Privacy Policy

• Account info: email address, display name, and sign-in details from Google or Apple if you use them. We never store raw passwords.
• Your content: chats, characters you create, photos you upload or generate, likes and reports.
• Purchases: which plan or Aura pack you bought and its status. Card details are handled by Stripe and never reach us.
• Usage: Aura balances, message and snapshot counts, AI usage records (token counts and costs, never your message text), basic app activity and error logs used to keep Rift Universe running.
• Notifications: a push notification token if you turn push on, and whether a story email was opened or clicked.
• Voice: when you tap play on a reply, its text is sent to our AI provider to generate audio, and the clip is stored privately with that message.
• Imported content: chats, character cards and lorebooks you import from other apps are stored as your content.
• Guest demo: if you try Rift without an account, a hashed version of your network address is used to limit free replies, and your demo story is kept in your browser until you sign up.
• Site analytics: our hosting platform records page views, approximate country and device type.

To run your account and chats, generate AI replies and images, remember your story, send story emails and push notifications (see Notifications below), process payments, pay creator rewards, prevent abuse and keep the app secure. We do not sell your personal information and do not use your private chats for advertising.

If you go quiet, we may email you in a character's voice to pick up your story, and send push notifications if you've turned them on. We record whether these are opened or clicked so we can stop sending ones you ignore. Turn either off any time in Profile → Notifications, or use the unsubscribe link in any email.

To generate replies, voice, Snapshots and portraits, your message and recent conversation context are sent to third-party AI model providers — currently models from OpenAI and Google, accessed through our hosting platform, Lovable, and DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., China), which may process chat messages, character text and story notes to generate replies. They process this data to provide the service, including safety monitoring, under their own terms. We do not use your chats to train AI models.

Your conversations are private to your account. Photos you upload are stored privately and shown through temporary secure links. Characters you publish — their name, description, portrait and your display name — are visible to other users and in shared links. Unpublished characters stay private.

Rift staff may access your content when needed to investigate a report, enforce our rules, prevent abuse or fix a problem. When you report a message, an excerpt of it is attached to the report for review.

We rely on providers for hosting and database storage (Lovable, Supabase), AI model processing (OpenAI and Google via Lovable; DeepSeek, Hangzhou DeepSeek Artificial Intelligence Co., China, for chat replies), payments (Stripe), email delivery (Resend), push notifications (Google Firebase) and advertising measurement (Google Ads). They only process data as needed to provide their services.

We use essential cookies and browser storage to keep you signed in and remember your preferences (for example your reply length and theme). Advertising cookies are described below.

We advertise Rift Universe on Google. When you arrive from one of our ads, Google Ads cookies measure whether the ad led to a visit and a sign-up (conversion measurement and ad optimization). In regions that require consent (including the EEA, UK, Switzerland and Quebec), this measurement only runs if you accept it in our privacy banner, and you can change your choice anytime by clearing your browser storage and revisiting. Elsewhere it runs by default, subject to applicable opt-out rights. See Google's privacy commitments for how Google handles this data.

We keep your data while your account is active. You can delete individual messages or chats anytime. You can delete your whole account and its data from Profile → Delete account (see how account deletion works), or email us and we'll process it within 30 days, except records we must keep for legal, tax or fraud-prevention reasons.

We are based in the United States and process data there. If you use Rift from the EU, UK or elsewhere, your data is transferred to the US. Our providers rely on standard contractual safeguards for these transfers.

Chat messages, character text and story notes (and any persona you've set for that chat) sent to generate AI replies may also be processed outside the United States, including in China by DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co.), under that provider's terms. We send only what is needed to generate the reply: those requests don't include account identifiers such as your email address, account name or user ID, though anything you write in the story itself is sent as part of it.

Depending on where you live (for example the EU/UK under GDPR, or California under CCPA), you may have the right to access, correct, export or delete your data and to object to certain processing. Email us to make a request.

Rift Universe is for adults 18+. We do not knowingly collect data from anyone under 18 and will delete such accounts when discovered.

Data is encrypted in transit, access is restricted per account, and balances and hidden character data can only be changed by our servers. No system is perfectly secure, but we work to protect your information.

Email rift.app.support@gmail.com with any privacy questions or requests.