Last updated: 19.07.2025
1. Data Controller
The data controller for this privacy policy is Aliaksei Ladyha, operating Rivn under the following business registration:
- Business Name: Aliaksei Ladyha
- Tax ID (NIP): 5213974438
- Business Registration (REGON): 522436644
- Business Location: Warsaw, Poland
- Contact Email: privacy@rivn.xyz
2. Information We Collect
We collect minimal information necessary to provide our service:
- Account Information: Email address and account preferences
- Usage Data: Service usage statistics and performance metrics
- Technical Data: IP addresses, browser type, and device information for security and service delivery
3. Information We Do NOT Collect
Due to our client-side encryption model:
- We cannot access the content of your photos or notes
- We do not store your encryption passwords or keys
- We cannot view, analyze, or process your encrypted content
4. How We Use Your Information
We use collected information to:
- Provide and maintain the Rivn service
- Process payments and manage subscriptions
- Send important service updates and security notifications
- Improve service performance and user experience
- Prevent fraud and ensure platform security
5. Data Storage and Security
Your data security is our top priority:
- Client-Side Encryption: All content is encrypted on your device using AES-GCM before upload
- Zero-Knowledge Architecture: We cannot decrypt or access your stored content
- Secure Infrastructure: Data is stored on secure, monitored servers with industry-standard protections
- Regular Backups: Encrypted data is regularly backed up to prevent loss
6. Data Sharing
We do not sell, trade, or share your personal information with third parties, except:
- When required by law or legal process
- To protect our rights, property, or safety
- With service providers who assist in operating our platform (under strict confidentiality agreements)
- In connection with a business transfer or acquisition (users will be notified)
7. Your Rights
You have the right to:
- Access and download your encrypted data
- Delete your account and all associated data
- Update your account information
- Opt out of non-essential communications
- Request information about data we hold about you
8. Data Retention
We retain your data as long as your account is active. When you delete your account, all encrypted content and personal information are permanently deleted within 30 days.
9. International Data Transfers
Your data may be processed and stored in countries outside your residence. We ensure appropriate safeguards are in place to protect your information during such transfers.
10. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information immediately.
11. Changes to This Policy
We may update this privacy policy periodically. We will notify you of significant changes via email or service notifications. Your continued use constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related questions or to exercise your rights, contact us at privacy@rivn.xyz