Privacy Policy

Last Updated: February 2, 2026

1. Introduction

Welcome to Rivulet ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy describes how your information is collected, used, and safeguarded when you use our mobile application.

2. Information We Collect

2.1 Personal Information

  • Account Data: When you create an account, we collect your email address and authentication credentials via Firebase Auth.
  • Profile Information: You may choose to provide a display name and profile picture.

2.2 Content and Usage Data

The core functionality of Rivulet involves you inputting personal data across various modules:

  • Journal: Personal reflections, dreams, thoughts, and mood data.
  • Family Archive: Names, relationship structures, family stories, and historical data.
  • Things (Inventory): Lists of physical possessions, their locations, and associated metadata.
  • Care: Task lists, care member names, and collaboration data.

2.3 Media Files

  • Photos: While the app functionality may allow for image uploads (e.g., for profiles or memories), this feature is optional. If used, these files are stored securely in Firebase Storage.

2.4 Usage Analytics (Optional)

We collect anonymous usage analytics to help us improve the app. This data is collected through Firebase Analytics and includes:

  • Feature Usage: Which features you use (e.g., creating tasks, adding items, viewing journal entries, adding family stories)
  • Navigation Patterns: How you navigate between different sections of the app (e.g., switching from Family Tree to Journal)
  • Interaction Events: Actions like button taps, search usage (e.g., searching dreams), and filter selections
  • Technical Data: App performance metrics, crash reports, and error logs

What We DO NOT Track:

  • ❌ Personal content (task descriptions, journal entries, item names, family member names)
  • ❌ Email addresses or personally identifiable information
  • ❌ Specific data you enter into the app
  • ❌ Your location

What We DO Track:

  • ✅ Anonymous usage patterns (e.g., "user created a task")
  • ✅ Feature adoption rates (e.g., "search was used")
  • ✅ App performance metrics
  • ✅ Counts and categories only (e.g., "5 items created", not "what those items are")

Your Control:

You can disable analytics at any time in the app settings under "Data & Privacy" → "Usage Analytics". When disabled, no usage data will be collected.

2.5 Device and Technical Data

  • Device Information: We may collect standard information such as device model, OS version, and unique device identifiers to ensure app stability and performance.

3. How We Use Your Information

We use the collected data for the following purposes:

  • Core Functionality: To provide the features of the app (tracking, archiving, organizing).
  • Synchronization: To allow you to access your data across different devices using your account.
  • App Improvement: To analyze anonymous usage patterns and identify which features are most valuable (only if analytics are enabled).
  • Bug Fixes: To identify and fix technical issues and crashes.
  • Communication: To send essential account-related notifications.

Analytics Data Usage:

If you have analytics enabled, we use anonymous usage data to:

  • Understand which features are most used and valuable
  • Identify areas for improvement
  • Measure app performance and stability
  • Make data-driven decisions about new features

This data is aggregated and anonymized - we cannot identify individual users from analytics data.

4. Data Storage and Security

4.1 Storage Providers

  • We use Google Firebase for data storage (Firestore), file storage (Firebase Storage), and authentication. Your data is stored on secure servers managed by Google.

4.2 Security Measures

  • Encryption: Data transmitted between the app and the server is encrypted using Industry-standard SSL/TLS.
  • Access Control: We implement strict access control rules (Firebase Security Rules) to ensure that only you can access your personal data.

5. Information Sharing

We do not sell your personal data to third parties. We only share information in the following circumstances:

  • Service Providers: With established platforms like Google Firebase that facilitate the app's operation. Google processes data on our behalf and does not use your data for their own purposes.
  • Analytics: Anonymous usage data is processed by Firebase Analytics (Google). This data cannot be used to identify you personally.
  • Legal Compliance: If required by law or in response to valid requests by public authorities.

Third-Party Data Processing:

6. Data Retention

  • Your Content: Stored indefinitely until you delete it or delete your account.
  • Analytics Data: Retained for 14 months by default (configurable up to 50 months). You can request deletion of your analytics data at any time.
  • Account Data: Deleted immediately when you delete your account.

7. Your Rights and Choices

7.1 GDPR Rights (EU Users)

If you are in the European Union, you have the following rights under GDPR:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to certain types of processing
  • Right to Withdraw Consent: Opt-out of analytics at any time

7.2 Your Choices

  • Access and Export: You can export all your data from the app settings ("Export My Data")
  • Correction: You can update or correct your profile and content data at any time within the app
  • Deletion: You can delete specific entries or your entire account through the app. Alternatively, you can request permanent account and data deletion via our Account Deletion Request Form. Deleting your account will remove your personal data from our active databases
  • Analytics Opt-Out: You can disable usage analytics in Settings → Data & Privacy → Usage Analytics
  • Communication Preferences: You can manage notification settings in your device settings

7.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at contact@rivulet.info with your request.

8. Children's Privacy

Rivulet is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

9. International Data Transfers

Your data is stored on Google Firebase servers located in europe-west10 (Berlin, Germany), ensuring EU data residency for GDPR compliance. While Firebase has servers worldwide, your personal data remains within the European Union. Google complies with applicable data protection laws and provides appropriate safeguards for international data transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the app.

11. Contact Us

If you have any questions or suggestions about our Privacy Policy, or wish to exercise your data rights, please contact us at:

Email: contact@rivulet.info
Website: https://rivulet.info

For GDPR-related requests, please include "GDPR Request" in your email subject line.

Summary of Key Points

  • ✅ Your data is yours - We don't sell it to anyone
  • ✅ Privacy-first analytics - Only anonymous usage patterns, no personal content
  • ✅ You're in control - Opt-out of analytics anytime in settings
  • ✅ Secure storage - Encrypted data on Google Firebase
  • ✅ GDPR compliant - Full data rights for EU users
  • ✅ Easy data export - Download all your data anytime
  • ✅ Right to deletion - Delete your account and data completely