Ruby Privacy Policy

Effective Date: August 10, 2026

Ruby ("Ruby," "we," "us," or "our") is a social discovery app that helps adults create profiles, share scenes, discover people, and start conversations with more context. This Privacy Policy explains what information Ruby collects, how we collect and use it, when we share it, how long we retain it, and the choices available to you.

1. Age Requirement

Ruby is intended only for adults who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If we learn that a person under 18 has provided personal information to Ruby, we will take appropriate steps to delete the information and close the account.

2. Information We Collect and How We Collect It

We collect information in the following ways:

A. Information You Provide Directly

• Account and profile information: your name or display name, age or date of birth, gender, occupation or other work information, tags, bio, photos, interests, prompts, scenes, answers, and other profile details you choose to provide.

• Messages and content: messages, conversation information, and other text, images, or content you submit through Ruby.

• Safety and support information: reports, blocks, appeals, feedback, and communications you send to our support team.

• Purchase information: purchase or subscription status, transaction identifiers, and related records received from Apple or another authorized payment provider. Ruby does not receive your full payment-card details from Apple.

B. Information Collected Automatically

• Device and technical information: device type, operating system, app version, IP address, device or app identifiers, language, network information, diagnostic data, and crash logs.

• Usage information: features viewed or used, interactions with profiles and scenes, approximate timestamps, session activity, and actions taken in the app.

• Approximate location: Ruby may infer a general location from information such as your IP address for security and service operation.

C. Information Collected With Your Permission

• Location information: precise or approximate device location, if you grant location permission, to support relevant discovery features.

• Photos or camera content: photos or images you choose to upload or create using device features, subject to the permissions and controls provided by your device.

D. Information From Other Sources

We may receive information from other users, such as when they report an account or submit safety-related information; from Apple or authorized payment providers regarding transactions; and from service providers that help us prevent fraud, maintain security, and operate Ruby.

3. How We Use Information

We use information to:

• Create, authenticate, and manage your account.

• Build, display, and maintain your profile.

• Show scenes, profile signals, and people-discovery features.

• Enable messages, conversations, and mutual connections.

• Personalize your experience and provide relevant suggestions.

• Operate, maintain, analyze, and improve Ruby's features, safety, reliability, and performance.

• Detect and prevent spam, scams, fraud, abuse, impersonation, and other unsafe or unauthorized activity.

• Review reports, moderate content, enforce our rules, and protect users.

• Process and verify purchases and subscriptions.

• Provide support, communicate service-related information, and comply with legal obligations.

• Provide AI-assisted features when you have given the permission described below.

4. AI-Assisted Features and OpenAI

Ruby offers optional AI-assisted features that may organize profile information and generate profile signals, conversation context, or suggestions.

To provide these features, Ruby sends the following information to OpenAI OpCo, LLC ("OpenAI") through OpenAI's API:

• Age

• Occupation or other work information

• Tags

• Bio

This information is sent only to generate and return the AI-assisted output requested for Ruby's features. Ruby does not send this information to OpenAI for advertising, and Ruby does not permit it to be used to train or improve OpenAI's general-purpose models.

Before Ruby sends any of the information listed above to OpenAI, Ruby presents an in-app notice that identifies the information to be sent, names OpenAI as the recipient, explains the purpose of the transfer, and asks for your affirmative permission. If you select Not Now, Ruby will not send this information to OpenAI and the relevant AI-assisted feature will remain unavailable.

You may withdraw your permission at any time through Settings → Privacy → AI Data Sharing. After permission is withdrawn, Ruby will stop sending new personal information to OpenAI. Withdrawing permission does not reverse processing that was completed before the withdrawal. You may also request deletion as described in Section 8.

OpenAI processes API data on Ruby's behalf under its applicable business terms and data-protection commitments. We require OpenAI to provide the same or an equivalent level of protection for personal information as described in this Privacy Policy. Under OpenAI's current API data controls, API data is not used to train or improve OpenAI models unless the API customer expressly opts in. OpenAI may retain API abuse-monitoring logs containing submitted content and generated output for up to 30 days by default, unless longer retention is required by law or reasonably necessary to protect its services or third parties from harm.

Ruby does not use AI to create fake users, impersonate users, or send messages on your behalf without your action.

You can learn more about OpenAI's practices at OpenAI's Privacy Policy and OpenAI API Data Controls.

5. How We Share Information

We may share information in the following circumstances:

• With other users: your display name, age, photos, occupation or work information, tags, bio, interests, scenes, prompts, answers, and other profile content you choose to make visible may be shown to other Ruby users. Messages are shared with the people participating in the relevant conversation.

• With OpenAI: after you provide affirmative permission, we share the information listed in Section 4 for the AI-assisted purposes described there.

• With service providers: we may share information with providers that perform hosting, analytics, crash reporting, moderation, customer support, payment processing, fraud prevention, security, and other operational services for Ruby. These providers may process information only as necessary to perform services for us and must provide the same or an equivalent level of protection required by this Privacy Policy.

• For safety and legal reasons: we may disclose information if reasonably necessary to comply with law or legal process; enforce our terms and rules; investigate fraud, abuse, or illegal activity; or protect the rights, privacy, safety, or property of Ruby, our users, or others.

• In a business transaction: information may be transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality and data-protection measures.

• With your direction or consent: we may share information when you direct us to do so or provide additional consent.

6. Safety and Moderation

Ruby may use automated tools, manual review, and user reports to identify, review, restrict, or remove content or accounts that violate our rules, including content involving nudity, harassment, hate speech, scams, impersonation, spam, or abusive behavior. Users can report or block other users in the app.

7. Your Choices and Controls

Depending on the feature and applicable law, you can:

• Edit or correct your profile information.

• Delete scenes, photos, or other content you control.

• Manage location, photo, camera, and notification permissions through Ruby or your device settings.

• Allow or decline AI data sharing before any covered information is sent to OpenAI.

• Withdraw AI data-sharing permission through Settings → Privacy → AI Data Sharing.

• Block or report other users.

• Request access to, correction of, or deletion of your personal information.

• Delete your account in the app through Settings → Account → Delete Account.

If you withdraw a device permission, Ruby will stop collecting new information through that permission, but the withdrawal may not delete information collected previously.

8. Data Retention and Deletion

We retain account and profile information while your account is active and for as long as reasonably necessary to provide Ruby. Other information is retained based on the reason it was collected, including the need to maintain safety, prevent fraud, resolve disputes, comply with legal obligations, and enforce our agreements.

When you delete your account, we will delete or de-identify personal information associated with your account within a reasonable period, except where retention is required or permitted for legal, safety, fraud-prevention, dispute-resolution, or security purposes. Some information may remain temporarily in backups until those backups are overwritten under our normal retention cycle.

We may retain limited records of reports, blocks, enforcement actions, transactions, and deletion requests when necessary to protect users, prevent repeat abuse or fraud, maintain financial records, demonstrate compliance, or meet legal requirements.

Where applicable, we will also instruct service providers processing personal information on our behalf to delete or return the information. Data already processed by OpenAI may remain for the limited retention period described in Section 4 or for a longer period where required by law or necessary for safety and security.

9. International Data Processing

Ruby and its service providers, including OpenAI, may process information in the United States and other countries where they operate. These countries may have data-protection laws that differ from those in your location. Where required, we use appropriate contractual or legal safeguards for international transfers.

10. Security

We use reasonable technical, administrative, and organizational measures designed to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, and destruction. However, no online service or method of transmission can guarantee complete security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and provide notice in the app or by another appropriate method when required.

12. Contact and Privacy Requests

You may submit privacy questions or requests through Ruby's in-app support channel or through email vikaandfeedback@kimaworld.com. We may need to verify your identity before completing a request. Your rights may vary depending on where you live, and certain exceptions may apply under applicable law.