Rivet Privacy Policy

Last updated July 13, 2026

Rivet is private by design. Most of your day stays on your device. This policy explains what leaves it when you choose a connected feature, which provider receives it, and the choices you have.

Rivet (“Rivet,” “we,” “us”) is a planning app for iPhone, iPad, and Mac, provided by James Whelan. By using Rivet, you agree to this policy.

The Short Version

• Your Rivet timeline — to-dos, events, notes, attachments, and voice captures — is stored on your device. We don’t keep a copy of it in a Rivet account database.
• We don’t track you, show ads, or use third-party analytics or advertising SDKs.
• Apple Health and Apple Music data stay on your device and are used only to show things on your timeline.
• When you choose Smart Add refinement, Google Calendar, or Trakt, Rivet sends only the information needed to provide that feature.
• Calendar and Reminders access is read-and-show by default — Rivet asks before changing anything.

How Your Data Is Stored

Rivet is local-first. The content you create lives in Rivet’s storage on your device. Because it’s on your device, you stay in control of it, and most of Rivet works with no network connection at all.

Account And Sign-In

You can use Rivet without an account, or sign in with Sign in with Apple or Google. Signing in with Google is also how you connect Google Calendar and Meet. We use these only to identify your account and provide the features you ask for. They are not used for advertising or cross-app tracking.

Smart Add Refinement (Optional, Pro)

By default, Rivet understands what you type using on-device parsing. If you’re a Pro subscriber and you turn on Smart Add refinement, the raw text you type into Smart Add is sent to Rivet’s enrichment endpoint, which forwards it to our AI provider, Anthropic (the maker of Claude), purely to improve how that text is understood. This text:

• is sent under a short-lived, scoped token — it is not linked to your identity or stored against you;
• is used only to refine the parse you asked for;
• is not used to train AI models, for advertising, or for tracking.

Because Smart Add can contain personal, work, calendar, or health details, this feature is off until you choose to turn it on. Keep it off to use on-device parsing only.

Permissions You Can Grant

Each of these is optional, asked for in context, and revocable in the iOS or macOS Settings app:

• Apple Calendar — to show your events and help you plan around them. Rivet asks before creating or changing anything on your calendar.
• Contacts — to suggest names and email addresses when you invite people to events.
• Notifications — to remind you before timed to-dos and, if you set them, medication doses.
• Apple Health — to show sleep, activity, heart-rate, and medication context beside your schedule. Rivet reads only the categories you approve, and that data stays on your device.
• Apple Music — to use your recent plays to build monthly listening summaries on your device.
• Apple Reminders — to import reminders you choose, or send selected Rivet to-dos to Reminders.
• Google Calendar & Meet — to show your Google events and, when you ask, create Google events and Meet links (Pro).

Apple Health and Apple Music data are used only to display things on your timeline. They are not sent to our servers and are never sent to the AI provider.

Google Data

When you connect Google, Rivet’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We use Google Calendar data only to provide the calendar and Meet features you ask for. We don’t sell it, use it for advertising, or use it to train AI models.

Trakt Viewing Data

When you connect Trakt, Rivet exchanges the viewing information needed to provide your watch history, watchlist, viewing summaries, and recommendations. Requests pass through Rivet’s hosted relay to Trakt. Trakt associates this information with the Trakt account you connected and retains it under Trakt’s terms and privacy policy. Disconnecting Trakt removes Rivet’s local access tokens; you can manage or delete the viewing data held by Trakt from your Trakt account.

Subscriptions

Rivet Pro is sold through Apple. Apple processes your payment; we never see your card details. We receive your subscription status so we can unlock Pro features.

What We Don’t Do

• We don’t sell your personal information.
• We don’t show ads or use cross-app/cross-site tracking.
• We don’t embed third-party advertising or analytics SDKs.

Service Providers

We share information only with providers that make a feature you chose work, and only for that purpose: Apple (sign-in, payments, Health, Music, Calendar, and Reminders), Google (sign-in, Google Calendar, and Meet), Anthropic (optional Smart Add refinement), Trakt (optional viewing features), and Vercel (hosting Rivet’s secure relay endpoints). We require providers handling Rivet data to protect it consistently with this policy and applicable law.

Data Retention

Your on-device content stays until you delete it in Rivet, delete your account, or remove the app. Smart Add refinement requests are processed to return a result and are not retained against your Rivet identity. Google and Trakt retain connected-service data under their own policies until you remove it through those services.

Your Rights And Choices

• Delete Your Account — use Settings → Delete Account to remove Rivet’s local store, attachments, preferences, app-group data, account-linked Keychain credentials, notifications, and search entries, then sign out connected providers.
• Control Permissions — grant or revoke Calendar, Contacts, Notifications, Health, Music, and Reminders access in your device’s Settings; disconnect Google or Trakt in Rivet’s Settings.
• Turn Off Refinement — Smart Add refinement can be switched off at any time.
• Depending on where you live, you may have rights under laws such as the GDPR or CCPA, including the right to access, correct, delete, or restrict use of your data, and to complain to a regulator. We do not sell personal information or use it for cross-context behavioral advertising.

Children

Rivet is not directed to children under 13 (or under the minimum age required in your country), and we don’t knowingly collect their information.

Security

We use reasonable measures to protect your information, including encryption in transit for anything that leaves your device. No method of storage or transmission is completely secure, so we can’t guarantee absolute security.

International Transfers

Where information leaves your device for Smart Add, Google, Trakt, or another connected service you choose, it may be processed in another country. Where required, we put appropriate safeguards in place for those transfers.

Changes To This Policy

We may update this policy as Rivet evolves. We’ll change the “last updated” date above and, for material changes, give you notice in the app.

Contact

Questions about privacy? Email us at jdwhelan@me.com.