Legal
Privacy
Policy
Rizz AI works without an account. The people you add, your chats with the coach and your saved replies stay on your phone. This policy explains the few things that do leave your device, why, who receives them, and how you delete everything.
Contents
- Who we are
- Data that stays on your device
- Text sent to the AI service
- Usage events and your install ID
- Notifications
- Feedback, reports and support messages
- Purchases and subscriptions
- Ads and ad measurement
- Service providers and transfers
- Retention and security
- Deleting your data
- Your rights
- Age requirement
- KVKK aydınlatma metni (Türkçe)
- Changes
- Contact
01Who we are
Rizz AI (formerly published as “FlirtMaster”, the “App”) is an AI texting and dating-conversation assistant for iPhone and Android. It is developed and published by MINI SOFT Yazılım Reklamcılık Ticaret ve Sanayi Ltd. Şti., operating as Mini Mobile Apps, Türkiye (“we”, “us”). We are the data controller for the processing described here.
Contact for anything in this policy: [email protected].
Please read this policy together with our Terms of Use and Child Safety Standards. If you do not agree with it, please do not use the App.
02Data that stays on your device
Rizz AI has no sign-up and no user accounts. The following is stored only in the App’s local storage on your phone. We do not have a copy of it and it is never uploaded by the App:
- the people you add, their notes and fields (how you met, status, texting frequency, your goal), your chat history with the coach, saved replies and chat analyses;
- your onboarding answers (first name or nickname, gender, age range, what you are looking for), language and settings;
- screenshots you pick: the text in them is read on your device with on-device text recognition. The image itself is never sent to us or to anyone else;
- chat export files you import (WhatsApp, Telegram, Instagram, Messenger): they are parsed on your device and the original file is not kept;
- counters for your daily usage, rewarded-ad credits and the ids of support messages already shown to you.
Uninstalling the App, or Delete my data, removes all of it.
03Text sent to the AI service
When you ask for a reply, an opener, variations of a reply, coach advice or a chat analysis, the App sends only the text needed for that request to our server: the recognised chat text or the message you typed, short context about the person (the fields above, trimmed), your onboarding answers (gender, age range, goal) and the tone you picked. Our server forwards it to our AI provider and returns the generated answer to the App.
- We do not store this text on our server. It is processed in memory to serve the request and then discarded.
- The request leaves our server for fal.ai (Features & Labels, Inc., United States), which runs it on a large-language-model provider such as Google, OpenAI or Anthropic. These providers process the text under their own terms to produce the answer and do not receive your name, install ID or device identifiers from us.
- Our server keeps only request counters per anonymous purchase ID (hourly and daily) to apply usage limits and prevent abuse.
- Reply, opener and coach prompts include safety instructions. We may show you a notice that the answer was generated by AI, and every AI answer can be reported (see Feedback).
04Usage events and your install ID
To understand how the App is used and to keep it working, the App sends usage events to our own server and mirrors them to Google Firebase Analytics. An event is an action plus metadata, for example “reply generated, tone: funny, duration: 3 s”. Events contain:
- the event name, the screen it happened on, counts and durations, error codes, whether you are a subscriber and whether ads were shown;
- your install ID (a random identifier created on your device when you first open the App) and a session ID;
- app version and build, platform, OS version, device model and device language.
Events never contain the text you type, chat content, AI answers, screenshots or the names of the people you add. The App removes such fields before sending and the server drops them again.
One exception, so our team can recognise a user who contacts us: the App links your install ID to the nickname you entered in onboarding and to your anonymous RevenueCat purchase ID. Both are stored only on the install record on our server, never inside events, and are deleted with Delete my data.
The install ID is not the advertising identifier of your device and is not shared with advertising partners.
05Notifications
If you allow notifications, the App registers its Firebase Cloud Messaging (FCM) push token, your time-zone offset and the App language with our server, stored on your install record only. We use them to send reminders (for example when a daily usage limit resets, a few days after install, or an evening reminder in your local time) and, occasionally, a notification that a personal support message is waiting for you in the App. Notifications never contain your chats or the names of the people you add.
A log of sent notifications (install ID, campaign, time, delivery result) is kept to avoid sending duplicates. Tokens that Firebase reports as expired are removed. You can turn notifications off at any time in your device settings; the App then unregisters the token at the next launch.
06Feedback, reports and support messages
What you send us
- Feedback form (Profile → Support): the topic you choose (bug, idea, safety concern, complaint, request, other), the message you write, an optional contact e-mail, and the App version, platform and language, together with your install ID. This is the only place where text you write is sent to us.
- Reporting an AI answer (the flag next to an answer): the reported answer and your reason are sent to us so we can review it.
- E-mails you send to our support address.
Feedback is stored in our support database and mirrored to a private Telegram channel used by our team so that safety reports are seen quickly. We use it only to answer you, fix problems and act on safety reports. It is deleted with Delete my data or on request.
Personal support messages
Our team can reply to your feedback with a personal message shown inside the App. It is addressed to your install ID only and may include a small number of extra AI answers as a courtesy. We store the message and whether it was delivered and read, nothing else.
07Purchases and subscriptions
Payments are handled by Apple (App Store) or Google (Google Play). We never see your card or bank details. Subscription status is managed through RevenueCat, which assigns an anonymous purchase ID to your install and receives purchase receipts from Apple or Google. We store that anonymous ID together with your subscription status to unlock Rizz Pro features, apply usage limits and recognise your purchase when you tap “Restore purchases”.
Prices, billing periods and any introductory offers are shown in the App Store or Google Play before you buy. See the Terms of Use for how subscriptions renew and how to cancel.
08Ads and ad measurement
Users without an active Rizz Pro subscription may see ads served by Google AdMob: rewarded ads you choose to watch in exchange for an extra answer, and depending on configuration interstitial or banner ads. On Android, rewarded ads may also be served by Unity Ads through AdMob mediation. Subscribers do not see ads.
Ad networks receive the advertising identifier of your device (IDFA on iOS, Google Advertising ID on Android) and usual technical data (IP address, device model, OS, language) to serve, personalise and measure ads according to their own policies.
To measure our own advertising campaigns we use the Meta (Facebook) SDK. It automatically logs app installs, app opens and in-app purchases to Meta and, where permitted, your advertising identifier, so Meta can attribute installs to our ads. It never receives your chats or the people you add.
Your choices. On iOS the App asks for permission under App Tracking Transparency before any tracking. If you decline, ads are not personalised and Meta does not receive your advertising identifier. You can change this at any time in Settings → Privacy & Security → Tracking (iOS) or Settings → Google → Ads (Android), where you can also reset or delete the advertising ID.
09Service providers and transfers
We use the following providers. Several are located outside Türkiye and the EEA, mainly in the United States; transfers rely on the providers’ standard contractual safeguards.
| Provider | Purpose | Data |
|---|---|---|
| fal.ai and the language-model provider it routes to (Google, OpenAI or Anthropic) | Generating replies, openers, coach answers and analyses | Request text and context described in section 3; no identifiers |
| Google Firebase (Analytics, Cloud Messaging) | Usage analytics, push notifications | Usage events, Firebase app-instance ID, push token |
| Google AdMob and Unity Ads (Android, via mediation) | Ads for non-subscribers | Advertising ID, technical device data |
| Meta Platforms (Facebook SDK) | Measuring our ad campaigns | Install, app-open and purchase events; advertising ID with your permission |
| RevenueCat | Subscription management | Anonymous purchase ID, receipts, subscription status |
| Apple App Store, Google Play | Payments, app distribution | Handled under Apple’s and Google’s own policies |
| Telegram | Operational alerts to our team | Feedback and reports you submit; selected event metadata (never chat content) |
| Our own servers | AI proxy, usage events, feedback, notifications | Everything in sections 3 to 6 |
We do not sell your personal information and we do not share it with data brokers.
10Retention and security
- On-device data stays on your phone until you delete it in the App or uninstall the App.
- AI request text is processed transiently and not stored on our server.
- Usage events, install record, push token and notification log are kept while your install is active and deleted when you use Delete my data or ask us to.
- Feedback and support messages are kept until you delete your data or ask us to, and in any case no longer than needed to resolve the request and meet legal obligations (for example safety reports).
- Purchase records are kept by RevenueCat and the stores for as long as required for billing and tax purposes.
All connections between the App, our server and our providers use TLS encryption. API keys for our providers live only on our server, never in the App. Access to our server and support panel is restricted to our team.
11Deleting your data
In the App: Profile → Privacy and terms → Delete my data. This removes all data on your device (people, chats, replies, analyses, onboarding answers, settings), asks our server to delete your usage events, install record, push token, notification log, feedback and support messages, and gives the App a fresh anonymous install ID. The App then returns to the first screen.
Uninstalling the App removes all on-device data. Server-side data is deleted on request.
By e-mail: for data held by our providers (for example Firebase, Meta, RevenueCat) or for any other request, write to [email protected]. Because the App has no accounts, describe your request and include the App version and platform so we can locate the related records.
Your subscription is not cancelled by deleting your data; manage it in your Apple ID or Google Play account.
12Your rights
Depending on where you live (GDPR, UK GDPR, KVKK, CCPA/CPRA and similar laws) you have the right to access, correct or delete your personal data, to object to or restrict processing, to data portability, to withdraw consent at any time (for example for tracking or notifications) and to lodge a complaint with your data protection authority (in Türkiye: Kişisel Verileri Koruma Kurumu). Residents of California and other US states have the right to know what we collect and to opt out of “sharing” for cross-context behavioural advertising, which you exercise through the tracking and advertising settings described in section 8.
Legal bases under the GDPR and KVKK: performance of the service you request (sections 2, 3, 6, 7), your consent (tracking, notifications, personalised ads) and our legitimate interest in keeping the App secure, working and improving (sections 4, 5, 10).
To exercise a right, e-mail [email protected]. We answer within the period required by the law that applies to you.
13Age requirement
Rizz AI is intended for adults aged 18 and over. The App does not offer an under-18 option and we do not knowingly process data of anyone under 18. If you believe a minor has used the App, contact us and we will delete the related data. Our Child Safety Standards describe how we prevent and report child sexual abuse and exploitation.
14KVKK aydınlatma metni (Türkçe)
Veri sorumlusu MINI SOFT Yazılım Reklamcılık Ticaret ve Sanayi Ltd. Şti. (“Mini Mobile Apps”) olup Rizz AI hesap gerektirmez; eklediğiniz kişiler, sohbet geçmişi, notlar ve onboarding cevaplarınız cihazınızda tutulur. Ekran görüntüsündeki yazı cihazınızda okunur, görsel yüklenmez.
Cevap üretmek için yalnız gereken metin sunucumuz üzerinden yapay zekâ sağlayıcımıza (fal.ai ve yönlendirdiği model sağlayıcısı) iletilir ve sunucumuzda saklanmaz. İçerik barındırmayan kullanım olayları, kurulum kimliği, onboarding’de girdiğiniz takma ad ile anonim satın alma kimliği, bildirim izni verdiyseniz bildirim anahtarı, saat dilimi ve uygulama dili, gönderdiğiniz geri bildirimler, abonelik durumu ve iOS’ta izin verdiyseniz reklam kimliği; hizmetin sunulması, kullanım sınırları, reklam ve ölçüm, destek ve iyileştirme amaçlarıyla, sözleşmenin ifası, açık rıza ve meşru menfaat hukuki sebeplerine dayanarak işlenir.
Veriler, sunucuları yurt dışında (ağırlıklı ABD) bulunan fal.ai, Google (Firebase, AdMob), Meta, RevenueCat, Unity ve Telegram’a aktarılabilir. KVKK 11. madde kapsamındaki haklarınızı (bilgi talep etme, düzeltme, silme, itiraz vb.) [email protected] adresine yazarak kullanabilirsiniz. Uygulama içinden Profil → Gizlilik ve şartlar → Verilerimi sil ile cihazdaki ve sunucumuzdaki verilerinizi silebilirsiniz.
15Changes
We may update this policy as the App changes. The current version is always on this page with its date. If a change materially affects how we use your data, we announce it in the App before it takes effect.
16Contact
MINI SOFT Yazılım Reklamcılık Ticaret ve Sanayi Ltd. Şti. (Mini Mobile Apps), Türkiye.