Privacy Policy
Effective Date: 25/10/2026
This Privacy Policy explains how Ramblio ("we", "our", "us") collects, uses, and protects your personal data when you use our social media platform.
1. Who We Are
Ramblio is a social media application operated by an individual. If you have any questions or concerns about this Privacy Policy, you may contact us at:
Email: chef@tweesecake.app
2. Data We Collect
When you use Ramblio, we may collect the following categories of personal data:
- Account Data: Email address, username, full name, profile information (including optional website, and an optional profile photo with its description). We keep only resized copies of a photo, without its location or other file details.
- Content Data: Rambles (posts), each with an optional photo and its description, comments (text or audio), reactions, follows, and tags you create. As with profile photos, we keep only resized copies of a ramble's photo, without its location or other file details.
- Audio Data: Uploaded audio files and generated audio variants.
- Communication Data: Messages you send in conversations.
- Hangout Data: Hangout titles, descriptions, visibility settings, membership and role assignments, hand-raise requests, speaker status, join/leave timestamps, moderation actions (such as mutes or bans), and related diagnostics needed to operate live audio rooms.
- Interaction Data: Your interactions with rambles, reactions, and user feeds.
- Technical Data: Metadata such as timestamps and file hashes automatically captured by our system.
- Device & Security Data: Your IP address, the browser and operating system you use, and a device identifier.
Your device identifier depends on how you use Ramblio:
- Website: a fingerprint of your browser, kept in your browser. It is a one-way hash of characteristics of your browser and device, such as screen size, time zone, language, and graphics capabilities.
- iPhone and iPad app: a random identifier the app creates and keeps in your device's keychain. It stays on that device: it is not synced to iCloud or restored to another device. It remains if you delete and reinstall the app.
- Android app: the identifier Android gives Ramblio on your device (Android ID), which is different for every app.
- Desktop app: an identifier made from your computer's hardware and Windows installation identifiers (on a Mac, its hardware UUID).
3. How We Use Your Data
We process your personal data for the following purposes:
- To provide, maintain, and improve the Ramblio platform.
- To host live Hangouts, manage speaker queues, and support moderation tools.
- To enable social interactions, including following, messaging, commenting, and reactions.
- To enforce our community standards (e.g., blocking, reporting, moderation, and automated safety checks on profile, group and ramble photos, which also draft each photo's description for screen readers).
- To send push notifications and service-related updates.
- To protect the security of our platform and prevent fraud and abuse, including detecting and preventing spam, fake or duplicate accounts, and attempts to circumvent bans or account restrictions.
- To use your device identifier (see Section 2) to recognize when someone who has been banned comes back with a new account on the same device, and to help stop spam and abuse. We do not use it for advertising or analytics, or to track you across other companies' apps or websites.
- To comply with legal obligations.
4. Legal Basis for Processing
We rely on the following legal bases under the GDPR:
- Consent: For optional features such as marketing emails (if ever introduced).
- Contract: To provide the services you request when you create and use an account.
- Legitimate Interests: To maintain platform integrity and security, improve features, ensure safe interactions, and prevent fraud, abuse, and unauthorized or repeated account creation. This includes using your device identifier to recognize when someone who has been banned comes back with a new account, and to help stop spam and abuse.
- Legal Obligations: Where required to comply with applicable laws.
5. Data Sharing
We do not sell your personal data. However, we may share your data:
- With other users of Ramblio (e.g., when you publish rambles, comments, or profile details set to public).
- With participants in a hangout consistent with its visibility settings (e.g., displaying your profile, role, and speaking status to others in the room).
- With service providers who assist in hosting, storage, notifications, analytics, or automated safety checks, under strict confidentiality agreements. For example, Anthropic and OpenAI check each profile, group or ramble photo, and OpenAI checks any description you give it, before it is shown on Ramblio.
- If required by law, to comply with legal requests, enforce terms, or protect rights and safety.
We do not sell or share your device identifier. Only our moderation tools and moderators see it, and other users never do.
6. Data Retention
We keep your personal data only as long as necessary:
- Account and profile data: retained until you delete your account.
- Content (rambles, comments, messages): retained until you delete them or your account.
- Photos: a profile or group photo is deleted when it is changed or removed, and a ramble's photo when it is changed or removed or its ramble is deleted. A photo added to a ramble that is never posted is deleted within a day. A photo refused or removed by our checks or moderators, or one that was reported, is kept privately as evidence for up to 90 days, or longer where the law requires it.
- Hangout metadata (titles, membership, moderation logs): retained for operational history and safety review, then deleted or anonymized when no longer needed.
- Technical and security logs: retained for a limited time to ensure platform safety.
- Device and security signals (such as IP addresses): retained for a limited period to detect and prevent abuse, then deleted or anonymized.
- Device identifiers: each one is deleted once it has not been seen on your account for 12 months. If your account is banned, they are kept for as long as the ban stands. If you delete your account, they are deleted straight away.
7. Your Rights (GDPR)
As an EU/EEA user, you have the following rights:
- Access: Request a copy of your personal data.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your personal data.
- Restriction: Limit how we process your data.
- Portability: Receive your data in a structured format.
- Objection: Object to processing based on legitimate interests.
To exercise these rights, please contact us at chef@tweesecake.app.
8. Data Security
We use technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, or destruction. However, no system is 100% secure.
9. International Data Transfers
Your data may be processed or stored in countries outside your home country. Where required, we implement appropriate safeguards (such as standard contractual clauses) to ensure GDPR compliance.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via the platform or by email.
11. Contact
For any questions, concerns, or requests regarding this Privacy Policy, you can reach us at:
Email: chef@tweesecake.app