Rate your rip.

Traf Privacy Policy

Last updated: 19 October 2026

This policy explains what personal data Traf collects, why, who else receives it, how long it is kept and what you can do about it. It covers everyone who uses Traf, wherever they live; where the law of your country gives you something extra, the section on your rights says so.

Who we are

Traf is operated by CMF Ventures Limited, a company registered in England and Wales, number 12100140, whose registered office is 79 Fawe Park Road, London, England, SW15 2EG. CMF Ventures Limited is the data controller (the "responsible party" in South Africa) for the personal data described below. Contact: hello@gettraf.app.

What we collect

• Account information: your first name, last name, username and email address. We use the email address to sign you in with a one-time code.
• Your date of birth and the country you live in, which you give when you sign up (or, if you joined before 19 October 2026, the next time you open the app). Nobody else in Traf can see them.
• Audio recordings you submit. Each is stored privately and played back only to people who can see it in the app: members of the league it was posted to, and anyone you send a share link to.
• Measurements of your recordings: duration, loudness, pitch and similar acoustic numbers produced by our scoring service. These are numbers, not audio.
• Photographs you choose to upload for a profile portrait, and the portrait made from them.
• Content you post: comments, chat messages, images and stickers, titles you write, reports you file, and who you have blocked.
• League and challenge activity: leagues you create or join, rips you submit, ratings you give and receive, challenges and their results.
• Your answers to two questions: whether you agreed to your rips and portraits being processed by the companies named below, and, for prize leagues, that you are 18 or over.
• Feedback you send through the app.
• Technical data: your push notification token if you allow notifications, when you were last active (so leagues can show who is online), and crash reports.

We do not collect your contacts, your device's location (we know only the country you tell us), your browsing outside the app, advertising identifiers or payment details. We do not sell your personal data and we do not share it for advertising.

How we use it, and our legal basis

Under UK and EU data protection law we need a legal basis for each use. Ours are:

• To run Traf for you (performing our contract with you): signing you in, your leagues, scores, leaderboards, challenges, comments, playback and the notifications you have allowed.
• To apply the minimum age (our legal obligations, and performing our contract with you): your date of birth and country decide whether you are old enough to use Traf where you live, and later which country's leagues you can join.
• To score your rips and make your portrait: your recording is measured by our scoring service and sent to Google's Gemini, which checks that it is genuine and can score it if our service is unavailable. Anthropic's Claude writes the title and commentary from the measurements; it does not receive the audio. If you ask for a portrait, your photograph is sent to Gemini to paint it, and the portrait and your rip titles are sent to Claude to write your profile title. You agree to this when you accept the terms: at sign-up, or, if you joined before 18 October 2026, when the app asks you to agree to the updated terms. Without it we cannot score a rip or make a portrait, but everything else in Traf still works. If you no longer want it, you can delete your account.
• To improve the Ripter Scale, our own scoring model (our legitimate interest in making scores more accurate): measurements of rips, and the ratings people give them, are used to train and test it. The model learns from the numbers; it does not identify you. You can object by emailing us.
• To keep Traf safe (our legitimate interest, and our legal obligations): screening posted text against prohibited terms, acting on reports, honouring blocks, and limiting how often the scoring service can be used.
• To fix problems (our legitimate interest): crash reports and the feedback you send.

Who receives it

We use the following service providers. Each receives only what is listed, and only to provide its service to us.

Everyone who can see a rip in the app can hear it, see its score and read its comments. A share link lets anyone who has the link open that one rip on the web until you revoke it. Your name, username, portrait and title are visible to people you share a league with, and to people who see your rips through a share link or through a mutual friend in an open league.

We may disclose data where the law requires it, or to protect someone from serious harm, as described in the Community Rules.

Where it is processed

Your data is stored in the United Kingdom. Several of the providers above are in the United States, so your data is transferred there to provide their service. Where the law requires it, these transfers are protected by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or by the provider's certification under the EU-US and UK-US Data Privacy Framework.

How long we keep it

• Your account (including your date of birth and country), recordings, measurements, photographs, comments, ratings and league activity: as long as your account exists.
• Recordings that fail our checks: deleted straight away.
• Your push token: until you sign out, turn notifications off, or Expo tells us it no longer works.
• Crash reports: deleted by Sentry automatically, after at most 90 days.
• Feedback: until it has been dealt with, and as an internal issue for as long as it is useful in fixing the problem.
• Reports you file: while the report is open, and for a reasonable period after, so repeated behaviour can be recognised.
• Backups: our database provider keeps daily backups for 7 days, so deleted data leaves the backups within a week.

Deleting your account

You can delete your account in the app: Profile, then Delete account. This removes your profile, recordings, measurements, photographs, comments, ratings, challenges, league memberships, notifications and feed entries about you, and it cannot be undone.

Two things survive deliberately, and neither is linked to you afterwards:

• Frozen season results. Past season leaderboards keep the name you had at the time, because a past result that rewrites itself is not a result.
• The bare record of a report filed about you, closed and marked as relating to a deleted account. It holds no name, handle or content.

Scores and measurements already used to train the Ripter Scale stay in the trained model as numbers; the rip and your link to it are deleted.

You can also email us to ask for deletion, and we will do it within 30 days.

Your rights

Wherever you live, you can ask us to show you the data we hold about you, correct it, give you a copy, or delete it. Email hello@gettraf.app; we will reply within one month.

• UK and European Economic Area: you also have the rights to restrict our use of your data, to object to uses based on our legitimate interests (including training the Ripter Scale), and to data portability. You can complain to the Information Commissioner's Office (ico.org.uk/) or to the data protection authority in your country.
• United States: you have the rights your state's privacy law gives you, which may include access, deletion and correction. We do not sell or share personal information, and we do not use it for targeted advertising or for profiling with legal effects. We will not treat you differently for exercising your rights.
• Australia: you can complain to the Office of the Australian Information Commissioner (www.oaic.gov.au/).
• New Zealand: you can complain to the Office of the Privacy Commissioner (www.privacy.org.nz/).
• South Africa: you can complain to the Information Regulator (inforegulator.org.za/).

Children

Traf is for people aged 13 and over, or older where the law where you live requires it: 16 in the European Economic Area, Switzerland and Australia, and 18 in South Africa. We ask your date of birth and country when you sign up and do not create an account for anyone under the minimum age for their country, whose date of birth never leaves their phone. We do not knowingly collect personal data from anyone younger. If we learn that we have, the account is closed and we delete it. Prize leagues are open only to people aged 18 and over.

Changes to this policy

If we change this policy in a way that matters, we will tell you in the app before the change takes effect. The date at the top shows the latest version.

Contact

Questions or requests: hello@gettraf.app