Privacy Policy

Last updated: September 5, 2026

Rivory is operated by Kleos Labs LLC, a Nebraska limited liability company.

1. Information We Collect

We collect information you provide directly to us when you:

• Sign in with Apple, Google, or an email one-time code
• Choose a display name or handle
• Make picks or bracket predictions in a competition
• Join or create groups and clubhouses
• Send group or direct messages, or report content
• Purchase or restore Rivory Plus — purchase history and subscription status are linked to your Rivory account ID
• Contact us for support

We also collect some information automatically:

• Usage analytics — features used and screens visited
• Crash and error diagnostics if the app fails unexpectedly
• A push notification token, if you enable notifications

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the app
• Process your picks and calculate scores
• Display leaderboards and group or clubhouse rankings
• Verify purchases, restore Rivory Plus access, and understand subscription activity
• Send you push notifications about your account, groups, and competitions
• Respond to your comments, questions, and support requests
• Review reports of abuse or safety concerns and enforce our community rules

3. Information Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

• With your consent: when you join a group or clubhouse, other members can see your display name and picks
• On leaderboards: your display name and scores may appear on public and group leaderboards. Your email address is never shown to other users.
• Service providers: we use the following third-party services to operate the app:
  • Supabase — authentication, data storage, and delivery of sign-in emails
  • RevenueCat — purchase verification, subscription management and analytics, using your Rivory account ID, purchase history and subscription status
  • PostHog — usage analytics
  • Sentry — crash and error diagnostics
  • Apple Push Notification service — delivering push notifications

Payments are handled by Apple or Google through the applicable app store. Rivory and RevenueCat do not receive your full payment card details.

4. Data Security

We implement appropriate security measures to protect your personal information. Your data is stored securely using industry-standard encryption. However, no method of transmission over the Internet is 100% secure.

5. Your Rights

You have the right to:

• Access your personal information
• Update or correct your display name and preferences in the app
• Delete your account and associated data
• Export your prediction data
• Ask us about the analytics and diagnostics data described in Section 7

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal obligations.

If deleting a reported message or account also deletes its report, authorized moderators may retain a restricted copy of the reported text and report details to review abuse or safety concerns. That copy, and decisions recorded with it, are deleted within 30 days of the report being deleted. This copy does not include attached media or the rest of the conversation.

Aggregated, anonymized data that cannot identify you may be retained indefinitely to improve our services.

Deleting your Rivory account does not cancel an app-store subscription. Manage or cancel it in the store where you subscribed. Apple and Google may retain transaction records under their own policies and legal obligations. Contact us about deletion of account-linked subscription data processed for Rivory.

7. Analytics and Diagnostics

This section covers analytics and diagnostics in the Rivory app and website.

We use PostHog to understand how users interact with the app — for example, which features are used and how often. PostHog collects usage data tied to your account; it is not sold to third parties.

We use Sentry to capture crash reports and error diagnostics so we can find and fix reliability issues. Sentry may receive device and app diagnostic information at the time of a crash or error.

These services are part of how the app operates and are not behind a separate in-app toggle today. If you have questions about this data or want to request its deletion, contact us at the address in Section 12.

8. Children’s Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at support@kleoslabs.dev so we can take steps to delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. Our service providers (Supabase, RevenueCat, PostHog, Sentry, and Apple) may store and process data in various regions. By using the Service, you consent to the transfer of your information to these countries.

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the “Last updated” date at the top of this page and, where appropriate, via email or an in-app notice. Your continued use of the Service after any changes indicates your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@kleoslabs.dev.