Privacy Policy

At Riffly, we respect your privacy and are committed to protecting the personal information you provide when using our services.

This Privacy Policy explains what information Riffly collects, how we use and protect that information, the services we use to operate Riffly, and the choices available to you regarding your data.

1. Information We Collect

We collect information that you provide directly to us, information generated through your use of Riffly, and limited technical information required to operate and improve the service.

A. Account Information

• Email address used to create and authenticate your account
• Display name or artist name
• Account and authentication information

B. Musician Profile Information

If you choose to create a musician profile or make your profile discoverable, you may provide information such as:

• Instruments or musical roles
• Musical genres and areas of interest
• City, country, or general location
• Artist biography
• Profile photo, avatar, or initials
• Links and other information you choose to add to your profile

Information you choose to make available through your public or discoverable musician profile may be visible to other Riffly users.

C. Gig & Performance Information

Riffly allows you to organize information relating to your musical work. This may include:

• Gig dates and times
• Venue or event names
• Call times and performance times
• Lineup or musician information
• Setlists
• Gig notes and other information you choose to record

D. Practice Information

When you use Riffly's practice tools, we may store information such as:

• Practice sessions and dates
• Practice duration
• Practice goals
• Practice streaks and history
• Exercise or practice notes

E. Invoice Information

Riffly allows you to create invoices for your musical work. Information you enter into invoices may include:

• Client or venue names
• Services or performance descriptions
• Agreed fees or amounts
• Payment notes
• Other information you choose to include in an invoice

You are responsible for ensuring that information you enter about clients, venues, or other individuals is information you are permitted to use and store.

F. Subscription & Payment Information

If you subscribe to a paid Riffly plan, payment and subscription information may be processed by third-party payment and platform providers, including Paystack, Apple, Google, or other providers applicable to the payment method you use.

Riffly does not intentionally store your complete payment card number or card security code on its own servers. Payment details are handled by the applicable payment provider under its own privacy and security practices.

G. Technical Information

When you use Riffly, limited technical information may be processed to provide, secure, maintain, and troubleshoot the service. This may include:

• Device type and operating system information
• Application version
• Technical logs and error information
• Crash and performance information
• Information required to deliver push notifications

We only collect technical information that is reasonably necessary for operating and improving Riffly.

2. How We Use Your Information

We use information collected through Riffly for purposes including:

• Creating and managing your Riffly account
• Authenticating your access to the application
• Storing and synchronizing your information across supported devices
• Managing gigs, setlists, practice sessions, and invoices
• Generating documents and features you request
• Enabling musician discovery and networking when you choose to participate
• Sending relevant reminders and service notifications
• Processing subscriptions and payments
• Providing customer support
• Detecting, preventing, and addressing security or technical issues
• Improving the reliability and functionality of Riffly
• Complying with applicable legal obligations

3. Musician Discovery & Networking

Riffly includes features that may allow musicians and music creatives to discover and connect with one another.

You control whether your musician profile is made available for discovery through the features and settings provided in the app. Information that you choose to make discoverable may be viewed by other Riffly users.

Your private gig records, practice history, and invoices are not automatically made public simply because you use Riffly's networking features.

4. Data Storage & Third-Party Services

Riffly relies on trusted third-party service providers to operate parts of the application. Depending on the features you use, these providers may process information on our behalf.

Supabase

Riffly uses Supabase for services including user authentication, database infrastructure, and secure storage of application data. Information stored through these services is protected using appropriate security measures, including encryption in transit.

Payment & Subscription Providers

Riffly may use payment and subscription providers such as Paystack, Apple, Google, and RevenueCat to process payments, manage subscriptions, and maintain subscription entitlements where applicable.

These providers may process information according to their own privacy policies and terms of service.

App Stores

Riffly is distributed through third-party app stores such as the Apple App Store and Google Play. These platforms may independently collect and process information relating to app downloads, purchases, device usage, and accounts according to their respective privacy policies.

We do not sell your personal information, gig information, practice records, musician profile information, or invoice data to advertisers or data brokers.

5. Data Security

We use reasonable technical and organizational measures designed to protect your information from unauthorized access, alteration, disclosure, or destruction.

These measures may include encrypted connections, access controls, authentication safeguards, and security practices provided by the infrastructure and service providers we use.

However, no internet-based service can guarantee absolute security. You should use a strong, unique password and protect your account credentials.

6. Data Retention

We generally retain account and user-created information for as long as your account remains active or for as long as reasonably necessary to provide the service.

If you request deletion of your account, we will take reasonable steps to delete or anonymize information associated with your account, subject to information that we are required or permitted to retain for legal, security, fraud-prevention, dispute-resolution, or other legitimate purposes.

7. Your Privacy Rights

Depending on where you live and the laws applicable to you, you may have rights relating to your personal information, including the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and personal information
• Request a copy or export of certain information
• Object to or restrict certain forms of processing
• Withdraw consent where processing is based on consent

To exercise an applicable privacy right, contact us using the email address provided below. We may need to verify your identity before completing certain requests.

8. Account & Data Deletion

You may request deletion of your Riffly account and associated personal information by contacting us at support@riffly.click.

When processing a deletion request, we may retain limited information where required by law or where reasonably necessary for security, fraud prevention, dispute resolution, or other legitimate purposes.

9. Children's Privacy

Riffly is designed for musicians and music creatives and is not directed toward children. We do not knowingly collect personal information from children where such collection is prohibited by applicable law.

If you believe that a child has provided personal information to Riffly without appropriate authorization, please contact us so that we can investigate and take appropriate action.

10. International Data Processing

Riffly and the third-party providers we use may process or store information in countries other than the country in which you live. Where required by applicable law, we take appropriate measures regarding international transfers of personal information.

11. Third-Party Links

Riffly may contain links to third-party websites, services, or platforms. This Privacy Policy does not apply to those third-party services. We encourage you to review their privacy policies before providing them with personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Riffly, our services, or applicable legal requirements.

When we make changes, we will update the "Last updated" date at the beginning of this policy. Where required, we will provide additional notice through the Riffly application or our website.

13. Contact Us

If you have questions about this Privacy Policy, your personal information, or a privacy request, please contact us: