Back to App

Privacy Policy - Ruyue

Last updated: 27 August 2026

Ruyue (“the App”) is developed and operated by Torchingale (“we”, “us”, “our”). Ruyue is a private space shared by two paired people, and this Privacy Policy explains what personal data we process when you use the App, why we process it, and what rights you have.

By using the App, you agree to the practices described in this policy.

1. Data We Collect

Account data. When you create an account or sign in, we process an account identifier, your email address, and — if you choose to provide it or your sign-in provider supplies it — a display name and profile picture.

Pairing data. The link between your account and your partner’s account, including invitation and pairing status, and the date the pairing was created.

Health-related content you enter. Cycle records, phase information, symptoms, energy levels, and mood check-ins that you choose to log. Where this data is shared with your paired partner, it is shared because you enabled that sharing.

Messages and moments. Letters (including letters scheduled for a future delivery date), view-once photos, and short voice notes, together with their delivery and view status.

Shared content. Lists, special dates, expenses, wardrobe notes, and similar entries created in your shared space.

Vault content. Entries you store in the private vault. These are encrypted on your device before they are sent to us, and we hold only the encrypted result.

Location and presence data. While a live location session is active, the latest position needed to run that session, plus the session’s start and expiry. If you enable battery sharing, your current battery level and the time it was reported.

Subscription data. Whether your account holds an active paid subscription, and the status and history of that subscription. We do not receive or store your payment card details; purchases are handled by the app store you bought through.

Technical and diagnostic data. Device model, operating system version, app version, language and region settings, and crash or error reports containing diagnostic information about failures in the App.

Notification data. A device token used to deliver notifications, if you allow notifications.

We do not collect your contacts, your photo library beyond the individual images you send, or continuous background location.

2. Why We Process Your Data

We process your data to:

  • create and maintain your account, authenticate you, and manage your pairing with your partner;
  • provide the App’s core features, including cycle and mood context, letters, snaps and voice notes, shared lists and dates, the vault, and compatibility content;
  • deliver time-limited location and presence signals that you have explicitly turned on;
  • send notifications and reminders you have enabled;
  • diagnose crashes, fix bugs, and improve stability and performance;
  • understand aggregate usage patterns in order to improve the App;
  • comply with legal obligations and enforce our Terms and Conditions.

We do not sell relationship or health-related data, and we do not use it to build advertising profiles.

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (providing the App and your account); your explicit consent (cycle and mood data, which is health data, as well as location sharing, battery sharing, and notifications); our legitimate interests (security, abuse prevention, and improving the App); and compliance with legal obligations.

You may withdraw consent at any time, without affecting processing carried out before withdrawal. Withdrawing consent for a feature stops that feature.

4. Sharing With Your Partner

Ruyue is designed for two people, so some data is visible to the person you are paired with. What your partner can see is determined by what you choose to share: cycle and mood visibility, live location sessions, and battery visibility are each opt-in and can be turned off at any time. A live location session shows a persistent indicator while it is running and expires on its own.

Vault contents are encrypted on your device and are readable only by those you have shared the key with through the App.

5. Sharing With Others

We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

We share data only with service providers who process it on our behalf and under contract, strictly to operate the App — for example providers of authentication, data hosting and synchronisation, crash reporting, notification delivery, and subscription management. These providers may process data outside your country of residence; where required, such transfers are covered by appropriate safeguards, including standard contractual clauses.

We may also disclose data where we are legally required to do so, or where necessary to protect our rights, safety, or the safety of others, and in connection with a merger, acquisition, or sale of assets, subject to this policy.

6. Retention

We keep your account data and content for as long as your account is active.

View-once photos and voice notes are deleted after they have been viewed or heard, or when they expire. Live location sessions retain only the position needed for the active session; we do not build a movement history. Letters scheduled for a future date are kept, sealed, until their delivery date.

If you delete your account, we delete or irreversibly anonymise the associated data within a reasonable period, including shared content that cannot exist without your account, except where we must retain certain records to comply with legal, tax, or accounting obligations, or to resolve disputes.

Diagnostic and crash data is retained for a limited period and then deleted.

7. Security

Vault entries and letters are encrypted on your device before transmission, and the server does not hold the key required to read them. We also apply appropriate technical and organisational measures across the service, including encryption in transit, access controls, and secure storage of credentials on your device. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on where you live, you may have the right to access your data; to correct inaccurate data; to delete your data; to restrict or object to processing; to data portability; and to lodge a complaint with your local supervisory authority.

If you are a California resident, you additionally have the right to know what personal information we collect and how it is used, to request deletion or correction, and not to be discriminated against for exercising these rights.

You can delete your account and its data from within the App. For any other request, contact us at the address in Section 12. We respond within the period required by applicable law.

9. Not Medical Advice

Cycle and mood information in Ruyue is provided for awareness and shared context between partners. It is not a medical device, not a diagnosis, not contraception guidance, and not a substitute for professional medical advice.

10. Children

The App is not directed at children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. We will update the “Last updated” date above and, for material changes, notify you in the App. Continued use of the App after a change takes effect means you accept the revised policy.

12. Contact

Torchingale — [email protected]

Website: torchingale.com/contact-us