Privacy Policy
Rush — a location-based social app for adults. Last updated: August 22, 2026.
Rush ("Rush", "we", "us", "our") is operated by Chaotic Neutral LLC ("the Operator"), which is the data controller responsible for your personal information. By creating an account or using Rush, you agree to the collection and use of information as described here. You can reach us about privacy at support@rushapp.io.
1. Information we collect
We collect only what we need to run the service. Everything below is provided by you or generated as you use the app.
Account information
- Your email address and a password (used to sign in; passwords are handled by our authentication provider and stored only in hashed form).
- Your date of birth, used to confirm you are 18 or older.
- A display name.
- A record of the consents you give (for example, your age confirmation and your consent to processing sensitive information), including when they were given.
Profile information you choose to provide
- Photos for your profile, and any photos or videos you add to private albums.
- Optional details such as bio, height, weight, body type, and "looking for" preferences.
- Sensitive information you optionally choose to add — including data that may reveal your race or ethnicity, sexual orientation, and health information such as HIV status. See Section 4.
Location
- Your approximate device location, used to show you people nearby and to display distance.
- Location is collected only while you are using the app (foreground). We do not track your location in the background.
- Your position is shown to other users only as an approximate, fuzzed location on the map and as a rounded distance — never your exact coordinates.
Content and activity
- Messages and media you send in chats.
- Interactions such as likes, matches, blocks, reports, and your online / last-active status.
Device information
- A push-notification token for the device, so we can deliver notifications you have enabled.
2. How we use your information
- To create and operate your account and profile.
- To show you nearby people and power matching, likes, and messaging.
- To send notifications you have turned on.
- To keep the community safe — reviewing reports, enforcing our Terms, and preventing abuse.
- To fix bugs and improve the app.
3. Legal bases for processing (EEA / UK users)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR (and UK GDPR) to process your personal data:
| Purpose | Legal basis |
|---|---|
| Creating and operating your account, profile, matching, and messaging | Performance of a contract (Art. 6(1)(b)) |
| Keeping the community safe, preventing abuse and fraud, securing the service | Our legitimate interests (Art. 6(1)(f)) |
| Sending notifications you have enabled | Your consent (Art. 6(1)(a)); you can turn them off anytime |
| Meeting legal obligations and responding to lawful requests | Legal obligation (Art. 6(1)(c)) |
| Sensitive information you add (health, sexual orientation, race/ethnicity) | Your explicit consent (Art. 9(2)(a)) |
Where we rely on your consent, you can withdraw it at any time — see Section 5. Withdrawing consent does not affect processing we carried out before you withdrew it.
4. Sensitive information
Some profile fields are optional and may reveal sensitive information about you, such as race or ethnicity, sexual orientation, or health information like HIV status. Providing these is entirely your choice — you can leave them blank, and you can edit or remove them at any time in the app.
Because this is "special category" data under the GDPR, we process it only on the basis of your explicit consent, which you give when you create your account and which you confirm by choosing to add these details to your profile. When you add sensitive information, you understand it will be shown to other users as part of your profile. We use it only to display your profile and power the filters and features you ask for. We never sell it, and never use it for advertising or profiling. You can withdraw your consent at any time by removing the information from your profile or deleting your account.
5. Your rights and choices
Depending on where you live, you have some or all of the following rights over your personal data. For users in the EEA and UK these are guaranteed by the GDPR; we extend the same controls to all users wherever we can.
- Access — get a copy of the personal data we hold about you. You can export your data in the app (Settings → Export My Data), or request it at support@rushapp.io.
- Rectification — correct or update your information by editing your profile in the app.
- Erasure — delete your account from Settings → Delete Account. This permanently removes your profile, photos, albums, messages, and associated data from our systems.
- Portability — receive your data in a structured, machine-readable format (the in-app export is provided as JSON).
- Restriction and objection — ask us to limit or stop certain processing, including processing based on our legitimate interests.
- Withdraw consent — where we rely on your consent (including for sensitive information and notifications), withdraw it at any time.
- Control notifications and visibility through the app's Settings and Safety & Privacy screens.
- Block or report other users.
To exercise any right, use the in-app controls above or contact support@rushapp.io. We do not make decisions that produce legal or similarly significant effects about you using solely automated processing.
If you are in the EEA or UK and believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection supervisory authority. We would appreciate the chance to address your concern first.
California residents (CCPA / CPRA)
If you live in California, you have the right to know what personal information we collect, to access and delete it, to correct it, and to not be discriminated against for exercising these rights. Because we do not sell personal information or share it for cross-context behavioral advertising, there is nothing to opt out of in that respect. We limit the use of sensitive personal information to providing the service, as described above. The categories of personal information we collect are described in Section 1: identifiers, account and contact data, approximate location, user content (photos, messages), sensitive information you choose to provide, and product-interaction data.
6. How your information is shared
With other users
Your profile — including your display name, photos, the profile details you fill in, and your approximate distance — is visible to other users of Rush. Messages you send are delivered to the people you send them to. Please share only what you are comfortable making visible to other members.
With service providers
We use a small number of vendors that process data on our behalf, under contract, only to provide the service:
| Provider | Purpose |
|---|---|
| Supabase | Backend database, authentication, and media storage (our hosting infrastructure). |
| Expo | Push-notification delivery and over-the-air app updates. |
| Resend | Sending account and verification emails. |
For legal and safety reasons
We may disclose information if required by law, to respond to legal process, or to protect the rights, safety, or property of our users, the public, or the Operator.
What we do not do
- We do not sell your personal information.
- We do not share your personal information for cross-context behavioral advertising.
- We do not use your sensitive information (including health or sexual-orientation data) for advertising or profiling.
7. Data retention
We keep your information for as long as your account is active. When you delete your account, we delete your personal data and stored media. We may retain limited records where required for legal, safety, or fraud-prevention purposes, and only for as long as necessary for those purposes.
8. Security
Data is encrypted in transit (HTTPS) and at rest, and access to profile data is restricted by row-level security rules on our backend. No system is perfectly secure, but we work to protect your information.
9. Children
Rush is for adults only. It is not directed to anyone under 18, and we do not knowingly collect information from anyone under 18. If we learn that an account belongs to someone under 18, we will remove it.
10. International users and data transfers
Rush is operated from, and data is stored in facilities located in, the United States. If you use Rush from outside the United States — including from the EEA or UK — your information will be transferred to and processed in the United States. Where required, such transfers are made on the basis of appropriate safeguards or your consent. By using Rush from outside the United States, you understand your information will be processed in the United States.
11. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide notice in the app.
12. Contact us
Questions about this policy or your data, or to exercise any of your rights? Contact support@rushapp.io.