and which
room it happened in.
Live room video and audio are never in any of this, because they are never
captured in the first place.
12c. DISCOVERY — WHO CAN SEE YOU
Rivler has an Explore tab: a grid of people who are online right now, so the
app still works when the matching queue is quiet.
• While you are online and signed in, other signed-in adults may see a CARD:
your handle, your avatar, your title if you have one, your country, and any
interests you and they share. Nothing else.
• Your date of birth is NEVER shown — only a derived age on the profile you
choose to open.
• Only people who have completed sign-in appear in Explore or can ask
someone to meet — there is no way to browse or be browsed without an
account.
• Tapping your card does not connect anyone to you. It sends a request that
rings, exactly like a call, and nothing happens unless you accept.
• You can switch this off completely: Settings → Discovery → "Show me in
Explore". With it off you disappear from the grid entirely and can still
play, message, and use every other part of Rivler.
People you have blocked, and people either of you answered "never again"
about, never see each other in Explore.
13. HOW WE USE INFORMATION
To run the service you asked for (matching, rooms, games, friends, messaging, calls); to keep the community safe (report handling, blocks, abuse prevention, under-18 removal); to maintain and improve Rivler using aggregate statistics; and to communicate service messages. We do not use your information for marketing to third parties.
14. LEGAL BASES (EEA / UK)
Where GDPR / UK GDPR applies we rely on: performance of a contract (running the service — matching, games, friends, messaging); legitimate interests (safety, security, abuse prevention, aggregate analytics); and consent (camera/microphone access, push notifications, optional profile details — each revocable at any time in device Settings or by removing the details). We do not use automated decision-making producing legal effects; the only automated action is removal after repeated community reports, which you can contest at m2mb@info.com. California residents: we do not "sell" or "share" personal information as defined by the CCPA/CPRA, and we honour access and deletion requests as described below.
15. WHO WE SHARE WITH
We share personal data only with the processors that make the service run, each bound to process it solely on our instructions:
• LiveKit — real-time video relay for group rooms and fallback connections (no recording)
• Railway — server hosting
• Supabase — our database host
• OpenAI — automated content-safety screening of photos, text, and the live-video safety frames described in section 5, at the moment they are submitted (section 12a); used for moderation only, on that single request, never stored by us, and never used to train any model
• Google Firebase — analytics and push delivery
• Apple — Sign in with Apple and push delivery
• Google — Sign in with Google
• Tenor (Google) — GIF search results (receives your search text only)
We may also disclose information: with your consent; to comply with law or valid legal process; to enforce our Terms or protect the rights, property, or safety of Rivler, our users, or the public; and as aggregate, anonymised statistics that identify no one. If Rivler is involved in a merger, acquisition, or sale of assets, user information may be part of the transferred assets — we will notify you (in-app and/or on this page) of any change in ownership or in how your information is handled.
16. GOVERNMENT AND LAW-ENFORCEMENT REQUESTS
We review every government or law-enforcement request individually and require valid legal process that states its legal basis and identifies the account concerned. We may narrow or reject requests that are overbroad. Where permitted, we may notify affected users. If we receive information giving us a good-faith belief of an emergency involving danger of death or serious physical injury, we may disclose the limited information necessary to prevent that harm — remember that we hold no video or audio of anyone.
17. HOW LONG WE KEEP THINGS
• Account and profile data (handle, profile details, photo): while your account exists
• Friendships, encounter log, ratings, votes, stats and badges: while your account exists
• Messages: until you delete your account (your sent messages are then deleted)
• Chat photos and voice notes: 90 days from sending, then deleted automatically
• Push token: until you disable notifications or delete your account
• Reports (including the category and the media item reported, if any): up to
24 months, for community safety, even after account deletion
• Rolling database backups: purged within 30 days
There is no video or audio retention because none is ever captured.
18. DELETING YOUR ACCOUNT
In-app: Settings → Delete account removes your device data AND instructs our servers to delete your account record, profile and photo, friendships and requests, the messages and media you sent, your encounter log, ratings and votes you cast, stats, badges and push token immediately; residual copies leave backups within 30 days. No app access? Email m2mb@info.com from any address with your handle and we will delete within 30 days. Three honest caveats: messages and media already delivered to other people's devices may persist on their side; report records about behaviour may be retained for community safety; and if your account or device is under an active suspension, the record of that suspension is retained so deletion cannot be used to escape it. Deletion is permanent — friendships and messages cannot be recovered. See /delete-account for the step-by-step guide.
19. YOUR RIGHTS
Depending on where you live, you may have the right to access, correct, export, restrict, object to processing of, or delete your personal data, and to withdraw consent at any time. Exercise any of them by emailing m2mb@info.com — we answer within 30 days and may ask you to verify control of the account first (a safeguard, not an obstacle). If you are in the EEA or UK you may also complain to your data-protection authority (in the UK, the ICO at ico.org.uk).
20. CHILDREN
Rivler is strictly 18+. We do not knowingly collect data from anyone under 18. Discovery of an under-18 account leads to removal and deletion of its data. Report one: m2mb@info.com.
21. SECURITY
All traffic is encrypted in transit (TLS). Media access is token-protected. Access to production systems is restricted and logged. In most one-to-one rooms your video never touches a server at all. No internet service can promise absolute security, but our best protection is structural: we simply do not hold your video, audio, real name, email, or precise location.
22. INTERNATIONAL TRANSFERS
Our processors operate in the United States and Europe. Where data leaves the UK/EEA it is protected by appropriate safeguards (standard contractual clauses or an adequacy decision). By using the service you acknowledge this transfer.
23. CHANGES TO THIS POLICY
If we make material changes we will post the new version here and flag it in the app at least 7 days before it takes effect, so you can review it (or delete your account) first. Continued use after the effective date means you accept the new version.
24. CONTACT
Questions, requests, complaints: m2mb@info.com. We read everything.