Privacy Policy

We collect only what we need to run the Service:

Account information — the email address you register with, and your authentication credentials.

Profile information — your display name, bio, instruments and skill levels, genres, availability (the days and time blocks you set), and your Portland neighborhood.

Photos & audio — profile photos you upload and any audio links or embeds you add.

Messages — the messages you send to and receive from other members.

Location, only during a finding session you agreed to: relayed to the other person and never stored (see “Finding a friend at a show”).

Usage information — basic technical and activity data, such as when you sign in and which features you use, needed to operate and secure the Service.

We use your information to provide RYFF’s core features. In particular, we power musician matching: your match score with another member is calculated from how well your availability overlaps, how much your genres overlap, how close your experience levels are, and whether you share a location (neighborhood). We also use your information to deliver notifications (connection requests, messages, practice sessions, and finding sessions), but only through the channels (push and email) you have enabled in your notification preferences.

Your data is stored and processed using Supabase, our hosting and database provider, which acts as a data processor on our behalf. We rely on their infrastructure to securely store your account, profile, and message data.

A few other service providers help us run RYFF, each receiving only what its job needs: Google (if you choose Sign in with Google, and Google Analytics on the web when it is switched on), Expo (delivering push notifications to your phone), Resend (delivering notification emails), and Mapbox (drawing maps: your browser or phone loads map data from Mapbox, and Mapbox’s mobile map component may send it basic usage statistics). Our own operations alerts (Slack and our internal operations dashboard) receive technical events: activity counts, errors (which can include technical details of the request that failed), the titles of shows posted publicly, and, when a profile is saved, an internal account reference. They never include your name, your messages, or who you connect with or block.

Music players embedded on profiles, press kits and artist sites (such as YouTube, Spotify and SoundCloud) are loaded from those services when you view them, and those services may set their own cookies or record that visit under their own privacy policies.

We do not sell your personal information. Other members can see your profile and activity only to the extent your privacy settings allow — you control whether your profile is visible to everyone, to members only, or to your connections, and whether you appear in discovery. Messages are shared with the members you send them to. We share data with the service providers listed above purely to run the Service, and we may disclose information where required by law.

RYFF can help you and a friend find each other at a show. This feature is being piloted and may not be available to you yet. It works only between two accepted connections, only after you both agree to the same finding session, and only while the app is open on your phone. The invitation names the person and when the session ends, and either of you can stop it at any moment.

During a session your phone sends its position to your friend’s phone about once a second, so each of you can see which way and roughly how far away the other is. In a future version, on phones that support it, RYFF may also use Bluetooth and ultra-wideband ranging to measure distance and direction between the two phones directly; it will ask for those permissions first. Your friend sees a direction and a distance, never a map pin or an address, and never where you’ve been.

Sharing stops when the session ends: at its end time (three hours unless you both choose to extend it, and never more than eight), when either of you stops it, or when either of you blocks the other, removes the connection, or deactivates or deletes your account.

We never store your position. It passes through our real-time relay straight to your friend’s phone and is not saved anywhere. We keep a basic record of the session (who invited whom, the show if one was chosen, and when it started and ended) for 24 hours after it ends, then delete it. The short-lived codes your phones use to recognize each other are deleted when the session ends. Your position never goes into analytics or logs.

Finding asks for your location only while you use the app, never “Always”. If a future version uses Bluetooth or nearby-device ranging, it will ask for that permission separately. RYFF uses these permissions for finding only during a session and stops when it ends. You can see and stop active sessions in Settings, under Privacy.

You have direct control over your data from your account settings:

Visibility settings — choose who can see your profile (public, members, or connections) and whether you’re discoverable in search and matching.

Blocking — block any member to remove yourself from their view and exclude them from your matches and search.

Notification preferences — turn push and email notifications on or off per category.

Finding sessions: see any active finding session and stop it from Settings, under Privacy.

Export — request a copy of your data.

Deactivate — temporarily hide your account; reactivate any time from your account settings after you sign back in. Signing in alone does not reactivate a deactivated account.

Delete — request permanent deletion (see the deletion window below).

When you request deletion, your account is hidden from everyone immediately — you disappear from search, matching, and every other member’s view right away. Your data is then permanently purged after six months. During that six-month window your account is recoverable: if you change your mind, just log back in within six months and your account is fully restored. Once the six-month window passes, deletion is permanent and cannot be undone. If you never finished setting up a profile, there is nothing to keep, so your account is deleted right away with no recovery window.

On the web, RYFF uses your browser’s local storage and cookies for essential functions — keeping you signed in (your session) and remembering your preferences (such as your light or dark theme and navigation style). When analytics are switched on, the web app also loads Google Analytics, which sets its own cookies to measure visits, with IP addresses anonymized. Embedded music players may set their own cookies (see “Storage & processing”). We do not use cookies for third-party advertising.

Questions about your privacy or this policy? Reach us at support@ryffstage.com.