Rivata — Privacy Policy

Effective: October 26, 2026 · Version 1.6 · Provider: WebAppBiz (707kib@gmail.com)

Rivata (formerly "AI Persona" / "AI Secretary Office") is an AI video chat app with a talking avatar. This policy explains what data the app handles, why, and where it goes. Rivata is available on Android and iOS; both share the same account and the same rules below.

1. Data we process

Account

• Sign-in account (Sign in with Google or Sign in with Apple): user ID, email address and display name. Used to identify you, to link your purchases and characters to your account, and to synchronize your data between your devices.
• Device registration: a device key, the app version, and the time and version of your consent to the Terms of Service (kept as proof of consent only).
• Country and language: the country derived from your IP address and the language the app runs in, used to show prices in your store currency and for service statistics. Not combined with your chat content.

Conversation

• Chat text (speech is converted to text first) and what characters remember about you (such as your nickname) are sent to an external AI service to generate answers. The default is Google Gemini; if you register your own AI key, the data goes directly from your device to the company you chose (Google, OpenAI or Anthropic). Without a key, a limited trial goes through our server, which forwards it to Google. Trial chat text may be kept temporarily on our server to fix errors and improve the service; it is never used for advertising or sold. On iOS the app shows what is sent and to whom and asks for your permission before first use; you can turn it off any time in Settings → Account (AI chat then stops).
• Voice is converted to text on your device (Android: Google speech recognition, iOS: Apple speech recognition). The audio itself is not sent to our server.
• Spoken answers: to read answers aloud with a neural voice, the character's answer text is sent through our server to Microsoft's speech synthesis service and returned as audio (answer text only, not stored). Offline, the device's built-in voice is used.
• Photos you attach to a question are sent to the AI service to answer that question.
• Camera window (only for users who registered their own AI key): while you keep the small camera window on, the camera shows a live preview on your phone only. A photo is taken only when you tap the shutter button or ask the character to look (for example, "look at this"). That one photo is sent directly from your phone to the AI company you chose, to answer you. It is not stored on your phone or on the provider's server. You can turn the camera window off with ✕ at any time.
• Background photos: a background photo you upload is stored only on your phone. To let the character know the background, it is sent once from your phone to the AI company you chose to make a short description, and only that text is kept on your phone. You can delete a background at any time.
• Web search and weather you ask for are looked up on public web services; only the search words are sent.

Memories, persona, settings, alarms (account sync)

• The app remembers things you tell it (name, preferences, events), the persona settings of each character, app settings, your AI key and alarms. These are stored on your device and, when you are signed in, uploaded to our server so they are restored when you reinstall the app or change devices.
• Your AI key is always stored encrypted.
• You can view, add and delete memories in the app at any time; deletions are synchronized.

Character creation

• When you order a custom character, the photo, name, gender and relationship settings you submit are sent to our server and kept with the order history (received, generated, delivered times) to produce the character, confirm the order and answer inquiries. Before production, the photo is checked by Google Cloud Vision (an AI image service) only to detect inappropriate images. You confirm that the photo is of yourself or of a person who consented, and not of a minor.

Purchases

• Payments are handled by Google Play (Android) or the App Store (iOS). We receive the purchase token or transaction and the product ID and verify them with Google or Apple to unlock the purchased character or creation credit. We do not receive your card or bank details.

Technical

• Server access logs (IP address, time, request path) for security and abuse prevention.
• Push notification tokens (Firebase Cloud Messaging / Apple Push Notification service) to send character arrivals, service notices and reminders to your phone.
• Alarms you set are scheduled on your device.
• Install source (Google Play install referrer) — for statistics on how the app was found.
• A device identifier (converted so it cannot be reversed) — to prevent misuse of trials, events and share rewards.

2. Permissions used

• Microphone — voice input (only while the mic toggle is on).
• Camera / photos — attaching a photo to a question, submitting a photo for character creation, and the camera window (preview only while you keep it on; a photo only when you tap or ask), and uploading a background photo.
• Notifications, exact alarms, full-screen intent — ringing the alarms you set and notifying you of character arrivals and notices, including when the app is closed.
• Internet — AI answers, character downloads, sync, purchases.

3. Third parties

• Google (Sign-In, Gemini AI, speech recognition, Cloud Vision check of custom-character photos, Google Play Billing, Firebase Authentication and Cloud Messaging) — governed by Google's policies.
• OpenAI and Anthropic — chat text is sent only if you register your own AI key and choose that company.
• Microsoft — character voice synthesis (the character's answer text only).
• Apple (Sign in with Apple, App Store In-App Purchase, speech recognition, Apple Push Notification service) — governed by Apple's policies.
• We send these companies only the data the service needs, and only to companies that protect personal data at the same or a higher level than this policy.
• We do not sell personal data and do not use it for advertising.

4. Retention and deletion

• Synced data is kept while your account is active. Deleting an item in the app deletes it on the server at the next sync.
• Order photos and order history are kept for service and inquiry purposes; character files delivered to you remain on your devices.
• Server access logs are kept for up to 90 days.
• To delete your account and all server data: in the app, Settings → Account → Delete account (immediate). If you no longer have the app, see Delete account or contact 707kib@gmail.com from the signed-in address.

5. Children

The app is not directed to children under 14, and character creation must not use photos of minors.

6. Security

All traffic uses HTTPS. API keys are stored in the device's secure storage and encrypted on the server. Optional end-to-end encryption is available for synced data.

7. Changes and contact

We will post updates to this page. Questions: 707kib@gmail.com