Last updated: 11 October 2026
Ruyue (“the App”) is developed and operated by Torchingale (“we”, “us”, “our”). Ruyue is a private space shared by two paired people, and this Privacy Policy explains what personal data we process when you use the App, why we process it, and what rights you have.
By using the App, you agree to the practices described in this policy.
1. Data We Collect
Account data. When you create an account or sign in, we process an account identifier, your email address, and — if you choose to provide it or your sign-in provider supplies it — a display name and profile picture.
Pairing data. The link between your account and your partner’s account, including invitation and pairing status, and the date the pairing was created.
Health-related content you enter. Cycle records, phase information, symptoms, energy levels, and mood check-ins that you choose to log. Once you pair, your partner can see your current cycle phase and day and your latest check-in (mood, energy, symptoms and note), but not your history.
Messages and moments. Letters (including letters scheduled for a future delivery date), view-once photos, and short voice notes, together with their delivery and view status.
Shared content. Lists, special dates, expenses, wardrobe notes, and similar entries created in your shared space.
Dreams. Dream entries you write and any interpretations generated for them. Dreams are private to you unless you choose to share an individual dream with your partner.
AI feature data. Questions and other inputs you submit to the App’s AI features, the context needed to answer them (described in Section 4a), and the generated results that the App saves for you, such as plans and readings. Reference photographs you provide for image generation are used only to produce that image.
AI credit data. Your AI credit balance and a record of credits received, purchased, and used, including credits purchased for you by your partner. To grant the one-time welcome credits fairly, we store a one-way hashed identifier of the device on which they were claimed; it cannot be used to identify you or your device outside this purpose.
Vault content. Entries you store in the private vault. These are encrypted on your device before they are sent to us, and we hold only the encrypted result.
Location and presence data. While a live location session is active, the latest position needed to run that session, plus the session’s start and expiry. If you enable battery sharing, your current battery level and the time it was reported.
Subscription data. Whether your account holds an active paid subscription, and the status and history of that subscription. We do not receive or store your payment card details; purchases are handled by the app store you bought through.
Technical and diagnostic data. Device model, operating system version, app version, language and region settings, and crash or error reports containing diagnostic information about failures in the App. You can turn crash reporting off at any time in Settings → “Send crash reports”.
Notification data. A device token used to deliver notifications, if you allow notifications.
We do not collect your contacts or your photo library beyond the individual images you send. We process your location only while you share your live location with your partner; sharing can continue in the background until you turn it off.
2. Why We Process Your Data
We process your data to:
- create and maintain your account, authenticate you, and manage your pairing with your partner;
- provide the App’s core features, including cycle and mood context, letters, snaps and voice notes, shared lists and dates, the vault, and compatibility content;
- provide AI features you choose to use and manage your AI credits;
- deliver location, battery and presence signals according to your settings;
- send notifications and reminders you have enabled;
- diagnose crashes, fix bugs, and improve stability and performance;
- understand aggregate usage patterns in order to improve the App;
- comply with legal obligations and enforce our Terms and Conditions.
We do not sell relationship or health-related data, and we do not use it to build advertising profiles.
3. Legal Bases (EEA/UK Users)
Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (providing the App and your account); your explicit consent (cycle and mood data, which is health data, as well as location sharing, battery sharing, and notifications); our legitimate interests (security, abuse prevention, and improving the App); and compliance with legal obligations.
You may withdraw consent at any time, without affecting processing carried out before withdrawal. Withdrawing consent for a feature stops that feature.
4. Sharing With Your Partner
Ruyue is designed for two people, so some data is visible to the person you are paired with. Once you pair, your partner can see your current cycle phase and day and your latest mood check-in. Your online status is shared by default and can be turned off in Settings. Live location and battery visibility are off until you turn them on and can be turned off at any time. A live location session shows a persistent indicator on your phone while it is running and continues until you stop it; only your latest position is kept, and it is deleted when you stop.
Vault contents are encrypted on your device and are readable only by those you have shared the key with through the App.
Dreams are visible to your partner only if you choose to share a specific dream, and you can stop sharing it at any time. Your partner can see your AI credit balance, and credits one of you purchases for the other are shown to both of you.
4a. AI Features
Some features of the App use artificial intelligence to generate answers, interpretations, plans, readings, and images. When you use such a feature, your input and the context required to respond — which may include birth details, cycle phase, recent moods and notes, stated preferences, and assessment results relating to you or your partner — are sent to our AI service provider, Google (Gemini API), solely to generate the result. This happens only when you use an AI feature. These requests may include the first names you and your partner entered, but never your email address or account identifier.
To maintain and improve the AI features, the text of questions submitted to the assistant may be retained in a form that is not associated with your account or any identifier. Generated answers and profile context are not retained for this purpose. Because these records are not linked to an account, they cannot be attributed to, or retrieved for, an individual user. We also keep aggregate usage counts (for example, the number of requests per feature per day) that contain no personal data.
AI-generated content can be inaccurate or incomplete and is provided for reflection and entertainment, not as professional, medical, psychological, or relationship advice.
5. Sharing With Others
We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
We share data only with service providers who process it on our behalf and under contract, strictly to operate the App — for example providers of authentication, data hosting and synchronisation, crash reporting, notification delivery, subscription management, AI processing (Google Gemini API, as described in Section 4a), and map tiles (Esri ArcGIS, loaded by your device when you view a map). These providers may process data outside your country of residence; where required, such transfers are covered by appropriate safeguards, including standard contractual clauses.
We may also disclose data where we are legally required to do so, or where necessary to protect our rights, safety, or the safety of others, and in connection with a merger, acquisition, or sale of assets, subject to this policy.
6. Retention
We keep your account data and content for as long as your account is active.
View-once photos and voice notes are deleted after they have been viewed or heard, or when they expire. Live location sessions retain only the position needed for the active session; we do not build a movement history. Letters scheduled for a future date are kept, sealed, until their delivery date.
If you delete your account, we delete or irreversibly anonymise the associated data within a reasonable period, including shared content that cannot exist without your account, except where we must retain certain records to comply with legal, tax, or accounting obligations, or to resolve disputes.
Diagnostic and crash data is retained for a limited period and then deleted.
Records of AI credit purchases may be retained after account deletion where required for legal, tax, or accounting purposes. Assistant questions retained as described in Section 4a are not linked to an account and are therefore not affected by account deletion.
7. Security
Vault entries and letters are encrypted on your device before transmission, and the server does not hold the key required to read them. We also apply appropriate technical and organisational measures across the service, including encryption in transit, access controls, and secure storage of credentials on your device. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your Rights
Depending on where you live, you may have the right to access your data; to correct inaccurate data; to delete your data; to restrict or object to processing; to data portability; and to lodge a complaint with your local supervisory authority.
If you are a California resident, you additionally have the right to know what personal information we collect and how it is used, to request deletion or correction, and not to be discriminated against for exercising these rights.
You can delete your account and its data from within the App. For any other request, contact us at the address in Section 12. We respond within the period required by applicable law.
9. Not Medical Advice
Cycle and mood information in Ruyue is provided for awareness and shared context between partners. It is not a medical device, not a diagnosis, not contraception guidance, and not a substitute for professional medical advice.
10. Children
The App is not directed at children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Changes to This Policy
We may update this policy from time to time. We will update the “Last updated” date above and, for material changes, notify you in the App. Continued use of the App after a change takes effect means you accept the revised policy.
12. Contact
Torchingale — [email protected]
Website: torchingale.com/contact-us