Privacy Choices

1. Data Controller

2. Export Your Data

The file holds your log, your profile and plate, and what Riveryn remembers about you. It does not hold photo files, the Apple Health day cache, your band, or your onboarding answers.

3. Delete Your Data on This iPhone

This clears your Riveryn data from this iPhone: meals, photos, lines, answers, your profile, what Riveryn remembers and the Apple Health data it kept. It also makes a new random install ID for future diagnostics. It keeps your sunrise city, your Apple Health permission and any Apple Search Ads campaign numbers.

It does not reach our server. It doesn't take you out of a band, so leave your band first. Your free-trial record stays in your iPhone's keychain, so a trial can't start over. It doesn't cancel a subscription, change Apple's billing records, remove copies in iPhone backups you made, or delete e-mails you sent us.

4. Delete What's on Our Server

A few things live on our server: your band (if you joined one), a record of access codes you redeemed, feedback notes from earlier versions, and daily usage counts. Nothing there is deleted automatically yet, so ask us and we will delete it.

• For a band: tell us the band's code and the name you used.
• For anything else: send the support token from You › Send feedback. It shows when Anonymous usage diagnostics is on. Send it before you use Delete all local data, because that makes a new token.
• If you have no token, tell us roughly when you used Riveryn and any code you redeemed. We will do our best to find you.

Usage events already sent to TelemetryDeck stay there under TelemetryDeck's own retention settings. Our server can't reach them.

5. No Account to Delete

Riveryn has no accounts, so there is no account to close. If you're in a band, leaving it is the closest thing: You › Your band › Leave the band. Leaving hides you from the band; e-mail us to have your name and lines erased.

6. Apple Health

Apple Health is optional and read-only. To stop Riveryn reading it, turn off You › Apple Health › Use Apple Health, or remove Riveryn in the Health app under Sharing › Apps. Turning it off erases the Health data Riveryn kept on your iPhone.

7. Camera, Photos, Microphone and Notifications

Change camera, photo and microphone access in iOS Settings › Riveryn. Without them you can still type. When you dictate, your voice goes through our server to ElevenLabs to become text. If a short meal clip fails, Apple's speech recognition may be used, and iOS may ask for Speech permission.

Reminders and the Lock Screen card are made on your iPhone. Turn the card off in You › Reminders › The Lock Screen card, or turn off notifications in iOS Settings › Notifications › Riveryn.

8. Usage Diagnostics

Diagnostics are on unless you turn them off. Riveryn sends simple usage events to TelemetryDeck and to our own server. They are tied to a random install ID, not to your name. The events are: onboarding, taps and lines logged, meal estimate, correction, save and saved-meal reuse, how-you-feel answers, paywall, trial, purchase, restore, export, delete and error events. Riveryn also sends short technical reports on crashes and performance to our own server.

No ad identifier (IDFA) and no cross-app tracking are used. If you came from an Apple Search Ads ad, Apple tells the app which campaign, ad group and keyword it was, and we attach those numbers to usage events. Your photos, voice, words, meal names, nutrition numbers, body data and Apple Health values are never sent to analytics. Analytics do learn whether you connected Apple Health and which kinds of data it had, never the values. Turn diagnostics off in You › Your data › Anonymous usage diagnostics.

Separately, when you tap an App Store button on riveryn.com, the site tells our server the page, the button and the campaign tags in the link. No cookies, no ad pixels, no ad identifiers. Never your meals, account or contact details.

9. Do Not Sell or Share

Riveryn does not sell personal information and does not share it for cross-context behavioral advertising. We never use your meals, photos, words, voice, profile, Apple Health data or other wellness data for ads.

If that ever changes, we will update the app and this page before it starts.

10. Health Data and Consent

Some of what you give Riveryn is about your health: Apple Health data, sleep, how you feel, what you eat, your weight, the people you spent time with, and anything you write about being ill or hurt. We use it only to run Riveryn for you, never for ads, and never to guess unrelated things about you.

You can withdraw consent any time: turn off Apple Health, or stop logging it. That stops new use. It doesn't undo what already happened.

11. Your Privacy Rights

Depending on where you live, you can ask to see, correct, delete, restrict, move or object to the use of your data, withdraw consent, learn who we share it with, or appeal a refusal. Some limits apply: we may need to check the request is yours, and data that lives only on your iPhone is in your hands.

E-mail support@riveryn.com with the subject "Riveryn Privacy Request" and tell us what you want. You can also complain to the Czech Office for Personal Data Protection (ÚOOU, www.uoou.cz) or the authority where you live.

12. Response Timing

We answer privacy requests within one month where GDPR or UK GDPR applies, and within the time your local law sets elsewhere. If we need more time, we will tell you why.

13. Authorized Agents and Appeals

If your law lets you use an authorized agent, the agent may write to support@riveryn.com with proof of authority and enough to verify the request. If we refuse a request and your law gives an appeal right, reply to our e-mail with "Privacy Appeal" in the subject.

14. What Our App Store Privacy Label Says for Riveryn 2.0

For Riveryn 2.0, our App Store privacy label declares, for app features, Health and Fitness (including Apple Health day totals sent to our AI service), Photos or Videos, Audio Data, Other User Content (your lines, questions and band line), and Purchases. For analytics, it declares Device ID, Product Interaction and Advertising Data (Apple Search Ads campaign numbers). None of it is used to track you. Apple Health is read-only. A few things are kept on our server: bands, code records and daily usage counts.