Rivet privacy policy

Last updated August 31, 2026

Rivet is private by design. Most of your day stays on your device. This policy explains what leaves it when you choose a connected feature or allow website analytics, which provider receives it, and the choices you have.

Rivet (“Rivet,” “we,” “us”) is a planning app for iPhone, iPad, and Mac, provided by James Whelan. By using Rivet, you agree to this policy.

The short version

• Your Rivet timeline — to-dos, events, notes, attachments, and voice captures — is stored on your device. We don’t keep a copy of it in a Rivet account database.
• The Rivet app has no ads or third-party analytics SDKs. This website loads Google Analytics only after you allow it.
• Apple Health and Apple Music data stay on your device and are used only to show things on your timeline.
• When you choose Smart Add refinement, Google Calendar, or Trakt, Rivet sends only the information needed to provide that feature.
• Calendar and Reminders access is read-and-show by default — Rivet asks before changing anything.

How your data is stored

Rivet is local-first. The content you create lives in Rivet’s storage on your device. Because it’s on your device, you stay in control of it, and most of Rivet works with no network connection at all.

Website analytics

Rivet’s website can use Google Analytics to measure page visits, referral sources, and clicks that lead to the App Store. Google Analytics does not load until you choose Allow analytics. If you choose No thanks, no Google Analytics request is made and the website works normally.

After you allow analytics, Google may set first-party analytics cookies such as _ga in your browser. We disable advertising signals and do not use this information for advertising or cross-site tracking. You can change your choice at any time through Analytics settings in the website footer. Withdrawing consent stops future measurement and removes Rivet’s Google Analytics cookies from your browser.

Account and sign-in

You can use Rivet without an account, or sign in with Sign in with Apple or Google. Signing in with Google is also how you connect Google Calendar and Meet. We use these only to identify your account and provide the features you ask for. They are not used for advertising or cross-app tracking.

For signed-in accounts, Rivet stores an account identifier, hashed Apple or Google sign-in identifiers, installation and session identifiers, and encrypted provider credentials where needed. If you link Apple and Google, we keep their identifiers together so either sign-in can access the same Rivet account. We do not combine accounts merely because their email addresses match. Linking Rivet sign-ins does not merge separate Apple iCloud libraries.

To recognise Rivet Pro across your linked sign-ins, we retain Apple-verified purchase identifiers, the purchased product, and its subscription, expiry or refund status. Apple handles payment; Rivet does not receive your payment card details. Account identifiers and purchase records are used to provide and protect your account and Pro access, not for advertising or tracking.

Smart Add refinement (optional, Pro)

By default, Rivet understands what you type using on-device parsing. If you’re a Pro subscriber and you turn on Smart Add refinement, the raw text you type into Smart Add is sent to Rivet’s enrichment endpoint, which forwards it to our AI provider, Anthropic (the maker of Claude), purely to improve how that text is understood. This text:

• is sent under a short-lived, scoped token — it is not linked to your identity or stored against you;
• is used only to refine the parse you asked for;
• is not used to train AI models, for advertising, or for tracking.

Because Smart Add can contain personal, work, calendar, or health details, this feature is off until you choose to turn it on. Keep it off to use on-device parsing only.

Permissions you can grant

Each of these is optional, asked for in context, and revocable in the iOS or macOS Settings app:

• Apple Calendar — to show your events and help you plan around them. Rivet asks before creating or changing anything on your calendar.
• Contacts — to suggest names and email addresses when you invite people to events.
• Notifications — to remind you before timed to-dos and, if you set them, medication doses.
• Apple Health — to show sleep, activity, heart-rate, and medication context beside your schedule. Rivet reads only the categories you approve, and that data stays on your device.
• Apple Music — to use your recent plays to build monthly listening summaries on your device.
• Apple Reminders — to import reminders you choose, or send selected Rivet to-dos to Reminders.
• Google Calendar & Meet — to show your Google events and, when you ask, create Google events and Meet links (Pro).

Apple Health and Apple Music data are used only to display things on your timeline. They are not sent to our servers and are never sent to the AI provider.

Google data

When you connect Google, Rivet’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We use Google Calendar data only to provide the calendar and Meet features you ask for. We don’t sell it, use it for advertising, or use it to train AI models.

Trakt viewing data

When you connect Trakt, Rivet exchanges the viewing information needed to provide your watch history, watchlist, viewing summaries, and recommendations. Requests pass through Rivet’s hosted relay to Trakt. Trakt associates this information with the Trakt account you connected and retains it under Trakt’s terms and privacy policy. Disconnecting Trakt removes Rivet’s local access tokens; you can manage or delete the viewing data held by Trakt from your Trakt account.

Subscriptions

Rivet Pro is sold through Apple. Apple processes your payment; we never see your card details. We receive your subscription status so we can unlock Pro features.

What we do not do

• We don’t sell your personal information.
• We don’t show ads or use cross-app or cross-site advertising profiles.
• The Rivet app doesn’t embed third-party advertising or analytics SDKs.
• The website doesn’t load Google Analytics unless you allow it.

Service providers

We share information only with providers that make a feature you chose work, and only for that purpose: Apple (sign-in, payments, Health, Music, Calendar, and Reminders), Google (sign-in, Google Calendar, Meet, and consent-based website analytics), Anthropic (optional Smart Add refinement), Trakt (optional viewing features), and Vercel (website hosting and Rivet’s secure relay endpoints). We require providers handling Rivet data to protect it consistently with this policy and applicable law.

Data retention

Your on-device content stays until you delete it in Rivet, delete your account, or remove the app. Smart Add refinement requests are processed to return a result and are not retained against your Rivet identity. Google Analytics, Google Calendar, and Trakt retain information under their own policies. You can stop future website measurement at any time through Analytics settings.

Removing the app does not by itself erase your private iCloud library or your Rivet account. Account deletion removes Rivet's account, linked sign-in credentials, sessions and purchase-access records. We retain a deletion receipt containing hashed request proofs, without your content or a plaintext account identifier, so an interrupted deletion can be safely retried. Deleting your Rivet account does not cancel an Apple subscription or erase Apple's own purchase records.

Your rights and choices

• Delete your account — use Settings → Delete account to remove your Rivet account and its Rivet data, including notes and attachments in the private iCloud library connected to the app. This also clears Rivet’s local store, preferences, app-group data, account-linked Keychain credentials, notifications, and search entries, then signs out connected providers. Deletion requires access to that iCloud account and the network; an interrupted request remains pending for retry. It does not delete unrelated iCloud data or events held by your calendar providers.
• Control Permissions — grant or revoke Calendar, Contacts, Notifications, Health, Music, and Reminders access in your device’s Settings; disconnect Google or Trakt in Rivet’s Settings.
• Turn Off Refinement — Smart Add refinement can be switched off at any time.
• Change Website Analytics — choose Analytics settings in the website footer to allow or refuse Google Analytics.
• Depending on where you live, you may have rights under laws such as the GDPR or CCPA, including the right to access, correct, delete, or restrict use of your data, and to complain to a regulator. We do not sell personal information or use it for cross-context behavioral advertising.

Children

Rivet is not directed to children under 13 (or under the minimum age required in your country), and we don’t knowingly collect their information.

Security

We use reasonable measures to protect your information, including encryption in transit for anything that leaves your device. No method of storage or transmission is completely secure, so we can’t guarantee absolute security.

International transfers

Where information leaves your device for Smart Add, a connected Google or Trakt service, or website analytics you allowed, it may be processed in another country. Where required, we put appropriate safeguards in place for those transfers.

Changes to this policy

We may update this policy as Rivet evolves. We’ll change the “last updated” date above and, for material changes, give you notice in the app.

Contact

Questions about privacy? Email us at support@rivetcal.app.