How Riff collects, uses, and protects your data.
Welcome to Riff ("we", "our", or "us"). Riff is a music-focused social platform that lets you share your passion for music, connect with other musicians and fans, and communicate through direct and group messaging.
This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By creating an account or using Riff, you agree to this policy.
Account information — When you sign up, we collect your full name, username, email address, and password (stored as a one-way hash).
Profile information — Profile picture, bio, and music preferences including instruments you play and genres you enjoy.
Content you create — Posts, reels, comments, reactions, and any media you upload (photos, videos, audio recordings).
Messages — Direct messages and group chat content are stored on our servers to deliver them to recipients and support message history.
Contacts (optional) — If you grant permission, we access your device contacts solely to help you find friends already on Riff. Contact data is never stored on our servers without your explicit action.
Device & usage data — Device model, OS version, app version, IP address, and in-app activity (screens visited, features used) for diagnostics and improvement.
We do not sell your personal data to third parties.
Service providers — We share data with trusted third-party providers that help us operate Riff, including:
Legal requirements — We may disclose information if required by law, subpoena, or to protect the rights and safety of our users or the public.
Business transfers — In the event of a merger, acquisition, or asset sale, user data may be transferred as part of that transaction.
We use industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, JWT-based authentication with refresh tokens, and access controls to protect your data.
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Messages sent through Riff are stored on our servers to ensure reliable delivery and support chat history. We do not read the content of your messages except where required by law or to investigate abuse reports you submit.
Online presence (e.g. "Online" / "Last seen") is shared with users you have a conversation with. You may restrict this in Settings.
Riff is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it immediately.
Access & correction — You can view and update your profile information at any time through Settings.
Account deletion — You can request deletion of your account and its data at any time. See Delete your account for the steps. This permanently removes your profile, posts, and personal data within 30 days.
Notifications — Manage push notification preferences in Settings → Notifications or through your device's system settings.
Contacts access — You can revoke contacts permission at any time in your device's app permissions settings.
Riff uses local device storage (SharedPreferences) to securely store your authentication tokens and user preferences such as theme settings. This data is stored only on your device and is cleared when you log out.
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via in-app notification or email. Continued use of Riff after changes are posted constitutes your acceptance of the updated policy.
Last updated: June 2026.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
Email: magddevf@gmail.com