Account and profile - email address, display name, password (stored as a salted hash, never in plain text), age, gender, who you're seeking, location area, photos, and profile answers you provide.

Connected sources you opt into - if you choose to connect a source (for example music, video, or an AI-assistant memory export), we store summaries used to build your private profile. Every source is optional, connected one at a time with your consent, and disconnectable in Settings.

Product activity - agent runs, match decisions, date feedback, relationship and household records you create (check-ins, notes, plans, milestones), safety reports, and support requests.

Prelaunch and readiness information - if you take the public Relationship Readiness Scan, we collect your name, email, metro area, answers, marker values derived from those answers, score, referral code, and basic request metadata. We use it to deliver your report, improve the assessment, manage private Dating launch access, and prevent abuse.

Analytics - consent-gated product analytics (page views and product events). Analytics do not initialize until you accept the analytics banner, and we do not use advertising trackers.

Sensitive information - by the nature of a relationship product, profile data may reveal sexual orientation and relationship preferences. We use this information solely to provide the matching and relationship features you asked for, never for advertising, and never disclose it except as described below.

To operate the product: building your private profile, screening and explaining introductions, planning dates, powering relationship features for couples, safety review, support, and service reliability. We also use limited, consent-gated analytics to understand what's working. We do not use your information for third-party advertising, and we do not train shared models on your private content.

We do not sell your personal information. We do not "share" it for cross-context behavioral advertising (as those terms are defined by the California Consumer Privacy Act). We do not show your profile to people browsing a feed - you are introduced to one vetted person at a time, with your consent. Partner-private content in the relationship features stays private from your partner unless you mark it shared.

We disclose information only to: (1) service providers that host and operate the product under contract (cloud hosting, database, email delivery, payment processing, consent-gated analytics) and that may not use it for their own purposes; (2) the person you match with - limited profile information, only after mutual consent to an introduction; (3) your partner - only the relationship content you explicitly mark as shared; and (4) legal authorities when required by law or to protect the safety of our users. Payment card details are handled by our payment processor and never touch our servers.

Directly in Settings, without asking us: export a full copy of your data, disconnect any connected source, pause your discoverability, and delete your account. Deletion is real deletion - it removes your profile, persona, connected-source summaries, photos, matches, relationship and household records, notifications, safety events, analytics events, and legacy data, and cancels any subscription.

If you are a California resident, the CCPA/CPRA gives you the rights to know, access, correct, delete, and port your personal information; to opt out of sale or sharing (we do neither); to limit use of sensitive personal information (we already limit it to providing the service you requested); and to be free from discrimination for exercising these rights. Because we honor deletion and access for everyone, these rights are available to all users regardless of state or country. We also honor the Global Privacy Control signal. If you are in the EU, UK, or Switzerland, we process your data on the legal bases of contract (running the service you signed up for) and consent (connected sources, analytics), and you may additionally lodge a complaint with your local supervisory authority.

To exercise any right you can't complete in Settings, email support@getredstring.com from your account email (that's how we verify it's you). An authorized agent may submit a request on your behalf with signed permission. We respond within 45 days.

If you took the readiness scan without creating an account, email us from the address used for the scan to access or delete that assessment, or to leave the private launch list.

We keep account information while your account is active. We keep prelaunch contact information and readiness assessments until you ask us to delete them or they are no longer needed for the private launch and assessment program. When you delete your account, personal data is removed from production systems immediately and from encrypted backups on their rotation schedule. Data is encrypted in transit and at rest; access is restricted and logged. No system is perfectly secure - if a breach affects your data, we will notify you as the law requires and sooner if we can.

Red String is for adults 18 and older. We do not knowingly collect data from minors.

If this policy changes in a way that matters, we'll tell you in the app before the change takes effect - not bury it. Questions: support@getredstring.com.