How Riva collects, uses, and protects your family's information
Riva ("we", "us", or "our") is a family habits and rewards app operated for parents and children. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
By creating an account or using Riva, you agree to this Privacy Policy. If you do not agree, please do not use the app.
• Parent Account Information: Name, email address, and authentication data when you sign in with email OTP through Clerk.
• Family and Child Profiles: Child names, usernames, ages, interests, avatars, Rivas, tasks, activities, savings goals, and reward history.
• Child Login Credentials: Child usernames are stored in our cloud database. Child PINs are stored as one-way hashes for login verification. Plain PINs are never stored in the cloud.
• Usage and Device Data: App interactions, crash logs, and basic device information.
• Optional Content: Photos, notes submitted as task proof, and profile photos.
• Provide family setup, task management, approvals, rewards, savings tracking, and cloud sync.
• Send one-time login codes and important service messages.
• Improve app performance, fix bugs, and develop new features using aggregated data.
• We do not sell personal information or children's personal information.
Data is stored locally on your device and synced to our secure cloud database (Supabase) when you sign in as a parent.
Data is encrypted in transit using HTTPS/TLS and protected with industry-standard access controls.
Child PIN hashes are stored in the cloud for authentication. PINs cached on a parent device are stored using secure device storage APIs. Parents can reset a lost PIN from Child PIN Management in the app.
We use trusted third-party providers including:
• Clerk (Authentication)
• Supabase (Cloud Database & Hosting)
• Expo (App Delivery Infrastructure)
Optional AI task suggestions may send a child's age, interests, and goals to OpenAI to generate activity ideas. Child names and usernames are not sent.
You can use Riva without this feature. A built-in template suggester is used when AI is unavailable.
Riva is designed for family use. Parent accounts create and manage child profiles. Children log in using a username and PIN set by their parent.
We do not knowingly collect personal information directly from children without parental involvement. Parents are responsible for supervising their children's use of the app.
If you believe information has been collected from a child without proper consent, contact us at reach@riva.family.
• Update your parent display name and profile photo anytime.
• Manage child profiles, reset PINs, and delete local app data.
• Delete your account and associated cloud data from Privacy & Security → Delete Account.
• Request access, correction, or deletion of your data at https://riva.family/data-deletion or by emailing reach@riva.family.
• Additional privacy rights may apply depending on your location.
We retain information as long as your account remains active or as needed to provide services.
If you reset local app data, device information is cleared. Cloud data remains until you delete your account or request deletion.
Limited information may be retained where required by law or for fraud prevention purposes.
We may update this Privacy Policy from time to time. When changes are made, the "Last Updated" date at the top of this page will be revised.
Continued use of Riva after changes take effect constitutes acceptance of the updated policy.
Questions about this Privacy Policy or your data? Email us at reach@riva.family.
You can also read the full policy on the web at https://riva.family/privacy.