Privacy Policy

01 Information We Collect

Information you provide

• Account information — when you sign in with Apple or Google, we receive an account identifier and, depending on what you choose to share at sign-in, your email address and name.
• Content you upload — audio files you submit through local upload or computer browser upload, along with related metadata such as file names.
• Creation inputs — the themes, vibes, and preferences you enter to generate songs with AI.

Information collected automatically

• Device identifier — an identifier used to associate your library and generation jobs with your device.
• Log and network data — your IP address and request timestamps, used for security, abuse prevention, and rate limiting.
• Diagnostics — app version, device model, operating system version, and crash or error logs, used to fix problems and improve stability.

Purchase information

When you subscribe or buy tokens, the transaction is processed by the Apple App Store. We receive your subscription status and purchase receipts to unlock the corresponding features. We do not collect or store your payment card details — those are handled by Apple.

02 How We Use Your Information

We use the information above only as needed to provide and improve the service:

• Provide core features — process the audio you upload, generate playable songs, and maintain your library;
• Account and sign-in — create and verify your account and keep you signed in;
• Subscriptions and tokens — manage membership benefits, token balances, and purchase records;
• Security and abuse prevention — detect unusual activity, limit request rates, and protect the service;
• Communicate with you — respond to your questions and send important service-related notices;
• Improve the service — analyze usage and crash data to improve performance and experience;
• Legal compliance — meet legal obligations and handle copyright complaints where applicable.

03 How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. To provide the service, we share the necessary data with the service providers below. They may only use it to provide services to us:

We may also disclose information when required by law, or to protect the rights and safety of RiffOn and our users — for example, when handling a copyright infringement claim.

04 Data Storage & Retention

Your data is stored on cloud infrastructure provided by Amazon Web Services in the United States. We retain your information only for as long as needed to fulfill the purposes described in this policy.

When you delete your account, we delete your account information, uploaded audio files, AI-generated songs, and generation history. Limited log data may be retained for a reasonable period for security, audit, or legal purposes, and is then deleted.

05 Your Rights & Choices

• Access — you can view your account information and library within the app.
• Delete your account — anytime via Account › Delete Account. Your account and associated content are permanently removed.
• Sign out — you can sign out at any time.
• Manage subscriptions — cancel anytime in iOS Settings › Apple ID › Subscriptions.

California privacy rights

If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) gives you the right to know what personal information we collect, to request deletion or correction of it, and to not be discriminated against for exercising these rights. As stated above, we do not sell or share your personal information. To exercise these rights, contact us using the details below.

06 Data Security

We use reasonable technical and organizational measures — such as encryption in transit and access controls — to protect your information from unauthorized access, use, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

07 Children's Privacy

RiffOn is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

08 Changes & Contact

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page, and for material changes we will provide notice within the app.