Privacy Policy · Riff Locker

The app

What Riff Locker stores

Riff Locker stores the recordings you make, the recordings Whisper Mode captures, and the details you add to them (titles, notes, tags, key, tempo, projects and so on). All of it is kept in the app's private storage on your iPhone. It is included in the device backups you make to iCloud or a computer, under Apple's terms for those backups.

What Riff Locker sends

Nothing. The app contains no networking code. It has no account system, no server, no analytics, no crash reporting service and no advertising. We do not know who uses the app or how.

Microphone

The app asks for microphone access the first time you record or turn on Whisper Mode. It records only when you tap capture or while Whisper Mode is on, and iOS shows the orange microphone indicator whenever the microphone is active. Whisper Mode analyzes audio on the device in short frames. Audio that does not qualify as a capture is discarded from memory and is never written to disk. You can revoke microphone access at any time in iOS Settings.

Notifications

Whisper Mode can send local notifications when it captures a take. These are generated on the device. No push notification service is involved.

Exports

When you export a riff you choose where it goes: AirDrop, the Files app (including cloud providers you have set up, such as iCloud Drive or Dropbox), another app, or the Riff Locker folder on your phone. Once a file leaves the app it is governed by the privacy terms of the destination you chose. M4A exports embed the title, key, tempo and tags you entered as file metadata.

Riff analytics and resemblance

Tempo, key, pitch and similarity estimates are computed on the device from your own recordings and compared only against other riffs in your own locker. They are not sent anywhere and are not compared against any external catalogue.

Deleting your data

Deleting a riff removes its audio from the phone immediately. Settings › Danger zone deletes everything. Deleting the app removes all of its data.

Children

Riff Locker does not collect personal information from anyone, including children.

This website

This site loads no analytics, advertising or third-party scripts, with one optional exception described under "Human check" below. Our hosting provider keeps standard web server logs (IP address, browser, pages requested) for operation and security, as any host does.

The beta program

If you apply to test Riff Locker before release, we collect what the application form asks for and what the process produces:

What you enter: your name, email address, the instrument you play, your iPhone model and iOS version if you give them, and anything you write about how you would use the app.
What the process records: the times you applied, verified your email, accepted the Beta Tester Agreement and were approved or declined; the IP address and browser identification of the device used for each of those steps; the name you typed as your signature; and the version and SHA-256 fingerprint of the agreement text you accepted.
What we do not collect: anything from inside the app. Your recordings never reach us unless you choose to email one to us.

Why. To run the beta program, to contact you about it, to prevent abuse of the sign-up form, and to be able to prove that you accepted the Beta Tester Agreement if that is ever disputed. That last purpose is why we keep the acceptance record after the beta ends.

Who sees it. The site owner. If you are approved, your name and email address are entered into Apple's App Store Connect so that TestFlight can send you the invitation; from then on Apple processes your TestFlight activity under its own privacy policy, and you can limit crash and usage sharing in your device's TestFlight settings. Emails are sent through our hosting provider's mail service. We do not sell or share application data with anyone else.

How long. Applications that never verify an email are deleted after 30 days. Declined applications are kept for 12 months so we do not re-review them. For approved testers, the application and the acceptance record are kept for the duration of the beta and for three years after it ends, which matches the confidentiality period in the agreement. Server logs are kept by the host for its usual period.

Your choices. Email privacy@riff-locker.com to see, correct or delete your application. We will delete everything except the acceptance record of an agreement you signed, which we keep for the period above, and we will tell you if that applies.

Human check

To keep automated sign-ups out, the application form uses a hidden field and a timing check that run entirely on our server. The site owner may additionally enable Cloudflare Turnstile, a privacy-focused challenge; when enabled, the form loads a script from Cloudflare and Cloudflare processes your IP address and browser signals under its privacy policy in order to tell people from bots. No other third-party script loads on this site.

Cookies

The beta pages set one cookie, named rlb, containing a random value used to protect the forms against forged submissions. It identifies your browser to those pages only, expires after 30 days, and is not used for tracking. The rest of the site sets no cookies.

Changes

If the app ever gains a feature that sends data off the device, such as optional iCloud sync, this policy will be updated first and the feature will be off by default.

Contact

Wildmann Design Studio (Michael Wildmann Krauss-Lucas) · privacy@riff-locker.com

Riff Locker collects no personal data.