RYLA Privacy Policy

Effective Date: March 30, 2026

Welcome to RYLA (https://ryla.me). RYLA is a community platform operated by Radiality Inc., a corporation formed in Delaware, United States ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, mobile application, and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when you create an account, join or create a community, participate in events, communicate with other users, or contact us for support. This may include:

• Name, email address, and phone number
• Profile information such as avatar image, headline, title, company, bio, location, and social media URLs
• Community membership and participation data
• Event RSVPs, attendance, and related preferences
• Messages and communications sent through the platform
• Content you post, share, or contribute within communities, including events, community pages, and private notes about connections
• Payment information processed through our third-party payment processor (Stripe)
• Feedback, survey responses, and support requests

1.2 Contact Matching Data

If you choose to use our contact matching feature, we collect one-way cryptographic hashes (SHA-256) of phone numbers from your device contacts to identify existing RYLA users you may know. We do not store raw contact phone numbers — only the hashed values are transmitted and used for matching.

1.3 Information Collected Automatically

When you access the Service, we may automatically collect certain information, including:

• Device information (device type, operating system, browser type, user agent)
• Usage data (pages visited, features used, time spent on the platform, interaction events)
• IP address and approximate location data
• Referring URLs and UTM campaign parameters (source, medium, campaign)
• Session identifiers
• Cookies and similar tracking technologies (see Section 5 below)

1.4 Session Recordings

We use Mixpanel to record user sessions on non-iOS platforms. Session recordings capture your interactions with the Service (such as page views, clicks, and navigation) to help us understand how users engage with the platform and to identify usability issues. Session recordings do not capture passwords, payment information, or other sensitive form inputs.

1.5 Information from Third Parties

We may receive information about you from third-party services you use to sign in or connect to RYLA:

• Google OAuth: Google account ID, name, and email address
• Apple Sign-In: Apple ID, email address (which may be a private relay address), and name (provided on first authentication only)

This information is used solely to create and authenticate your account.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Create and manage your account and community memberships
• Facilitate events, communications, and connections within communities
• Process payments and manage paid memberships through Stripe Connect
• Send transactional communications such as OTP verification codes, connection invites, event update notifications, membership welcome messages, and weekly briefing emails
• Provide community health analytics and insights to community organizers
• Match you with existing users through contact matching
• Analyze usage patterns and session recordings to improve the platform experience
• Detect, prevent, and address fraud, abuse, or technical issues
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 With Community Organizers

When you join a community on RYLA, the community organizer may have access to your profile information, participation data, and aggregated engagement metrics to manage and grow their community.

3.2 With Other Members

Certain profile information may be visible to other members of communities you join, in accordance with your privacy settings (including your profile privacy setting) and the community's configuration. Social media links on your profile are visible only to your connections.

3.3 With Service Providers

We share information with third-party service providers who assist us in operating the Service. These providers are contractually obligated to use your information only as necessary to provide services to us. Our current service providers include:

• Stripe — payment processing and subscription management. We share email addresses and payment information via Stripe-hosted checkout. No raw credit card data is stored by RYLA.
• Mixpanel — product analytics and session recording. We share user interaction data, session recordings, page views, and device/browser information.
• Postmark — transactional email delivery. We share email addresses, user names, and OTP codes for verification, invitation, and notification emails.
• GetStream — in-app messaging. We share user IDs, profile names, and avatar images to enable real-time chat within communities.
• Twilio — phone number verification via SMS. We share phone numbers in E.164 format to deliver OTP verification codes.
• Vercel Blob — file storage. Uploaded images (avatars, event images, banners) are stored using Vercel Blob. As is standard for community and social networking platforms, these files may be accessible via direct URL.
• Google Maps — location services. We use the Google Places API for location autocomplete. Search text and session tokens are sent to Google.
• Google OAuth / Apple Sign-In — authentication services as described in Section 1.5.

3.4 For Legal Reasons

We may disclose your information if required by law, in response to a legal process, or to protect the rights, safety, or property of RYLA, our users, or the public.

3.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Portability: Request a portable copy of your data in a commonly used format.
• Opt-Out: Opt out of certain data processing activities, including marketing communications. You can opt out of weekly briefing emails through your account settings.
• Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise these rights, contact us at support@ryla.me.

5. Cookies, Local Storage, and Tracking Technologies

We use cookies, local storage, and similar technologies to operate and improve the Service. Specifically:

• Authentication tokens: JWT tokens are stored in your browser's local storage to keep you signed in.
• Mixpanel cookies: Used for analytics tracking and to assign a unique identifier (distinct ID) for session analysis.
• Session storage: We store your initial referrer URL and session identifier in session storage.
• Service worker caches: On supported platforms, our progressive web app (PWA) caches API routes and static assets for performance.

Most web browsers automatically accept cookies. You can modify your browser settings to decline cookies, though this may affect certain features of the Service.

6. Analytics

This Service uses Mixpanel to collect information about how users interact with the platform. Mixpanel helps us understand usage patterns and improve the Service. This includes event tracking (such as page views, authentication events, profile and community actions, and feature usage) as well as session recordings on non-iOS platforms. User identifiers in Mixpanel are UUID-based and not tied to your email address. You can learn more about Mixpanel's data practices and opt out of Mixpanel tracking by visiting https://mixpanel.com/legal/privacy-policy/ and https://mixpanel.com/optout/.

This Service may also use Google Analytics to collect information about usage of the platform, including page views, traffic sources, and user behavior. Google Analytics uses cookies to gather this data. You can learn more about how Google uses your data at https://policies.google.com/privacy and opt out of Google Analytics by installing the browser add-on available at https://tools.google.com/dlpage/gaoptout.

7. Do Not Track

Do Not Track ("DNT") is a preference you can set in your browser to inform websites that you do not want to be tracked. The Service respects Do Not Track signals. If your browser sends a DNT signal, our analytics tools will not track your activity.

8. Account Deletion

You may request deletion of your account through the Service or by contacting us at support@ryla.me. When you delete your account, we perform a soft deletion that marks your account as deleted. You have a 30-day recovery window during which you may contact support to restore your account. After 30 days, your account data and associated records (including profile, connections, notes, notifications, and subscriptions) are permanently deleted.

9. Security

We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Limiting the collection of personal information to what is strictly necessary
• Using SSL/TLS and other secure connection technologies for data transmission
• Encrypting sensitive data at rest and in transit
• Storing only cryptographic hashes of contact data rather than raw values
• Processing all payment information through Stripe's PCI-compliant infrastructure rather than storing it directly

However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected such information, we will take steps to delete it promptly. If you believe a child under 16 has provided us with personal information, please contact us at support@ryla.me.

11. Location of Data Processing

All data processing activities undertaken by us take place in the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to the transfer of your information to the United States.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information, and the right to opt out of the sale of personal information. As noted above, we do not sell personal information. To exercise your California privacy rights, contact us at support@ryla.me.

13. Third-Party Websites

The Service may contain links to websites operated by parties other than us. We do not control such websites and are not responsible for their contents or privacy practices. Our inclusion of links to such websites does not imply any endorsement of their content or any association with their operators. We encourage you to review the privacy policies of any third-party websites you visit.

14. Email Communications

We may send you the following types of email communications:

• Verification emails: One-time passcodes (OTP) for account authentication
• Connection invites: Notifications when another user invites you to connect
• Event notifications: Updates about events you are attending, such as date or location changes
• Membership communications: Welcome messages and membership-related updates
• Weekly briefings: Summary emails about activity in your communities. You can opt out of weekly briefings through your account settings.

Transactional emails related to account security and payment confirmations cannot be opted out of while your account is active.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service with a new effective date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

16. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Radiality Inc.
24 Veterans Sq, Media, PA 19063
Email: support@ryla.me
Website: https://ryla.me