Privacy Policy

Account information

When you register, we collect your email address, a username, a password (handled by our authentication provider — we never see or store your password in plain text), and your date of birth, which we use to confirm you meet our 18+ age requirement. If you sign in with Google instead, we receive your name, email address, and profile photo from Google.

Avatar files

Any VRM avatar files you upload, along with a generated thumbnail image, are stored on our servers and associated with your account. You may also select from preset avatars we provide.

Call, matchmaking, and moderation data

To match you with another user and connect a call, our servers process your account identifier, connection/session metadata, and, where applicable, information you submit when you report or block another user (the reason, any details you provide, and the identifiers of both accounts involved).

Payment information

Additional avatar slots are purchased through Stripe. Stripe collects and processes your payment card details directly — we don't receive or store your full card number. We do receive confirmation that a payment succeeded so we can add the slot to your account.

Technical data

Like most online services, we and our infrastructure providers automatically log technical information such as IP address, device/browser type, and timestamps of requests, for security and reliability purposes.

Rilumo is built so your raw camera video never has to leave your device:

• Face tracking runs locally in your browser. Your webcam feed is analyzed on-device to detect facial expressions and head movement; the video itself is never uploaded to our servers or to the person you're talking with.
• Only the derived numerical data (facial expression values and head rotation) is sent — directly to the person you are matched with, over a peer-to-peer connection (WebRTC), not through our servers — so their app can animate your avatar in real time.
• Voice audio is streamed peer-to-peer the same way. We do not record, store, or listen to your calls.
• Because calls are peer-to-peer (WebRTC), your device connects more or less directly to your matched peer's device, which means each side's IP address is necessarily exposed to the other as part of establishing the connection. This is a standard feature of WebRTC-based calling and is not something we can suppress while keeping calls peer-to-peer.

• Create and secure your account, and verify you meet our age requirement.
• Operate core features: matching you with other users, connecting calls, and rendering your avatar.
• Store and serve the avatars you upload.
• Process purchases of additional avatar slots.
• Review reports, enforce our community rules, and take action against abusive accounts (including suspension).
• Maintain the security, integrity, and reliability of the Service, including detecting abuse or fraud.
• Communicate with you about your account or the Service.
• Comply with legal obligations.

We share information in the following circumstances:

• With the person you're matched with: your avatar, its live facial-expression data, your voice audio, and (as described above) your IP address, for the duration of the call.
• Service providers: we use third parties to run the Service, including Firebase/Google Cloud (authentication and account database), cloud file storage for uploaded avatars, and Stripe (payment processing). These providers only receive the information needed to perform their function.
• Legal and safety reasons: reports involving suspected illegal content or conduct — including content that appears to involve a minor — may be reviewed by our moderation team and, where we are legally required or believe it necessary to protect someone's safety, reported to law enforcement or relevant authorities.
• Business transfers: if Rilumo is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

We do not sell your personal information.

We keep account information for as long as your account is active. Uploaded avatars and thumbnails are kept until you delete them or close your account. Report and moderation records are kept as long as needed to enforce our rules and meet legal obligations, even after an account is deleted. We do not retain call audio, video, or face-tracking data after a call ends, since that data is never sent to our servers in the first place.

• Access & correction: you can review and update your account details from within the app.
• Deleting avatars: you can remove avatars you've uploaded.
• Account deletion: contact us using the details below to request deletion of your account and associated data, subject to what we need to retain for legal, safety, or fraud-prevention purposes (for example, records tied to an open moderation report).
• Depending on where you live, you may have additional rights over your personal information (such as the right to access, correct, delete, or port your data, or to object to certain processing) under laws like the EU/UK GDPR or U.S. state privacy laws. Contact us to exercise these rights.

Rilumo is for people 18 and older. We require a date of birth at signup and do not knowingly allow anyone under 18 to create an account or use the Service. If we become aware that someone under 18 has created an account, we will suspend it and delete the associated data. Reports indicating that an account may belong to, or that a call involved, a minor are treated as urgent and may be escalated to law enforcement.

We use reasonable technical and organizational measures to protect your information, including encrypted connections, access controls on our systems, and peer-to-peer call architecture that avoids routing your video/audio through our servers at all. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

We rely on the following categories of third-party services, which have their own privacy practices:

• Firebase / Google Cloud — authentication and account/report data storage.
• Google-hosted ML model files— the on-device face-tracking library downloads its model files from Google's infrastructure; this does not involve sending your video anywhere.
• Cloud file storage — hosts uploaded avatar files.
• Stripe — processes payments for avatar slot purchases.

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you through the Service. Continued use of Rilumo after changes take effect means you accept the updated policy.

Questions about this Privacy Policy or your data? Contact us at info@rilumo.com.