Riffly
Riffly Privacy Policy
Effective: October 19, 2026 Operator: Toni Aisida ("we", "us") Contact: hello@joinriffly.com
Riffly lets you rate, review and list music, follow other people, and see what they are listening to. This policy explains what we collect, why, and the choices you have.
What we collect
Account information
- If you sign in with Apple, we receive a stable identifier from Apple and, if you choose to share it, your email address (which may be an Apple private-relay address). We do not store the name Apple provides.
- If you sign in with email, we store your email address.
- The username, display name, bio and profile photo you choose.
Content you create. Ratings, reviews, listening dates and "relisten" marks, likes, lists and list notes, and who you follow. This content is public: anyone using Riffly, including people who are not signed in, can see your profile, reviews, ratings, lists and follows.
Safety records. Accounts you block (visible only to you) and reports you submit (visible only to us).
Technical data. Our hosting provider keeps standard server logs (such as IP address and request times) for security and reliability.
What we don't collect. We don't use advertising, we don't track you across other apps or websites, and we don't sell or share your personal information. Riffly does not access your Apple Music or Spotify account or your listening history. Music information (titles, artwork) comes from Apple Music's public catalog and involves no data about you.
How we use it
- To run Riffly: your account, your profile, showing your content, and your feed.
- To keep Riffly safe: reviewing reports, enforcing our Terms, and preventing abuse.
- To fix problems and keep the service secure.
Service providers
- Supabase (database, authentication, file storage and server functions), which stores your data on our behalf.
- Apple (Sign in with Apple, and the Apple Music catalog for song and album information).
These providers process data only to provide their services to us.
How long we keep it
We keep your account and content until you delete them. Deleting a review or list removes it immediately. Deleting your account removes your profile, photo, reviews, ratings, likes, lists, follows, blocks and reports, and revokes Riffly's Sign in with Apple access. Server logs and backups are kept for a limited period before they are overwritten.
Your choices and rights
- Edit or delete your profile, reviews and lists at any time in the app.
- Delete your account in the app: Profile → Edit profile → Delete account. This is permanent.
- Block people so you no longer see each other's reviews.
- Depending on where you live, you may have rights to access, correct, delete or export your data, or to object to some processing. Contact us at hello@joinriffly.com and we will respond within 30 days.
Children
Riffly is not directed to children under 13, and we don't knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
Security
Data is encrypted in transit. Access rules on our database ensure that only you can change your own content.
Changes
If we make material changes, we will update the effective date and let you know in the app.