Law Enforcement Guidelines

Last updated: July 2026

Riff is committed to the safety of our users and to cooperating with law enforcement agencies in accordance with applicable law. This page outlines how law enforcement can submit requests for user data and how we handle those requests.

1. Contacting Riff

All law enforcement requests should be directed to:

Email: legal@riff-app.co.uk

Postal address: Riff Legal Department, Woking, Surrey, United Kingdom

Requests from law enforcement should be submitted on official letterhead, include the officer's name, badge number, agency, and direct contact information, and clearly state the legal basis for the request.

2. What data Riff may hold

Depending on the user's activity, Riff may hold the following categories of data:

Account information — email address, alias (display name), age, country, account creation date, last login date, IP addresses used at registration.

Verification data — government ID verification status (via our third-party provider Veriff), selfie verification status, phone number verification status. Riff does not store copies of identity documents; these are held by Veriff under their own data retention policies.

Communication data — text messages, voice messages (stored as encrypted data), and connection history between users.

Payment data — subscription plan, payment dates, and Stripe customer ID. Full payment card details are held by Stripe, not by Riff.

Usage data — question answers used for matching, game responses, AI companion chat history, and Trust Score information.

3. Legal process requirements

Riff responds to valid legal process in accordance with UK law, including the Data Protection Act 2018, the Investigatory Powers Act 2016, and applicable mutual legal assistance treaties (MLATs) for international requests.

Basic subscriber information — may be disclosed in response to a valid law enforcement request that includes appropriate legal process.

Message content and communication records — require a court order, warrant, or equivalent legal instrument.

Real-time interception — requires authorisation under the Investigatory Powers Act 2016 or equivalent legal authority.

4. Emergency requests

If there is an immediate threat to life or a risk of serious physical harm, Riff may voluntarily disclose information to law enforcement without a court order. Emergency requests should be clearly marked as urgent and include a description of the emergency, the specific data needed, and how the data will help address the threat. Send emergency requests to legal@riff-app.co.uk with the subject line "EMERGENCY DISCLOSURE REQUEST".

5. Child safety

Riff has zero tolerance for child sexual exploitation or abuse (CSEA). All users must be 18 or over. If we identify or receive a report of CSEA material, we will immediately preserve all relevant data, report the matter to the National Crime Agency (NCA) via the Child Exploitation and Online Protection command (CEOP), and cooperate fully with any resulting investigation. We do not notify the user in these cases.

6. Data preservation

Law enforcement may request that Riff preserve data relating to a specific user account pending the issuance of formal legal process. Preservation requests are honoured for 90 days and may be extended upon request. Submit preservation requests to legal@riff-app.co.uk with the user's email address or alias, the specific data to be preserved, and the case reference number.

7. User notification

Unless prohibited by law or court order, Riff will generally notify users when their data has been requested by law enforcement. If a non-disclosure order is in place, we will comply with its terms and notify the user when the order expires, if permitted.

8. International requests

Riff is a UK-based company. International law enforcement requests should be submitted through the appropriate mutual legal assistance treaty (MLAT) process or other recognised international cooperation mechanism. In urgent cases, we may respond directly while advising the requesting agency to formalise the request through proper channels.

9. Transparency

Riff is committed to transparency about law enforcement requests. We intend to publish an annual transparency report detailing the number and type of requests received, the number of requests complied with, and the number of users affected. The first report will be published after 12 months of operation.

For all law enforcement enquiries: legal@riff-app.co.uk