Rivata — Privacy Policy

Effective: September 19, 2026 · Version 1.1 · Provider: WebAppBiz (707kib@gmail.com)

Rivata (formerly "AI Persona" / "AI 비서실") is an AI video chat app with a talking avatar. This policy explains what data the app handles, why, and where it goes. Rivata is available on Android, iOS and as a Windows PC program; all share the same account and the same rules below.

1. Data we process

Account

• Sign-in account (Sign in with Google or Sign in with Apple): user ID, email address and display name. Used to identify you, to link your purchases and characters to your account, and to synchronize your data between your devices.
• Device registration: a device key, the app version, and the time and version of your consent to the Terms of Service (kept as proof of consent only).
• Country and language: the country derived from your IP address and the language the app runs in, used to show prices in your store currency and for service statistics. Not combined with your chat content.

Conversation

• Chat text is sent to an external AI service (Google Gemini) to generate answers. If you register your own API key, the text goes directly from your device to Google under your key. Without a key, a limited trial goes through our server, which forwards the text to Google and counts usage; we do not store your chat content on the server.
• Voice is converted to text on your device (Android: Google speech recognition, iOS: Apple speech recognition, PC: on-device recognition). The audio itself is not sent to our server.
• Spoken answers: to read answers aloud with a neural voice, the answer text is sent to our server, which synthesizes the audio and returns it without storing the text. Offline, the device's built-in voice is used.
• Photos you attach to a question are sent to the AI service to answer that question. The app never captures or sends photos automatically.
• Web search and weather you ask for are looked up on public web services; only the search words are sent.

Memories, persona, settings, alarms (account sync)

• The app remembers things you tell it (name, preferences, events), the persona settings of each character, app settings, your AI key and alarms. These are stored on your device and, when you are signed in, uploaded to our server so your PC and phone stay in sync.
• Your AI key is always stored encrypted. You can turn on encryption for the rest of the synced data in the app (Settings → Sync); then the server stores only ciphertext it cannot read.
• You can view, add and delete memories in the app at any time; deletions are synchronized.

Character creation

• When you order a custom character, the photo, name, gender and relationship settings you submit are sent to our server and kept with the order history (received, generated, delivered times) to produce the character, confirm the order and answer inquiries. You confirm that the photo is of yourself or of a person who consented, and not of a minor.

Purchases

• Payments are handled by Google Play (Android) or the App Store (iOS). We receive the purchase token or transaction and the product ID and verify them with Google or Apple to unlock the purchased character or creation credit. We do not receive your card or bank details.
• Purchases started on the PC program are completed on your phone: the PC shows a link/QR code and, if you allow notifications, sends a push notification to your signed-in phone. Only your account ID and the product are transmitted.

PC program only (optional)

• If you connect your email or calendar in the PC program, the credentials you enter are stored encrypted on that PC only and are used to read and send on your behalf when you ask. They are never sent to our server.

Technical

• Server access logs (IP address, time, request path) for security and abuse prevention.
• Push notification tokens (Firebase Cloud Messaging / Apple Push Notification service) to deliver purchase requests from your PC and service notices to your phone.
• Alarms you set are scheduled on your device.

2. Permissions used

• Microphone — voice input (only while the mic toggle is on).
• Camera / photos — attaching a photo to a question, or submitting a photo for character creation (only when you choose).
• Notifications, exact alarms, full-screen intent — ringing the alarms you set and delivering purchase requests, including when the app is closed.
• Internet — AI answers, character downloads, sync, purchases.

3. Third parties

• Google (Sign-In, Gemini AI, speech recognition, Google Play Billing, Firebase Authentication and Cloud Messaging) — governed by Google's policies.
• Apple (Sign in with Apple, App Store In-App Purchase, speech recognition, Apple Push Notification service) — governed by Apple's policies.
• We do not sell personal data and do not use it for advertising.

4. Retention and deletion

• Synced data is kept while your account is active. Deleting an item in the app deletes it on the server at the next sync.
• Order photos and order history are kept for service and inquiry purposes; character files delivered to you remain on your devices.
• Server access logs are kept for up to 90 days.
• To delete your account and all server data: in the app, Settings → Account → Delete account (immediate). If you no longer have the app, see Delete account or contact 707kib@gmail.com from the signed-in address.

5. Children

The app is not directed to children under 14, and character creation must not use photos of minors.

6. Security

All traffic uses HTTPS. API keys are stored in the device's secure storage and encrypted on the server. Optional end-to-end encryption is available for synced data.

7. Changes and contact

We will post updates to this page. Questions: 707kib@gmail.com