Riffle
Privacy Policy
Effective 10 August 2026 · Last updated 10 August 2026
Riffle is built so that most of what you make never leaves your phone. This page explains the parts that do, why they have to, and who handles them.
The short version. Your notes, decks, cards and review schedule are stored on your device, not on our servers. Audio from a live recording is transcribed on your phone and is never uploaded. What we do send away is the material you explicitly hand to Riffle to be written up — and we keep no advertising or tracking identifiers at all.
1. Who we are
Riffle is an iOS application. In this policy, “we”, “us” and “Riffle” refer to the developer of the app. You can reach us at aristides@aristidesstaffieri.com.
2. What stays on your device
The following are stored locally on your phone and are not transmitted to us:
- Your notes, decks and flashcards, including everything you edit by hand.
- Your review history and the scheduling data that decides what you see next.
- Your app settings and onboarding preferences.
This is why Riffle keeps working offline and keeps working when our server is down. It also means that if you delete the app without backing it up, that content is gone — we do not hold a copy to restore.
Live recordings
When you record a lecture inside Riffle, the audio is transcribed on your device by Apple’s built-in speech recogniser. The audio is not written to disk and is never sent to us. Only the resulting text is sent, and only when you ask for a note to be written from it.
3. What is sent to our servers
Riffle sends data to our servers only when you take an action that requires it. Specifically:
| What | When | Why |
|---|---|---|
| A photo of a page | You photograph material and ask for a note | To read the page and write the note |
| Transcript text | You finish a live recording and ask for a note | To write the note |
| An uploaded file (audio, video, PDF or image) | You upload existing material | To transcribe and write it up |
| The text of a note | You ask for flashcards from it | To write the cards |
| Your account identifier | Every request that costs a generation | To check your subscription and count usage |
| Subscription status | When your subscription changes | To know whether generation is available to you |
| Onboarding progress | During first-run setup | To measure where setup is confusing |
Uploaded files are deleted after processing
A file you upload is placed in temporary storage, read once by the transcription and writing steps, and then deleted — whether the job succeeded or failed. We do not retain your uploads.
Onboarding measurement
The only behavioural data Riffle records is which onboarding step you reached and what you did there, chosen from a fixed list of steps and a fixed list of seven actions. There is no free-text field, no advertising identifier, and no third-party analytics SDK in the app.
4. Your account
Generation requires an account, which you create with Sign in with Apple or Google. We receive an account identifier and your email address from that provider. If you use Sign in with Apple and choose to hide your email, we only ever see Apple’s relay address.
Against that account we store: your subscription entitlement, how many generations you have used this month, and any in-progress or completed generation jobs.
5. Who else processes your data
We use a small number of providers to run Riffle. Each receives only what it needs.
| Provider | What it receives | Policy |
|---|---|---|
| Anthropic | The material you submit for a note, and note text submitted for cards | Privacy policy |
| Groq | Audio from uploaded recordings only, for transcription | Privacy policy |
| Supabase | Account identity, entitlements, usage counts, temporary uploads | Privacy policy |
| RevenueCat | Subscription events for your account | Privacy policy |
| Apple | Sign-in and all subscription billing | Privacy policy |
| Sign-in, if you choose it | Privacy policy |
We do not sell your personal information, and we do not share it for advertising or cross-context behavioural advertising.
6. Retention
- Uploaded files — deleted as soon as the job finishes or fails.
- Generation jobs, including the note produced, are retained on your account so the app can retrieve the result, and are removed when you delete your account.
- Usage counts — retained for the billing period and removed when you delete your account.
- Account and entitlement records — retained while your account exists.
- Onboarding events — retained in aggregate for product measurement.
7. Deleting your account
You can delete your account from Settings inside the app. This removes your account record and the usage counts and jobs attached to it.
Deleting your account does not cancel your subscription. Apple owns billing, and a subscription continues to renew until you cancel it in your Apple ID settings. Cancel there first if you no longer want to be charged.
Content stored on your device is not affected by account deletion; remove it by deleting the app.
8. Your rights
Depending on where you live, you may have the right to access, correct, export or delete the personal data we hold about you, and to object to or restrict how we use it. The in-app deletion above satisfies most of these directly. For anything else, write to aristides@aristidesstaffieri.com and we will respond within the period required by the applicable law.
9. Children
Riffle is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.
10. Security
Traffic between the app and our servers is encrypted in transit. Access to the systems that hold account data is restricted, and the keys used to reach our model and transcription providers are held only on our server and never shipped inside the app. No system is perfectly secure, and we cannot guarantee absolute security.
11. International transfers
Our providers operate in the United States and may process your data there. By using Riffle you understand that your data may be transferred to and processed in countries other than your own.
12. Changes to this policy
If we change this policy we will update the date at the top of this page. Material changes will also be surfaced in the app.