1. Who We Are

Ripple is a premium matchmaking platform built for people who are serious about finding a life partner. We are not a casual dating app. Every feature on Ripple is designed around privacy, respect, and genuine connection. Ripple is operated by Luminix LLC.

2. Where This Policy Applies

This Privacy Policy applies to the Ripple mobile application and all related services provided by Luminix LLC. By creating an account or using the app, you agree to the practices described here. If you do not agree, please do not use the Service.

3. What Information We Collect

3.1 Information You Give Us Directly

When you register and use Ripple, you provide us with:

• Profile information: your name, age, gender, location, background, lifestyle details, and what you are looking for in a partner.
• Photos: up to 3 profile photos that you upload. These are only visible to users you are matched with, and to matchmakers and admins assigned to your community.
• Contact information: your email address and phone number, used for account verification (OTP), notifications, and support.
• Registration details: how you registered (self-service, community entry code, or matchmaker invitation) and which community you belong to, if applicable.
• Red flags preferences: your selected dealbreaker preferences used by the matching algorithm to find compatible candidates. This data is only shown to matchmakers in aggregate form.
• Payment information: your $0.99 verification fee is processed by our third-party payment provider (RevenueCat). We do not store your full payment details.

3.2 Information We Collect Automatically

When you use the app, we automatically collect:

• Usage data: which screens you visit, how long you spend, and actions you take (like approving or rejecting a match).
• Device information: device type, operating system version, and a unique device identifier used for security purposes (such as detecting new device logins).
• Screenshot attempt logs: if the app detects an attempt to screenshot a profile or match, this is recorded and tied to your account for security review.

3.3 Sensitive Information

Ripple may collect information that is considered sensitive under applicable law. This includes:

• Relationship preferences and personal values: used solely to power the matching algorithm.
• We do not collect or store information about religious affiliation, race, ethnicity, or health. Any personal background information you volunteer in your profile bio is stored as free text and is your own choice to share.
• We only process sensitive information to the extent necessary to provide the matchmaking service, and only with your explicit consent obtained at account creation.

4. How We Use Your Information

We use your information to:

• Create and manage your account.
• Run the matching algorithm to find you a compatible match based on your preferences, profile details, and red flag selections.
• Share your profile with your assigned matchmaker and community admin when you are part of a community, so they can review and facilitate matches.
• Send you notifications about match activity, account updates, and required actions (such as legal document updates).
• Verify your identity through our OTP (one-time code) system during registration and phone number changes.
• Detect and prevent fraud, abuse, and security violations such as unauthorized access or screenshot attempts.
• Respond to your support requests and resolve issues.
• Comply with legal obligations.

5. How We Share Your Information

5.1 With Matched Users

When a match is made between two candidates, both candidates can see each other's profile, including their name, photos, bio, and general preferences. Your contact information (email and phone number) is never automatically shared. You choose when and how to share contact details directly with your match.

5.2 With Matchmakers

If you are part of a community or registered through a matchmaker invitation, your assigned matchmaker will have access to your profile in order to review and propose matches. Matchmakers can see your profile photos, bio, preferences, and red flag scores. They cannot access your private messages or contact information unless you choose to share it.

5.3 With Community Admins

Community admins manage the group of candidates in their community. They can see whether candidates are approved, pending, or removed. They can approve or reject candidates from their community. They do not have access to your private messages or match details beyond what is necessary to manage the community.

5.4 With Super Admins

Ripple super admins have access to all data across all communities for the purpose of platform management, safety oversight, and issue resolution. All super admins are bound by internal confidentiality policies.

5.5 With Service Providers

We work with trusted third-party providers to operate the platform, including:

• Firebase (Google): user authentication and session management.
• Supabase: database storage and file storage for photos.
• AWS SES and AWS SNS: sending verification codes by email and SMS.
• RevenueCat: processing the one-time verification payment.

All service providers are required to handle your data securely and only for the purpose of supporting the Ripple service.

5.6 For Legal Reasons

We may share your information when required by law, court order, or government request. We may also share information when we believe it is necessary to protect the safety of our users or the public, or to enforce our Terms of Use.

5.7 In a Business Transfer

If Luminix LLC is acquired, merged, or sold, your personal information may be transferred as part of that transaction. We will notify you of any such change and any new owner will be required to honor the commitments in this Privacy Policy or notify you of material changes.

6. Photo Privacy and Security

Photos on Ripple are treated with the highest level of care. Here is exactly how they work:

• Your photos are only visible to users you are formally matched with. No one can browse or search for your photos.
• All photos are stored in Supabase Storage with strict access controls. Direct links to photos are blocked.
• When your photos are displayed to a match, they are served via signed URLs that expire after a short period (15 to 30 minutes). This means no permanent link to your photos can be saved or shared.
• Every photo displayed inside the app has a visible watermark applied to discourage saving or sharing.
• The app also applies an invisible digital watermark to all photos, which can be used to trace the source if a photo is ever shared outside the platform.
• Screenshots are blocked at the OS level on supported devices. Any screenshot attempt is detected, logged, and flagged to your assigned matchmaker for review.

7. Data Retention

7.1 While Your Account Is Active

We keep your personal data for as long as your account is open and you are using the Service.

7.2 After You Close Your Account

When you close your account, we will delete or anonymize most of your personal data within a reasonable period. Some information may be retained as required by law or for legitimate operational reasons such as fraud prevention, dispute resolution, or maintaining audit logs.

7.3 Aggregate and Anonymous Data

We may retain anonymized, non-identifiable data indefinitely for the purpose of improving the platform, understanding usage patterns, and refining the matching algorithm. This data cannot be used to identify you.

8. Your Rights and Choices

8.1 Access and Correction

You can view and update most of your profile information at any time from within the app. If you need help accessing or correcting information that is not available in the app, contact us at support@luminix-app.com.

8.2 Deleting Your Account

You can close your account at any time from the Account section of the app. Upon closure, your profile will be immediately hidden from all users, and your data will be deleted within a reasonable period as described in Section 7.

8.3 Notifications

You can control push notifications and SMS notifications from the Settings section of the app. Note that we may still send you essential account communications (such as OTP codes or legal updates) even if you opt out of marketing messages.

8.4 Data Portability

If you would like a copy of the personal data we hold about you, please contact us at support@luminix-app.com. We will provide your data in a readable format within 30 days of your request.

8.5 Withdrawing Consent

Where we rely on your consent to process your data, you may withdraw that consent at any time. Withdrawing consent will not affect anything we did before you withdrew it, but it may limit your ability to use certain features.

9. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how we use it, the right to request deletion of your personal information, and the right not to be discriminated against for exercising your privacy rights.

To exercise these rights, contact us at support@luminix-app.com. We will respond within 45 days as required by law.

Ripple does not sell your personal information to third parties.

10. Data Security

We take the security of your data seriously. Our security measures include:

• All sensitive fields (name, email, phone number) are encrypted at rest in our database using application-level encryption.
• All data in transit between the app and our servers is encrypted via HTTPS/TLS.
• Photo access is protected through signed URLs and row-level security (RLS) policies in our database.
• Session tokens expire after 5 minutes of inactivity, requiring re-authentication.
• New device logins trigger a security notification to the account holder.
• All admin and matchmaker access is logged in an audit trail.

Despite these measures, no system is completely immune to security risks. If you suspect your account has been accessed without your permission, please contact us immediately at support@luminix-app.com.

11. Children's Privacy

Ripple is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we discover that a minor has created an account, we will delete that account and all associated data immediately. If you believe a minor is using the platform, please contact us at support@luminix-app.com.

12. Do Not Track

Our app does not respond to Do Not Track (DNT) signals. We do not alter our data collection practices based on browser or device DNT settings.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the app or by email before the changes take effect. Your continued use of Ripple after a policy update means you accept the updated policy. If you do not agree, you may close your account.

14. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, please contact us:

• Email: support@luminix-app.com

We aim to respond to all privacy-related requests within 30 days.