US state privacy notice · Last updated 23 September 2026
If you live in the United States.
This page adds the disclosures that US state privacy laws ask for, in their own vocabulary. It sits on top of the privacy policy, which is the document that actually describes what the app does — read that one first. Nothing here describes any extra collection; it is the same handful of facts, sorted the way California asks for them.
The short version
- We do not sell your personal information. Not for money, not for anything else.
- We do not share it for cross-context behavioural advertising. We run no advertising at all.
- We do not use it for targeted advertising or for profiling that produces legal or similarly significant effects.
- The contents of your chats are treated as sensitive personal information, and we use them for exactly one thing: writing the reply you asked for.
- You can delete your account and everything attached to it from inside the app, in two taps, without emailing anyone.
Which laws, and honestly, whether they apply
Twenty US states now have a comprehensive consumer privacy law: California (CCPA, as amended by the CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Kentucky, Rhode Island and Indiana among them. Almost all of them only bind companies above a size threshold — typically the personal data of 100,000 residents a year, or revenue above USD 25 million.
Darabos Group is a one-person company and is nowhere near any of those thresholds, so on the face of it most of these laws do not yet apply to us. We are publishing this notice anyway, for two reasons: the thresholds are the only thing keeping us out, not the principles, and you should not have to check a revenue figure to find out what happens to your messages. Treat every right below as one we will honour, whether or not a statute currently forces us to.
What we collect, in the statutory categories
California asks for this as a table of categories. Here it is, with what each one actually means in our case. Everything listed is collected from you and from your phone, except the Apple identifier, which comes from Apple when you choose Sign in with Apple.
| Category | What it is for us | Why we have it | Who else sees it |
|---|---|---|---|
| Identifiers | A random account identifier created by the app. If you sign in with Apple: the stable identifier Apple gives us and, only if you allow it, your email address or a Hide My Email relay. | To recognise your account, carry your allowance and subscription across phones, and restore a backup. | Our hosting provider. Never sent to OpenAI. |
| Commercial information | Whether you have a subscription, which plan, the Apple transaction identifier, and whether the purchase was live or a sandbox test. | To unlock Pro and to check with Apple that it is still active. | Apple, which is the seller and holds the payment record. |
| Internet or other electronic network activity | Counts: scans per day, reply requests per day, whether the free scan was used, how many tokens a request took and what it cost us, how long it took. No text. | To run the daily allowance, keep the service affordable and stop abuse. | Our hosting provider. |
| Geolocation data (coarse) | Your phone's time zone identifier, for example America/Los_Angeles. That is the whole of it — no GPS, no IP-based location, no city. |
So your daily allowance resets at your midnight rather than ours. | Our hosting provider. Sent to OpenAI as part of a reply request so the reply can make sense of "tonight". |
| Inferences | The persona and the vibes your quiz answers add up to, and what the app has worked out about how you text. | So the reply sounds like you. Your quiz answers themselves stay on your phone. | Sent to OpenAI with a reply request. The persona and vibes are also stored with the cost record for a reply set. |
| Sensitive personal information | See the next section. In short: the contents of the conversation you ask Wink to read. | To write your reply, and nothing else. | OpenAI, for the seconds the request takes. |
Categories we do not collect at all: your name, phone number, postal address, government identifiers, financial account or card details (Apple handles payment and we never see it), biometric information, education or employment records, precise geolocation, browsing history across other sites, or anything from a data broker. We buy no data about you from anyone.
Sensitive personal information, and why we say so plainly
Under the CPRA, "the contents of a consumer's mail, email and text messages, unless the business is the intended recipient" is sensitive personal information. Rizzpond is built entirely around reading a conversation we are not part of, so that category is not an edge case for us, it is the product. Several other states treat data revealing sexual orientation the same way, and a dating chat plus your answer to "who are you texting" can reveal it.
So, in one paragraph: the screenshot or pasted text you give Wink, and the conversation inside it, are treated as sensitive. They go to our server and on to OpenAI for the seconds it takes to write your reply, only after you have said yes in the app, and neither we nor our database keeps the image or the text afterwards. They are used to write your reply and for nothing else — not to profile you, not to advertise, not to train a model of ours, and not to infer characteristics about you.
California gives you a right to limit a business's use of sensitive personal information when it is used beyond what you would reasonably expect from the service. We use it only to deliver the service you asked for, which is the permitted purpose the law describes, so there is nothing to limit and no "Limit the Use of My Sensitive Personal Information" link to press. If that ever stops being true, the link will appear here and on the home page before the change takes effect, and this paragraph will be the first thing to go.
Selling, sharing and targeted advertising
In the twelve months before the date at the top of this page, and in every month before that:
- We have not sold personal information, as any US state law defines selling.
- We have not shared personal information for cross-context behavioural advertising.
- We have not used personal information for targeted advertising.
- We have not processed personal information for profiling in furtherance of decisions that produce legal or similarly significant effects — we make no decisions about you at all.
- We have never sold or shared the personal information of anyone under 16, because Rizzpond is for adults and we do not knowingly have any.
There is therefore no "Do Not Sell or Share My Personal Information" link, because there is nothing behind it. We would rather say that in a sentence than put up a button that does nothing.
Global Privacy Control
Some browsers and extensions send a Global Privacy Control signal, which counts as an opt-out of sale and sharing in California and several other states. We sell and share nothing, so the signal has nothing to switch off — and nothing on this site works against it. This website runs no scripts other than its own and sets no cookies at all; see the cookies page.
Who we disclose personal information to
Only to service providers and processors, each under a contract that limits them to working for us, and only for the purposes above. There are four, and the list is the whole list:
- Supabase — our database and server functions, hosted in Frankfurt, Germany.
- OpenAI — the models that read the chat and write the reply, in the United States. OpenAI never receives your name, your email or your account identifier; requests carry a one-way hash so abuse can be spotted without knowing who you are.
- Apple — Sign in with Apple, and payment for Pro, under Apple's own terms.
- Cloudflare — this website only.
We do not disclose personal information to advertisers, data brokers, analytics companies or affiliates, because we have none of those. We would disclose data if a court or a law validly required it; that has never happened.
How long we keep it
The full table is on the privacy policy. The summary: the screenshot and the chat are kept for seconds and never written down; the replies Wink wrote are kept up to two days so the same request can be answered twice without charging you twice; counts, your time zone, your subscription link and your backup last as long as your account does; everything else lives on your phone. We do not keep personal information longer than the purpose it was collected for, and every row in our database is tied to your account and deleted with it.
Your rights, and how to use them
Depending on where you live, you have some or all of these. We apply them to everyone who asks, wherever they live:
- Know and access. What we have collected about you, where it came from, why, and who we disclosed it to — and a copy of it.
- Delete. Everything, from inside the app.
- Correct. Anything inaccurate. In practice almost everything correctable is on your phone and you can edit it yourself.
- Portability. A copy in a usable format.
- Opt out of sale, sharing, targeted advertising and profiling. Already the default; there is nothing to opt out of.
- Limit the use of sensitive personal information. Already limited to the service itself, as described above.
- No retaliation. We will not charge you more, give you less, or degrade the app because you exercised a right. The app has no mechanism to do that even if we wanted to.
The fastest way: do it yourself
Deletion needs no email and no waiting. In the app: You → Account → Delete account (or Delete my data if you never signed in). The server deletes first and only then wipes the phone, so nothing is left behind on our side if the phone goes wrong halfway. Your account, every count, your subscription link and your backup go with it. If you have a subscription, cancel it with Apple as well — deleting the account does not cancel it, and the confirmation screen links you straight there.
Or write to us
Email [SUPPORT EMAIL — David to fill in] and say what you want. You do not need to cite a law or use the right word for it. We answer within 45 days and will tell you if we need the extra time the statutes allow.
Verifying it is you. This is awkward and we would rather be honest about it than pretend: your account is anonymous by design and we hold no name, phone number or address to check you against. So to act on a request by email we have to match it to an account, which normally means the email address you signed in with, or something only the account holder would know. If we cannot make that match with reasonable confidence we will have to say no, and we will explain why. Deleting from inside the app avoids the whole problem, which is why we built it that way.
An authorised agent may make a request for you. Send written permission signed by you, and we may still ask you to confirm it directly.
If we say no
Colorado, Connecticut, Virginia, Texas, Oregon, Montana and several other states give you a right to appeal a refused request. So does this page, for everyone. Reply to our refusal, or write to [SUPPORT EMAIL — David to fill in] with "appeal" in the subject line. A person reviews it — the same person, because there is one of us — and answers within 45 days with the decision and the reason in writing. If the appeal is refused you can complain to your state Attorney General, and we will give you the contact details for yours in that reply.
Minors
Rizzpond is for adults, 18 and over. We do not knowingly collect personal information from anyone under 18, and we have never knowingly collected any from a child under 13, which would engage COPPA. We have never sold or shared the personal information of a consumer under 16. If you believe someone under 18 has an account, write to [SUPPORT EMAIL — David to fill in] and we will delete it.
California "Shine the Light"
California Civil Code § 1798.83 lets California residents ask once a year about personal information disclosed to third parties for their own direct marketing. We disclose none, to anyone, ever. If you want that confirmed in writing for your records, ask at [SUPPORT EMAIL — David to fill in].
Contact
Darabos Group
[POSTAL ADDRESS — David to fill in]
[SUPPORT EMAIL — David to fill in]
Darabos Group is the business that determines why and how your personal information is handled — the "business" under California law and the "controller" under the others. There is no separate privacy department and no form to fill in. The address above reaches the person who built the app.