Privacy Policy

Last updated: 19 May 2026

Riffgame is built by PitchCall, Inc. ("we", "us"). This policy describes what we collect, why, and what you can do about it. We aim for the shortest, most readable policy that still covers what lawyers and reviewers care about.

What we collect

Account

Riffgame is anonymous-only at launch. We assign a random user identifier (UUID) the moment you first open the app. We do not ask for your name, email, or phone number, and there is no sign-up flow. Your library lives under that anonymous identifier on this device; we may add optional cross-device sync in a future release, and will update this policy when we do.

Your prompts and generated games

Every prompt you submit, the AI's responses, and the generated game source + assets are stored in Firestore and on Cloudflare R2 (with Google Cloud Storage as a legacy fallback) under your anonymous user identifier.

Game-play analytics

Each time a published game is opened from its games.riffgame.com URL, a tiny script records the open and the session duration (how long the tab stays in the foreground). We use this to surface "Trending" games and to improve the agent. The session is tracked by a per-tab random UUID generated client-side — it is not linked to your account, your IP, or any other identifier, and it resets when the tab closes.

Purchases

Subscriptions and riff packs are processed by Apple via In-App Purchases on iOS, and by Google via Google Play Billing on Android. We use RevenueCat to validate receipts. The store and RevenueCat see your Apple ID / Google account; we only receive a hashed user identifier and transaction metadata (product purchased, amount, country).

Anti-abuse (Android)

To stop the free-tier credit from being farmed by reinstalling the app, the Android client sends two pieces of data to our server when claiming the lifetime free-credit grant: a Play Integrity attestation (a Google-signed token confirming the install is genuine) and a SHA-256 hash of the device's ANDROID_ID. We never store the raw ANDROID_ID — only the hash — and we use it solely to detect whether the same device has already claimed the grant under a different account.

Push notifications

If you allow notifications, we use OneSignal to deliver them. We pass your anonymous user ID and your device's push token to OneSignal. You can revoke this any time in iOS Settings or via Riffgame Settings → Notifications.

Device and diagnostic data

We collect crash reports and basic device metadata (OS version, device model, app version) through Firebase. This helps us fix bugs. We do not associate this with any personally identifying information.

What we do NOT collect

• Your contacts, photos, location, microphone, or camera.
• Your browsing history outside the app.
• Advertising identifiers (IDFA).

How your data is used

We use the data above only to run the service: store your games, bill you for purchases, deliver notifications you opted into, and fix bugs. We do not sell your data, and we do not share it with advertisers.

How long we keep it

Your content stays until you delete it. You can delete individual games inside the app. To delete all data associated with your anonymous identifier, email [email protected] with your in-app user ID (Settings → About → User ID); we process within 30 days. Uninstalling the app does not delete server-side data, but it does sever your device's link to the identifier — making the data effectively unrecoverable from your end without contacting us.

Sharing with third parties

The vendors we use to operate Riffgame:

• Google Cloud / Firebase — anonymous authentication, database, file storage, crash reporting, and the Play Integrity API used for Android anti-abuse.
• Cloudflare — DNS + CDN for this website, and R2 object storage + a Worker that hosts published games at games.riffgame.com.
• Anthropic — the AI model that generates your games. Your prompts are sent to Anthropic for inference.
• RevenueCat — purchase receipt validation.
• OneSignal — push notification delivery.
• Apple App Store / Google Play — payment processing.

Each vendor has its own privacy policy. We pass through only the minimum data each one needs to perform its function.

Your rights

Under GDPR, CCPA, and similar regulations, you may request access to, correction of, or deletion of your personal data. Email [email protected].

Children

Riffgame is rated 12+. We do not knowingly collect personal data from children under 13. If you believe we have, please contact us and we will remove it.

Public games

Games you publish are accessible by anyone who has the URL. They are not discoverable by search and never list your username, but anyone you share a link with — or anyone the link is forwarded to — can play. Treat shared links accordingly.

Changes to this policy

If we change anything material, we will update the "Last updated" date and notify users via the app at least 14 days before the change takes effect.

Contact

PitchCall, Inc.
[email protected]