Privacy
What Ronda collects, what it does not, and who else sees anything. Written to match how the site is actually built.
Ronda is operated by Ronda World Media Inc., a corporation registered in Ontario, Canada. We are the ones holding the information described below, and the ones you can hold to this page.
Last updated 3 September 2026
The short version
- We do not record calls. No video or audio is ever saved, by us or anyone.
- We do not store chat messages. They are gone when the call ends — unless one breaks a site rule, in which case a short extract is kept. See below.
- Nobody sees your IP address. Every call is relayed, so the person you are talking to cannot tell where you are.
- We never see your card details. Payments are handled by a payment company.
- We do store the ID documents of the earning side, and we keep them after the account closes. We explain why below.
- We do keep account details, and a record of which calls happened, when, and for how long — because that is how people get charged and paid.
What we collect
Your account
- Email address and password (stored hashed — we cannot read it).
- Username, profile photo if you add one, and preferred language.
- Whether you are male or female, chosen at sign-up. This decides who pays and who is paid.
- Whether you are verified and approved, if you are on the paid side.
- Whether you are showing as online.
Calls
- Who spoke to whom, when it started, when it ended, and how many seconds you were both connected.
- How many of those seconds were free and how many were charged.
- Your minute balance, or your earnings total.
Not the call itself. We hold the fact that a call happened and how long it lasted, and nothing about what was said or shown.
People
- Who you have added to your friends list.
- How many times you have turned down a call from a particular person — this is what makes you invisible to them after the second refusal. Only you can see this, never them.
- That you are waiting to be matched, while you are waiting.
Money
- What you bought and when.
- If you are paid: your withdrawal address and network, and your payout history.
- Your withdrawal details are visible only to you. Nobody you talk to can see them.
Technical
- IP address, browser and device, and error logs, kept by our hosting providers.
- Two cookies: one that keeps you signed in, and one that remembers your language. No advertising or tracking cookies.
Three things you should know about how calls work
Your messages go to an outside service
Every chat message is sent to Anthropic, for two reasons. If you and the other person read different languages, it is translated and the translation comes back. And every message is checked against the rules of the site, whatever language it is in.
So a message leaves your browser and passes through them. It is not used to train models, and we do not keep it — unless it breaks one of the rules below.
Messages are checked against the rules
A message is read automatically and checked for six things: sharing phone numbers, socials or other apps; arranging payment anywhere but Ronda; anything suggesting somebody is under 18; recording the call; pressuring somebody who has said no; and giving away or selling an account.
Nothing else is looked for. Ronda is a site for adults and explicit conversation between adults is what it is for — that is not something we check for, flag or keep.
If a message breaks one of those rules, the person who sent it is told so in the chat, and a short extract of that message is kept along with which rule it broke. The other person is not told. If a message breaks no rule, nothing is written down anywhere, which is nearly every message.
The other person never learns your address
Every call is relayed through Cloudflare. Neither browser ever connects to the other directly, so the person you are talking to never learns your IP address and cannot work out what city you are in.
This is deliberate and it is why calls here work differently from most video chat. Sites that connect two browsers directly hand each person the other’s address, which is a reasonable trade between friends and a bad one between strangers. It costs us bandwidth and occasionally a slower connection, and it is worth it.
The stream is encrypted end to end. Cloudflare passes it along and cannot see it, and neither can we.
Who else is involved
- Supabase — the database and sign-in system.
- Vercel — hosting.
- Cloudflare — call relay when a direct connection fails.
- Anthropic — message translation, as above.
- A payment company — card and PayPal payments. They see your payment details; we do not.
There is no outside verification company. Identity and age documents from the earning side are checked by a small team here — a named handful of people, not a service and not the public — and stay in private storage that the website itself cannot read from.
We do not sell your information, and we never will. We do not share it with advertisers or data brokers. We disclose it only where the law requires, or to report a crime — in particular, anything involving a minor.
How long we keep things
- Chat messages: not kept at all, unless one breaks a site rule — then a short extract of that message is kept, with which rule it broke.
- Video and audio: not kept at all.
- Call records (who, when, how long): kept while your account exists, and afterwards where we need them for tax and accounting.
- Payment and payout records: kept as long as tax law requires, typically seven years.
- Account details: deleted when you close your account, except what we must keep for the reasons above.
- Your profile picture: the file itself is deleted when you close your account, not just the link to it.
- Identity and age verification documents (the earning side only): kept after you close your account. This is deliberate and we would rather say so plainly than leave you to assume otherwise. The purpose of an age record is that it outlives the account — it is the only proof that somebody we paid was an adult, and that is a question we may be asked long after they have gone. The documents stay in private storage that nobody can read from the website, and are held by our Custodian of Records.
- Removed accounts: we keep enough to stop the same person signing up again.
Your choices
Wherever you live, you can ask us to show you what we hold about you, correct it, delete it, or send you a copy. Write to privacy@ronda.live and we will reply within 30 days.
If you are in the UK or the European Economic Area, you also have the right to object to or restrict how we use your information, and to complain to your data protection authority. If you are in California, you have the right to know what we collect, to delete it, and not to be treated differently for asking. We do not sell or share personal information as those laws define it.
You can close your account yourself from your profile at any time.
Where your information goes
Ronda is run from Canada, and the services above operate in Canada, the United States and the European Union. Using Ronda means your information may be handled in those places.
Under 18
Ronda is for adults and nobody under 18 may use it. We do not knowingly collect anything from a minor. If we find an account belongs to someone under 18 we delete it immediately. If you believe a minor is using Ronda, tell us at once.
Security
Connections are encrypted. Passwords are hashed. Access rules are enforced by the database itself rather than only by the app, so one mistake in the interface cannot expose someone else’s information. No system is perfect; if something goes wrong and it affects you, we will tell you.
Changes
If we change this materially we will tell you before it takes effect.