Privacy notice

Who controls your information

Rayne Social Ltd will be the controller responsible for Rayne. The final privacy email and business address will be published here before launch (Business address to be confirmed before launch).

This notice is written for Rayne’s initial UK release. It will be updated before Rayne is offered in another country where additional local information or rights are required.

Information we collect

Depending on the features you use, Rayne processes:

• account and verification information, including email address, user ID, date of birth, verification status and provider reference;
• profile and discovery information, including display and real name, gender identity, relationship style, what you are looking for, who you want to see, biography, age visibility, physical details and photos;
• precise device location while Nearby is in use, the stored location needed to calculate proximity, and approximate distances shown to other users;
• messages, chat media, private albums, sharing choices, views, winks, blocks, reports, appeals and moderation results;
• Rayne+ status, transaction references and subscription dates (payment-card and identity-document details are handled by Stripe rather than stored by Rayne);
• notification settings, Firebase installation identifier, device/app information, security events, technical logs, support messages and account-deletion status.

Sensitive profile information

Gender identity, relationship and matching preferences, profile text and user content may reveal sexual orientation or information about sex life. UK data-protection law treats some of this as special category data. We ask for separate explicit consent before registration continues and use it to create your profile, apply your matching choices, show relevant profiles and let others understand your profile choices.

Rayne does not currently ask you to publish HIV or STI status. If this feature is introduced, it will be optional, hidden by default, covered by a separate explanation and explicit consent, and removable without deleting your account.

Why we use information

Our main purposes and UK GDPR lawful bases are:

• contract: create and secure your account, provide profiles, discovery, messaging, albums, settings, subscriptions and support;
• explicit consent: process special category profile and matching information; you may withdraw it, but Rayne cannot continue providing profile matching that depends on it;
• legitimate interests: keep Rayne secure, prevent fraud and abuse, moderate content, understand service reliability and defend legal claims, balanced against your rights;
• legal obligation and substantial public interest where applicable: protect users, respond to lawful requests, preserve or report illegal material, and meet consumer, tax, safeguarding and online-safety duties;
• consent where required: device permissions and optional communications that the law requires us to make optional.

Who sees and receives it

Other users see information you make visible on your profile, your approximate distance, activity indicators you enable, and content you send or share with them. They do not receive your raw coordinates from Rayne.

Service providers process information for us: Supabase (authentication, database, storage and server functions), Stripe (payments and identity verification), Google Firebase (push delivery), OpenAI (automated safety review of submitted images or thumbnails), and Resend (service email). Authorised Rayne reviewers may access information where needed for support, safety and moderation.

Automated tools

Rayne uses automated image-safety signals and proximity calculations. These support moderation and order Nearby profiles; they are not intended to make a solely automated decision with a legal or similarly significant effect. A person can report a mistake and request human review.

International transfers

Some providers may process information outside the UK. Before launch we will document hosting locations and use an adequacy regulation, the UK International Data Transfer Agreement/Addendum, or another lawful safeguard, together with transfer risk assessments where required.

How long we keep it

We keep account and service information while your account is active and only as long afterwards as needed for the purposes above. A deletion request hides the account immediately and currently allows restoration for 30 days; scheduled deletion then removes the core account, profile and user content. Limited report, moderation, billing, fraud, legal and backup records may be retained longer where necessary.

Before launch, Rayne will publish a finalised retention schedule and complete deletion of associated chat-media storage objects. Until that engineering work and verification are complete, this draft must not be treated as the final public notice.

Your choices and rights

You can edit profile visibility, online status, notifications and units in the app; block users; remove content; withdraw optional permissions; and request account deletion. You can withdraw special-category consent at any time. Withdrawal does not make earlier lawful processing unlawful, but may mean closing or disabling the matching profile.

UK rights may include access, correction, erasure, restriction, objection, portability and review of a significant automated decision. We may verify your identity and normally respond within one month. You may complain to the Information Commissioner’s Office at ico.org.uk, though we would welcome the chance to resolve the concern first.

Security, adults and changes

We use access controls, row-level database rules, encrypted network connections and limited reviewer access, but no service can promise absolute security. Protect your email account and device and tell us promptly about suspected misuse.

Rayne is for adults aged 18 and over and does not knowingly permit children to create accounts. We will investigate and remove underage accounts.

We will notify you of material changes and request fresh acknowledgement or consent where required.