Rivo is built on the belief that your conversations are yours. This page explains what we store, why, and how we protect it — in plain language, not legalese.
What we collect
- Account information you provide — name, email address, username and, if you add them, a bio and a profile picture.
- Your messages and the details needed to deliver them (who sent what, to which chat, and when), stored encrypted.
- The devices you are signed in on: when each one signed in and was last active, and its browser's description (such as “Chrome on Android”), so you can see them and sign them out in Settings.
- Notification addresses for the devices where you turn on notifications, used only to deliver message notifications.
- Error reports from our servers to fix problems. They never include the content of your messages.
What stays on your device
Your theme, accent color and chat background are kept only in your browser, as are messages waiting to be sent while you are offline. Signing out removes the account's data from the device.
How we use data
We use your data to run the service: to sign you in, deliver your messages and notifications, and keep your account secure. We do not sell your data, use it for advertising, or share it with third parties except where required by law.
Security
Every message is encrypted with its own unique key before it is stored (envelope encryption: per-message keys, themselves encrypted with master keys that are kept apart from the database). The server decrypts a message only to deliver it to the people in the conversation — Rivo is not end-to-end encrypted. Accounts are protected by bcrypt-hashed passwords, signed sessions in HttpOnly cookies that you can end from any device, CSRF protection and rate limiting.
This website
Neither the Rivo app nor these public pages (the home page and this one) load anything from other companies: the typefaces, icons and scripts all come from Rivo's own server, so opening them tells no one else that you did.
Your choices
You control who sees your online status, email address and profile picture in Settings: everyone, your contacts (people you added, wrote to or named yourself — not just anyone who added you) or nobody. Your email address is shown to your contacts only unless you choose otherwise. You can delete your account there at any time. Deleting it removes your profile, contacts, notification addresses and your Saved Messages; the people you talked with keep their copy of your conversations, shown as “Deleted account”. For questions or a copy of your data, contact us at 1k.free.follower@gmail.com.