Privacy

Last updated October 11, 2026. This policy covers the Riff iPhone app and the Riff service at getriff.ca. Riff is run from Toronto, Canada.

The short version

• Riff listens for voice commands on your phone. We don't record, keep or upload your voice commands. Only riffs you choose to post are uploaded.
• We keep what you do in the app (what you play, skip, like, save, comment and send) so we can choose what to play next.
• We don't sell your information. We don't use advertising trackers.

Microphone and speech

While Riff is playing, it uses your iPhone's microphone and Apple's speech recognition to hear commands like “next” or “save”. Recognition runs on your phone wherever your iPhone supports it. Voice commands aren't recorded or saved. What leaves your phone is only what you choose to share: a riff you record and post, a comment you post, or the name you say when you send a riff to a friend.

What we collect

• A device sign-in. A random ID made by the app, plus a display name you can change. Riff has no passwords and doesn't ask for your email or phone number.
• Your choices. The topics you pick, likes, saves, follows, comments you post, and the friend names you add for “send to…”.
• Listening activity. Which riffs were played, how far you got, skips, replays, full-episode listens, and whether you were driving, walking or neither (from the mode you chose in the app, not from GPS).
• Basic technical logs. Request times and errors, kept to run and fix the service.

Riff doesn't collect your location, contacts, photos or advertising ID.

How we use it

We use this information to run Riff: to pick and play riffs, to show people how their riffs do (as totals that don't identify you), to keep the service working and secure, and to improve it. Comments you post can be seen by other people on Riff, including whoever posted the riff.

Posting riffs

When you post a riff, its audio, title and any words you add can be heard and seen by other people on Riff. If you connect Instagram, Threads or TikTok to bring over your own posts, you give Riff read-only access to your own posts, only so you can turn them into riffs. Nothing is posted until you approve it, and you can delete any riff, or your whole account, at any time.

Where it's stored and for how long

Riff's servers run on Fly.io in Toronto, Canada. We keep your information while you use Riff. If you ask us to delete it, we delete your account and listening history within 30 days, except where the law requires us to keep something.

Your choices

• You can turn off microphone access in iPhone Settings. Riff still plays, but voice commands stop working.
• You can ask for a copy of your information, ask us to correct it, or ask us to delete it, by writing to victor@pianopianotherestaurant.com.
• Riff isn't meant for children under 13.

Changes and contact

If this policy changes, we'll update the date above and tell you in the app if the change is significant. Questions: victor@pianopianotherestaurant.com.