Privacy policy
Your privacy in the Myria alpha.
This policy covers Myria's closed alpha: an early, invitation-only test with a small group of people. The alpha is test software. Its data is disposable and will be deleted before any wider release. A full policy will replace this one before Myria opens to the public.
Who we are
Myria is made by Intrepid Rhino, LLC ("we", "us"). Questions, requests and complaints about privacy go to contact@intrepidrhino.com.
The short version
- We collect what the app needs to introduce you to people: your profile, photos, a coarse location area, and what you do in the app.
- We don't sell your data, we don't show ads, and the app uses no analytics or tracking tools. This website counts visits to its public pages, without cookies, as described below.
- Messages are not end-to-end encrypted. They are encrypted when stored, but we can read them. A moderator reads a conversation only when someone reports it.
- Some accounts are AI test users run by Anthropic's Claude. Anything you send them, and parts of your profile, go to Anthropic.
- You can delete your account in the app. Some records are kept after deletion, and some deletions are not yet complete. Both are listed below.
What we collect, and why
Your invitation and sign-in
- Your invitation: the name we invited you by, when we invited you, and when the invitation expired.
- Your email address, which you gave the person who invited you. We use it only to tell you a match or message is waiting in Myria. The email never says who or what. It is deleted when you delete your account. Ask to stop the emails and we will.
- Your mobile number, if you choose to give it: optional, and only your own. You add it under You → Text alerts to get text alerts, as described in Text messages below. Myria never needs it to join, sign in or recover an account.
- The age check: you give your date of birth and country. We use it to check that you are 18 or over, and keep it to show your age on your profile. Other people see your age, never your date of birth. It is deleted as soon as you delete your account. We also keep your country and the date you passed the check. No identity document is checked in the alpha.
- Your passkey: we store its public key and when it was last used. The private key stays on your devices (for example, in Apple's Keychain) and never reaches us.
- Sign-in records: each sign-in attempt and its outcome. Each signed-in device gets a label like "Safari on iPhone", so you can see and end your sessions.
- One cookie, on the web only, which keeps you signed in. It is essential to the service. We use no other cookies.
Your profile
- What you write: your display name (it doesn't need to be your legal name), bio, gender in your own words and whether to show it, orientation, relationship structure, availability, and what you're here for (friendship, dating, intimacy).
- Who you'd like to meet: used for matching and never shown.
- Sensitive information: some of these details, such as your orientation, gender, or that you're here for intimacy, reveal something about your sex life or identity. You choose whether to give them, and other people see them only on your profile.
Photos
- Up to six profile photos. Each is re-encoded when you upload it, which removes hidden information such as GPS location. We keep the re-encoded copy, not your original file.
- In the alpha, a moderator looks at every photo before it appears on your profile.
- Photo tips (such as how many faces a photo shows) run on your device. Your photo is not sent anywhere for them.
Location
- If you share your location, your device sends it to us once. We convert it to a coarse area and discard the exact position. We store only the area.
- Other people see a distance band such as "10–20 miles away", never your position.
- A limit to know about: in the alpha an area is about 20 by 12 miles. With so few testers, someone comparing distance bands could work out roughly which area you're in.
Activity in the app
- Interactions: likes and the tags you add to them, passes, matches, hides, blocks and disconnects.
- Messages you send and receive.
- Reports you make or that are made about you, and the moderation decisions that follow.
- Activity: the day you were last active (the date only, never the time). We don't record it if you choose to hide it.
- The profile assistant: when you use it, a record that you did, so we can limit how often it runs.
We don't store your IP address with your account. Our web server keeps no access log.
Text messages
- Optional, and opt-in only. Myria texts you only if you add your own mobile number and tick "Text me when something new is waiting". We record the number, when you opted in, and the wording you agreed to.
- What we send: an alert that something new is waiting for you in the app, and a code to confirm your number. A text never says who or what, never carries a message, and is never used to sign you in or recover your account.
- Only your number. We never text anyone else, and we never send invitations by text.
- Message frequency varies. Msg & data rates may apply. Reply HELP for help, STOP to opt out. Turning texts off in the app deletes your number, and deleting your account deletes it at once.
- After STOP, we delete your number from your account and keep it, with no account attached, on a list of numbers we must not text, so that no text goes to it again. Reply START to come off that list.
- Mobile numbers and SMS opt-in consent are never shared with or sold to third parties or affiliates for marketing or promotional purposes.
- Amazon Web Services sends the texts for us. Questions go to contact@intrepidrhino.com. The full program terms are in our terms of use.
Messages and who can read them
- Messages are encrypted when stored, each conversation under its own key. They are not end-to-end encrypted. Our systems can decrypt them, and so could anyone with administrative access to our servers.
- When someone reports a conversation, a moderator can read it to decide what to do. In the alpha, one moderator can do this alone. Every such read is tied to the report and recorded.
- We do not read conversations otherwise.
- "Unsend" removes a message from the other person's view. The text stays in our records.
AI in the alpha
AI test users
- Some accounts are AI test users, run by Anthropic's Claude. Their photos say "AI test user · not a real person". Three are designed to misbehave on purpose so you can practise reporting and blocking.
- To decide whether to like you, an AI test user is given your name, gender, orientation, relationship structure and bio. When you message one, your conversation is sent to Anthropic so it can reply.
- The system that runs them keeps short notes about the testers it has interacted with. These notes are deleted with the rest of the alpha's data, not when you delete your account; email us to have them removed sooner.
The profile assistant
- "Help me tighten this" sends the bio you've written to Anthropic. Nothing else is sent, and nothing identifies you.
- It suggests wording only. Your bio changes only if you choose a suggestion.
Who else handles your data
We use these services to run Myria. They process data on our behalf. We do not sell or rent your data to anyone, or share it for advertising.
- Amazon Web Services hosts our servers, database, photos, backups and encryption keys, and sends our emails and text messages, in the United States (Northern Virginia).
- Anthropic runs the AI test users and the profile assistant, as described above.
- Trample counts visits to this website's public pages: the home, about, privacy and terms pages, never the app or the pages for testers. It records the page, the site you came from, your browser and type of device, and an approximate location to the city. It sets no cookies and keeps no IP address. A visitor is counted by a code that changes every day, so no one can be followed from one day to the next.
- Apple stores and syncs your passkey if you use an Apple device.
- Google Fonts serves the typefaces on our website and in the app, which means your browser contacts Google, and Google sees your IP address.
- Let's Encrypt or ZeroSSL issues our security certificate. They receive no data about you.
We would disclose information to law enforcement only where the law requires it.
Because we don't sell or share your data, a Global Privacy Control signal has nothing to opt you out of. We treat it as an opt-out regardless.
How long we keep it, and deleting your account
Delete your account in the app: You → Delete account. Here is exactly what happens.
Right away
- You disappear from everyone's view.
- Your location area is deleted.
- Your date of birth is deleted.
- Your mobile number, if you gave one, is deleted.
- Your likes and passes, in both directions, are deleted.
- Your messages vanish from the other person's view.
After 90 days
- Your profile, the records of your photos, and your messages are deleted. We wait 90 days so that reports about the account can still be handled.
- Anything an open safety case or a legal hold depends on is kept until that is resolved.
What's kept after deletion
- The record that you passed the age check: your country, the date, and whether the account was banned. This stops a banned person from simply rejoining. It contains no name and no profile.
- Reports and moderation decisions.
- Blocks and disconnects, so they keep working for the other person.
- Your invitation and sign-in records.
Not yet complete
- Photo files. The automatic removal of photo files from storage isn't built yet. When your account's photo records are deleted, the image files can remain in our encrypted storage, where nothing in Myria can show them. Email us and we will remove them by hand.
- Backups. We back up the database nightly and keep each backup for 14 days, so deleted information can stay in a backup for up to 14 days.
Unmatched likes and old conversations
- An unmatched like expires after 90 days.
- A conversation is deleted 90 days after the two of you disconnect.
When the alpha ends, its data will be deleted.
Your choices and rights
- In the app, you can edit your profile at any time, hide your gender and your last-active day, choose whether to share your location, turn text alerts on or off, and delete your account.
- By email, you can ask for a copy of your data, a correction, or deletion. We'll respond within 30 days.
- Where you live may give you further rights. We will honour them.
Security
- Connections are encrypted with HTTPS.
- Stored data is encrypted on disk. Photos, backups and message keys are encrypted with keys we manage in AWS.
- Staff sign in only with passkeys.
No system is perfectly secure. The alpha is early software.
Adults only
Myria is for adults 18 and over. We don't knowingly collect information from anyone younger. If you think someone under 18 is using Myria, report them in the app or email us.
Where your data is
Myria is run from the United States, and your data is stored and processed there.
Changes
We'll update this policy as the alpha changes, and tell testers about significant changes before they take effect. The date at the top shows the current version.