reDyle Privacy Policy

Effective Date: [TO BE SET WHEN PUBLISHED] Version: 1.0.0

This Privacy Policy explains how reDyle ("we," "us," "our," or "the App") collects, uses, discloses, and protects your information when you use our mobile application.

1. Who We Are

reDyle is a mobile application that helps you manage your personal relationships and stay connected with the people who matter to you. This policy covers the reDyle mobile app for Android, which can be used as your phone's default Phone app, and its backend services.

Contact us:

• Privacy questions: privacy@redyle.com
• Data Protection Officer: dpo@redyle.com
• We aim to respond to privacy inquiries within 72 hours.

2. Information We Collect

We collect only the data necessary to provide the App's features. We do not collect data beyond what is described here.

2.1 Account Information

• Email address, first name, last name, phone number (optional)
• Profile picture (if you upload one)
• Password: never sent to us. The app signs you in with the OPAQUE protocol, which proves you know your password without it leaving your phone; we keep only a record that can't be turned back into your password

2.2 Contact Data

• What: With your explicit permission, the App reads your phone's contact list. Names, phone numbers, and email addresses stay on your phone and are never sent to our servers. For each contact, your phone sends only one-way codes made from its numbers, emails and name with a key that only you hold, so that the same contact gets the same code each time. We can't turn a code back into a number or a name, and we can't make codes ourselves to look someone up. Contact photos stay on your phone too.
• Your key: The key is created on your phone. Our servers keep two locked copies of it, so you don't lose your history when you change your password or get a new phone: one locked with your password (which we never see) and one locked with a recovery code that your phone keeps for you in your Google backup and that you can view in Settings. We can't open either copy.
• Why: To keep each contact's call history and rankings with the right person. We do not check your contacts against other reDyle users, and other users can't see them.
• Your control: Your phone is the source of truth, and reDyle never changes or deletes contacts on your phone unless you edit them yourself in your phone's own screens. You can set aside a contact to hide them from your main list. When you remove a contact from your phone, we delete what we hold about them right away if you never called them; if you did, they move to the Deleted list in the App, where you can delete them and their history permanently, or add them back to your phone to restore them. You can revoke the contacts permission at any time in your device's App settings; what's already synced stays until you delete it or your account.

2.3 Call Log Metadata (Android only)

• What: Only while reDyle is your default Phone app, and with your explicit permission, we read call log metadata from the last 2 years (phone number, call date/time, call duration, and call direction — incoming/outgoing/missed). We do not access text messages.
• What leaves your phone: For calls with people saved in your contacts, the time, direction, and length of each call are sent to our servers, linked to that contact. Calls with numbers that aren't in your contacts are not sent; they appear only on your phone, in your Recents list.
• Why: This powers the App's relationship scoring and "who to reach out to" recommendations, by detecting how recently and how often you talk with someone.
• Your control: This is a separate, optional permission from contact sync. If you decline it, your contacts stay available but won't get rankings based on your calls; call activity is the App's only source for these, and interactions can't be entered by hand. If you switch to another Phone app or revoke the permission in your device's App settings, reDyle stops reading your call log. The call history already sent stays and keeps ranking your contacts, until each call expires 2 years after it happened or you delete your account. If you make reDyle your Phone app again, it fills in the calls from the time in between.

2.4 Usage and Device Information

• Account and app events linked to your account (e.g., registering, signing in and out, contact sync counts and failures, security settings changes), to operate the App, keep it secure, and understand how it's used. You can't turn these off in the App. They are deleted automatically after 90 days.
• Device type, operating system version, and app version (for compatibility and crash diagnostics).
• Crash reports (via Sentry and our own servers), only once you're logged in and only if you turn them on in Privacy Settings. They are off by default. A report contains the type of error, where in the app's code it happened, and your device model, OS and app version, never the error message, your contacts or your calls.

We don't collect usage or performance data: the App doesn't measure how you use it, how fast screens load, or how your network performs.

2.5 Biometric Data

• If you enable fingerprint or face login, biometric matching happens entirely on your device using your device's operating system. We never receive, see, or store your biometric data — the App only receives a yes/no authentication result from your device's secure hardware.

2.6 Notifications

• Off unless you turn them on. The App never asks you to enable notifications; only the Notifications switch in Settings turns them on. While they're off, we send you none, including security and account messages.
• If you turn them on, your phone sends us a device token used to deliver them. Turning notifications off, or signing out, removes that token from our servers.
• Reminders about a contact are sent with only the contact's code; your phone adds the name when it shows the notification, so we never know who it's about.
• Call alerts (an incoming call while your phone is locked, and missed calls) are separate: they're shown by your phone itself and need Android's notification permission, which Phone App setup asks for. Granting it there doesn't turn on reDyle's notifications.

2.7 Phone Calls

• When reDyle is your default Phone app, your calls are placed and shown through it. We do not record calls or access their audio, and the App has no feature for doing so.
• To show who is calling, the App looks up the number in your phone's contacts on your device. Missed call notifications are created on your device.
• Voicemail: when reDyle is your default Phone app, it shows and plays the voicemails your phone's visual voicemail service has downloaded, with their transcripts if your carrier provides them. They are read and played only on your device and are never sent to us. Marking a voicemail heard or deleting it is passed to your phone's voicemail service, which updates your carrier.

We do not collect precise location data, and we do not access your device's microphone, camera roll, or files beyond what's needed for the profile-picture picker (which you control at the moment you choose a photo).

3. How We Use Your Information

• Provide and maintain core App functionality (account, contact sync, relationship insights)
• Generate relationship-strength scores, activity trends, and "who to reach out to" recommendations
• If you turn notifications on, send relationship reminders and account and security messages
• Diagnose and fix bugs, from crash reports if you turned them on, and keep our servers running reliably
• Comply with legal obligations

We do not use your data for third-party advertising, and we do not sell your personal information to anyone.

4. How We Share Your Information

We do not sell your data. We share data only in these limited circumstances:

• Service providers: Companies that run parts of the service for us and may process data only for that purpose: Sentry (crash reports, only if you turn them on), Google Firebase (delivering notifications, only if you turn them on), and Amazon Web Services (hosting our servers and database, in the United States, and sending our emails).
• Legal requirements: If required by law, subpoena, or to protect the rights, safety, or property of reDyle, our users, or the public.
• Business transfers: If reDyle is involved in a merger, acquisition, or sale of assets, your data may be transferred, subject to this policy's protections continuing to apply.

5. Data Retention

• Account data: Retained while your account is active. When you delete your account (Settings → Delete Account), you're signed out on every device right away, and your account waits 30 days in case you change your mind: signing in during that time cancels the deletion. After the 30 days, we permanently delete everything we hold about you: your account and profile picture, your contacts' codes, call history and rankings, recommendations, notifications and device tokens, settings, consents, sessions, and the account and app events about you. Your phone's own contacts and call log aren't touched.
• Access logs: Retained for 90 days, then automatically deleted.
• Session data: Expires automatically after 7 days of inactivity.
• Consent records: Retained while your account exists, as a record of what you agreed to, and deleted with your account. [LEGAL REVIEW: if a longer retention is required to prove consent, the deletion code (accountDeletionService) must keep them, and this line must say for how long.]
• Backups: Our database keeps continuous backups for 35 days, so deleted data leaves them at most 35 days after it's deleted.
• Interaction history (call log metadata matches): Each call is retained until 2 years after it happened, to support relationship-trend features, and deleted automatically after that.

6. Your Rights and Choices

Depending on your location, you may have some or all of the following rights (available to all users regardless of jurisdiction via the in-app Privacy Dashboard):

• Access — view the data we hold about you
• Correction — fix inaccurate information
• Deletion — delete your account and everything we hold about you, from Settings → Delete Account (see section 5)
• Portability — export your data as a JSON file, from Settings → Privacy Dashboard → Export My Data. The app builds the file on your phone, adding contact names, numbers and emails from your phone to what our servers hold
• Restriction / Objection — limit or object to certain processing: keep crash reports off in Privacy Settings, set contacts aside, switch to another Phone app to stop call log access, or contact us about anything else
• Consent withdrawal — revoke previously given consent at any time
• Non-discrimination — we will not penalize you for exercising these rights

California residents (CCPA/CPRA): you have the right to know, delete, correct, and opt out of the sale/sharing of personal information. We do not sell personal information. You can exercise these rights via the in-app Privacy Dashboard or by contacting us.

EU/UK residents (GDPR): our legal bases for processing include your consent, performance of a contract (providing the App's features), and legitimate interests (e.g., security, fraud prevention). You have the right to lodge a complaint with your local supervisory authority.

7. Security

• Your password never reaches our servers (OPAQUE sign-in); sensitive data is encrypted at rest (AES-256-GCM) and in transit (TLS/HTTPS).
• Optional biometric login is available.
• We monitor for security incidents and follow a documented incident response process.

No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.

8. Children's Privacy

reDyle is not directed to children under 13 (or the minimum age required by your local law), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. International Users

reDyle is operated from the United States. If you use the App from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country.

10. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you in-app and, where required, ask for renewed consent. The current version and change history are always available in the App's Privacy Dashboard.

11. Contact Us

Questions, requests, or concerns about this policy or your data:

• Email: privacy@redyle.com
• Data Protection Officer: dpo@redyle.com