Privacy Policy

Introduction

RiffRoc is an AI-powered interactive storytelling platform operated by RiffRoc LLC, an Idaho limited liability company. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit the RiffRoc website, join our waitlist, participate in a beta or TestFlight program, or use the RiffRoc mobile application (collectively, the "Services").

Your use of the Services is also subject to our Terms of Use and Community Guidelines.

Some information is necessary to provide the Services. If you do not provide certain information, or if you ask us to delete it, some features may not be available or may no longer function.

Please do not include sensitive personal information — such as government ID numbers, financial details, health information, or personal details about other people — in story prompts, generated content, chat messages, or other content you submit through RiffRoc. Story context you provide may be transmitted to third-party AI providers as described in this policy.

Information We Collect

Waitlist information. When you join the RiffRoc waitlist through our website, we collect your email address, the source of your signup, your browser user-agent, and the time of your request. Waitlist information is used to manage early access and communicate with you about RiffRoc. We do not sell waitlist information or use it for cross-context behavioral advertising.

Account information. When you create a RiffRoc account, we collect your email address, username, and display name. If you sign up using Google or Apple, we receive authentication credentials and, where provided by those services, your name and email address. We use email verification and other measures to authenticate users and protect accounts. Display names, usernames, profile images, avatars, and similar profile information may be displayed with your account activity and, where associated with public content, may be used in connection with displaying, promoting, and commercializing that public content as described in the Terms of Use.

Content you create. We collect and store the stories, prompts, choices, settings, titles, character and world definitions, generated text, generated illustrations, branches, comments, reactions, and other content you create, contribute to, interact with, or that is generated on your behalf through RiffRoc. This content is stored to provide core features including story generation, branching, saving, revisiting, and sharing.

Reference images. You may upload photos or images to use as references for AI-generated story covers, illustrations, comics, and similar content. Reference images are transmitted to our AI providers as generation inputs. Reference images are not permanently stored by RiffRoc — they are either processed transiently without being saved, or stored temporarily and deleted after generation completes or within approximately 24 hours. Only the AI-generated output produced from your reference image is retained.

Story context transmitted for AI generation. When you use RiffRoc's story generation features, we transmit to our AI providers the story context associated with your session — including your story settings, characters, narrative history, and related content — as needed to generate coherent, consistent story text and illustrations. See the AI-Generated Content section below for more detail.

Social and community activity. We collect information about your interactions with other users, including follower and following relationships, story shares, story room participation, chat and comment posts, reactions, and related community activity.

Device and push notification data. We collect device identifiers and push notification tokens to deliver notifications to your device. Push notification tokens are stored in association with your account.

Usage and operational data. We collect limited technical and operational information including app version, feature usage patterns, and AI generation event logs. This information is used for service improvement, reliability, security, operational analysis, and cost management. We do not use this information for third-party advertising or cross-context behavioral advertising.

Subscription and purchase information. If you subscribe or buy credits, we receive the information needed to apply that purchase to your account, including your account identifier, product or subscription identifiers, purchase and expiration status, and related transaction records. The app store through which you buy processes the payment. We do not collect your payment card number. We use this information to unlock paid features, add credits, apply usage limits, and keep your account in sync.

Communications. If you contact us for support or feedback, we collect the information you provide in those communications.

How We Use Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Services
• Generate, render, store, and display your stories and illustrations
• Evaluate and improve the quality of AI-generated story content and illustrations
• Authenticate users and protect against abuse, fraud, and unauthorized access
• Deliver push notifications and app-related communications
• Monitor and enforce our Terms of Use, Community Guidelines, and content moderation policies
• Maintain internal records of AI generation activity for operational and financial purposes
• Respond to your requests, questions, and support inquiries
• Comply with legal obligations and enforce our agreements

Aggregated and De-Identified Information

We may aggregate or de-identify information so that it no longer reasonably identifies you. We may use aggregated or de-identified information to understand usage trends, improve story quality, evaluate performance, manage costs, develop features, and improve safety systems. We do not attempt to re-identify de-identified information except as needed to confirm that it has been properly de-identified.

AI-Generated Content

RiffRoc uses third-party AI providers to generate story text, narrative choices, illustrations, and related creative content. To produce coherent and visually consistent story output, we transmit story context from your session to those providers. Story context includes content you provide and content generated during your session, such as your story settings, characters, and narrative history.

We do not sell your personal information or your story content. We select and configure AI service providers with the goal of protecting user data and limiting use of submitted content and story context to providing, securing, supporting, and improving the Services, subject to each provider’s applicable terms and our agreements with them.

RiffRoc uses automated moderation systems to help review story content, chat messages, Bursts, images, and other user-submitted or generated content before generation, publication, or display. We do not routinely review private story content manually. However, we or our authorized personnel may access and review content when reasonably necessary to evaluate and improve AI generation quality, respond to user reports, investigate abuse or safety concerns, provide support, comply with legal obligations, or enforce our Terms of Use or Community Guidelines. Where feasible, quality review is conducted using limited, aggregated, or de-identified information.

Sharing of Information

Public stories. Stories a creator chooses to make public are visible to other RiffRoc users and may appear in public areas of the platform. Stories are created private by default. Public stories may be subject to automated or manual moderation review before or after publication. Once public, a story — including its text, illustrations, and branching structure — can be read, explored, and otherwise interacted with by other users according to available platform features.

Shared stories. Stories shared directly with specific users are accessible to the creator and to the users designated through the Services.

Public and shared content. If a story is made public or shared with others, the people who can access it may view, save, explore, branch from, comment on, react to, or otherwise interact with that content according to available platform features and their own actions.

User-directed disclosures. We may disclose information when you direct us to do so, such as when you share a story, invite another user, connect with another user, or use features that make content available to others.

AI providers. We transmit story context to third-party AI providers as described in the AI-Generated Content section above.

Authentication providers. We use Google and Apple to support third-party sign-in. These providers receive authentication requests and return identity credentials to us in accordance with their own privacy policies.

Infrastructure providers. We share data with vendors that help us operate the Services, including our database and storage provider. We select service providers with the goal of limiting use of your information to providing and supporting the Services. User data is stored on infrastructure located in the United States.

Subscription and payment service providers. We may share limited account, device, purchase, subscription, and transaction information with Apple, Google, and subscription management providers to process purchases, manage subscriptions, restore purchases, reconcile entitlements, and prevent fraud.

Standard web delivery. The RiffRoc website may load resources such as fonts or other assets from third-party content delivery services as part of standard web delivery. These requests may transmit your IP address to the provider as a routine byproduct of the network connection and are not used by us for tracking purposes.

Legal and protective disclosures. We may disclose information if required by law, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, safety, or property of RiffRoc, our users, or others; investigate abuse or safety concerns; or enforce our Terms of Use or Community Guidelines.

Business transfers. If RiffRoc LLC is involved in a merger, acquisition, financing, or sale of assets, user information may be transferred as part of that transaction. We will notify users of any such change through the Services or by other appropriate means.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

Data Retention and Deletion

We retain information for as long as needed to provide the Services, maintain your account, comply with legal obligations, resolve disputes, and maintain system integrity.

You may request deletion of your account through available in-app settings or by contacting us at [email protected].

When your account is deleted:

• Your account, profile, and private stories are removed from active systems, except where retention is required for legal, security, fraud prevention, dispute resolution, backup, or operational purposes.
• Public stories you have created may remain available but are anonymized — your name and public profile identity are replaced with an anonymous designation in user-facing story content, chat messages, and associated platform displays, where reasonably feasible.
• Shared stories may remain available to users who had access before deletion, but are not made public solely because your account was deleted. Where reasonably feasible, your name and public profile identity are replaced with an anonymous designation.
• Content you contributed to public or shared stories may remain available in anonymized form where reasonably necessary to preserve story continuity or community context. Some account activity, comments, reactions, reports, likes, or similar records may be deleted rather than anonymized.
• Your follower and following relationships are removed.
• Anonymized records of AI generation activity may be retained for internal financial reconciliation, with your identity detached from those records.
• Some information may be retained where required by law, needed for fraud prevention or dispute resolution, or temporarily present in backup systems during a standard retention window.

Children's Privacy

RiffRoc accounts are intended for users age 13 and older. RiffRoc is not directed to children under 13, and children under 13 may not create accounts or provide personal information directly to us.

Adults may use RiffRoc to create or read stories together with younger children, but the adult account holder is responsible for the account and all activity conducted through it. If you believe a child under 13 has provided personal information to us, please contact us at [email protected] and we will review and delete that information as appropriate.

Your Choices

You may update your account information and preferences within the app. You can manage push notification permissions through your device settings and, where available, through RiffRoc’s in-app notification settings. You may request access to, correction of, or deletion of your personal information by contacting us at [email protected].

You may opt out of marketing email communications by following the unsubscribe instructions in those communications or by contacting us directly. If you opt out of marketing emails, we may still send non-marketing communications such as account, security, transactional, or service-related messages.

California residents and users in other jurisdictions with applicable privacy rights may have additional rights regarding their personal information, including the right to know what personal information we have collected, to request deletion, and to non-discrimination for exercising those rights. To submit a privacy rights request, contact us at [email protected].

Third-Party Links and Services

The Services may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of those third parties. Your use of third-party services is governed by their own privacy policies and terms, and we encourage you to review them.

International Users

RiffRoc is operated from the United States. User data is stored on infrastructure located in the United States. If you access the Services from outside the United States, your information may be processed and stored in the United States, where privacy laws may differ from those in your location. By using the Services, you acknowledge that your information may be transferred to and processed in the United States.

Security

We use reasonable technical and organizational measures designed to protect your information, including measures intended to safeguard AI provider credentials and limit unauthorized access to user content. AI provider communications are handled through server-side infrastructure so that AI provider credentials are not exposed to client devices and user content is not sent directly from client devices to AI providers. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

Beta and TestFlight Participation

If you participate in a beta or TestFlight program, we may collect feedback, diagnostics, and usage information to help us improve RiffRoc before public release. Beta features and content are incomplete and subject to change.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Services or by updating the "Last updated" date above. The updated Privacy Policy will apply to information collected after the effective date of the updated policy, unless otherwise stated.

Contact

Questions about this Privacy Policy, your data, or privacy rights requests: [email protected]

Community reports and guideline questions: [email protected]

Legal notices, arbitration matters, and copyright complaints: [email protected]

RiffRoc LLC · 784 S. Clearwater Loop, Ste B · Post Falls, ID 83854