Privacy
Privacy Policy
How Ranked handles your information — plainly and carefully.
This policy describes how Luthiber Labs Inc. ("Ranked," "we," "us") collects, uses, shares, and protects information when you use the Ranked mobile application and the website at therankedapp.com (together, the "Service"). Ranked is operated from Toronto, Canada.
By using the Service you agree to this policy. If you don't agree, please don't use Ranked.
Information we collect
Information you give us
- Account and profile: name, date of birth, phone number, email, gender, orientation, city, photos, prompts, and other profile details you choose to add.
- Verification: if you opt in to face verification, one still selfie taken while you hold a pose we assign at random. Amazon Rekognition compares that selfie one-to-one against your own main profile photo — we do not use liveness detection, and we never match your face against other users. The selfie is kept in private storage, never shown on your profile, so a moderator can check it against the assigned pose when the automatic match is inconclusive. See Data retention below.
- Communications: messages, pearls, event RSVPs, and reports you submit.
- Payments: if you subscribe, our payment processor (Apple, Google, or Stripe) handles card details. We store the subscription tier and status only.
Information collected automatically
- Device and usage: device model, OS version, IP address, coarse location (city), crash logs, and interactions with features. We use this to keep the Service running and to spot abuse.
- Location: if you enable it, we keep ONE current coordinate for your account — overwritten each time it updates, not a history of where you have been — used to measure distance to people, venues and events. Each venue check-in separately records where that check-in happened and stays with your check-in history. We do not track your continuous whereabouts. Switching Location off in the app stops us storing your position and deletes the one we hold.
- Cookies and identifiers: minimal cookies and app identifiers used to keep you signed in and to measure basic usage. No cross-app advertising.
How we use information
- Operate the Service — sign-in, matching, events, chats, payments.
- Show you people, events, and hosts within your city.
- Keep the community safe — moderation, verification, and abuse prevention.
- Communicate about your account, invites, and community updates. You can opt out of non-essential email at any time.
- Comply with law, safety obligations, and legitimate business needs.
How we share information
We do not sell your personal information. We share it only in these limited cases:
- With other members: what appears on your profile, plus your pearls, RSVPs, and messages within Ranked.
- Service providers: vendors who help us run Ranked — hosting (Supabase, Cloudflare), payments (Stripe, Apple, Google), maps and venue lookup (Google Maps Platform), moderation and opt-in face verification (AWS Rekognition, OpenAI), analytics, and email (Resend). They may only use data on our behalf.
- Google Maps Platform: the check-in map is drawn by Google's map SDK on your own device. While that map is open, your IP address and the area of the map you are looking at reach Google; your position is used on the device itself to draw the "you are here" dot. When you search for a venue while creating an activity, the text you type and your city are sent to Google Places. We do not send Google your profile, your matches, or the coordinate we store for you.
- Legal and safety: when required by law, or to protect the rights, property, or safety of Ranked, our members, or the public.
- Reporting channels: child-safety reports may be shared with NCMEC (CyberTipline) and Cybertip.ca.
- Business transfers: if Ranked is acquired or reorganized, information may transfer with the business, subject to this policy.
Your choices and rights
You can view, edit, or delete your profile from the app. You may request access, correction, portability, or deletion of your personal information by contacting [email protected].
Canadian residents have rights under PIPEDA and Ontario law. EU/UK residents have rights under GDPR and UK GDPR. California residents have rights under the CCPA/CPRA.
Data retention
We keep account data while your account is active and for a reasonable period afterward to prevent abuse and meet legal obligations. Deleted accounts are removed from active systems within 30 days; some limited records (reports, safety logs) may be retained longer where required.
Verification selfies are the exception and are held for the shortest time we can manage. A selfie is destroyed as soon as the verification decision is made — immediately when the automatic match succeeds, or when a reviewer decides if it goes to manual review. Any selfie still present 30 days after it was submitted is deleted by a scheduled job regardless of the outcome. We do not build or keep a face template.
Security
We use industry-standard measures — encryption in transit and at rest, access controls, and audit logging — to protect your information. No system is perfectly secure; if we learn of a breach that affects you, we will notify you as required by law.
Children
Ranked is for adults 18 and over. We do not knowingly collect information from minors. If you believe a minor is using Ranked, contact [email protected] and we will act promptly.
International transfers
Ranked is operated from Canada. Your information may be processed in Canada, the United States, and other countries where our service providers operate. We rely on standard contractual clauses and other lawful transfer mechanisms where required.
Changes to this policy
We may update this policy. If changes are material, we will notify you in-app or by email at least 14 days before they take effect.
Contact
Questions or requests: [email protected]
Safety concerns: [email protected]
General support: [email protected]
Luthiber Labs Inc. · Toronto, Canada