Riji Privacy Policy

Welcome to Riji (“the app”). We understand the importance of your personal information and work to protect it. This Privacy Policy explains how we collect, use, store and protect personal information. Please read and understand this policy carefully before using the app.

1. How we collect and use personal information

Riji is a productivity and focus app that primarily stores data locally. Journals, to-dos, tasks and preferences are saved on your device by default. Only when you choose to use online features such as accounts, companions, feedback or Riji Pro cloud backup do we process the data needed to provide those features, as described in this policy.

We request necessary device permissions or collect only the data needed for core features in the following situations:

1. Speech-to-text input

When you use voice input to record tasks or ideas, we request microphone and speech-recognition permissions (NSSpeechRecognitionUsageDescription on iOS and RECORD_AUDIO on Android).

Processing: The device's speech-recognition service, such as Apple or Google, converts speech to text and may require a network connection. Riji does not store voice recordings. The resulting text is entered into the task or plan you are editing and follows that feature's local storage, sharing or cloud-backup settings.

2. In-app purchases (Riji Pro)

When you purchase Riji Pro, we use RevenueCat to process app user identifiers (anonymous or linked-account identifiers) and transaction information to verify purchases and provide access. Apple processes App Store payments; Riji does not collect bank or payment-card details.

3. Focus mode and background operation

When focus mode plays ambient sounds or music, we may use foreground-service and wake-lock permissions to keep playback running in the background and prevent the system from stopping the app. These permissions support normal operation and do not involve collecting personal information.

4. Accounts and profiles

You can use the app anonymously. If you choose to link an email, Apple, Google or WeChat account, we process the relevant account identifier, credential-verification result, nickname and any profile photo you upload, for sign-in, account recovery and profile display. Passwords are stored only as one-way hashes. Third-party sign-in credentials are not shown to other users.

Sign-in methods depend on the options actually offered in your app and region. Listing a provider in this policy does not enable an unavailable sign-in method.

5. Companions and shared focus

After you complete onboarding and save a goal, sharing that goal with companions is enabled. You can change this in Me > Privacy & sharing. The scrolling goal wall in onboarding is maintained by our team and does not read your private goals. Fetching its content does not submit the goal you are typing.

When you use companion or shared-focus features, we process companion codes, online status, current focus duration, daily focus summaries, companion relationships and report or block records. Task names and detailed daily activity are shown to companions only if you enable the corresponding sharing option. Phone numbers, email addresses and third-party sign-in information are not shown.

6. Riji Pro cloud backup

If you have Riji Pro, have linked an account you can sign back into and have enabled online features, we automatically back up focus records, including task names, start and end times, duration, colour markers and update times. This enables recovery after reinstalling or changing devices. Journal text, to-dos and non-focus tasks are not uploaded by this feature.

7. Feedback and suggestions

When you submit feedback, we store its category, description, optional contact details, app version and operating system, linked to your online account. This helps us investigate issues, improve the product and show progress and replies. Only authorised staff can access feedback; it is not public. Short-term IP rate-limit counters and account submission records prevent duplicate or abusive submissions. Feedback and contact details are deleted when you delete your online account.

8. Sharing and referral rewards

Only if you choose to join a campaign do we process referral links, first-use and return-use times after 24 hours from registration, account-verification status, and the post links, social accounts, screenshots, view counts, likes and saves you submit. We use these to verify eligibility, review submissions and award Pro access. Campaigns do not require positive reviews. We do not read social-platform passwords, private messages or address books.

Submitted screenshots are visible only to you and authorised reviewers and are not published through the public image service. Unsubmitted screenshots are cleared after 7 days; submitted screenshots are cleared 90 days after the application's last update. Deleting your online account removes submissions and screenshots and removes evidence from review records. To prevent duplicate rewards, one-way hashes of account and installation identifiers and social accounts may be retained for up to 180 days, without advertising profiling. Necessary de-identified reward audit records are used for dispute resolution. Contact campaign staff through Feedback.

Service statistics

When you use accounts, companions, records or cloud sync, the server processes the business records needed for those services. To check service operation, we aggregate existing account counts, synced focus sessions and durations, invitations and outcomes, confirmed record plays and current room status. Authorised operations staff receive only aggregate reports, without task text. These reports do not add client reporting fields, record complete page-view histories or retain extra heartbeat histories.

These records follow each feature's purpose and retention rules; cloud sync and companion sharing continue to follow your settings. Local records that have not been synced are not uploaded for statistics. Statistics do not extend retention periods. Totals change with existing data when records or accounts are deleted. We do not separately collect time spent in the foreground, page-click paths or cross-app behaviour.

Record service

When you use online records, we process the record identifiers you select, playback authorisation and confirmation times to provide playback, validate confirmations and maintain play counts. Favourites and custom records are saved when you choose to use those features. Playback confirmation is not a complete listening history or listening duration. It does not read other apps' names or usage. Related account records are deleted when you delete your online account.

2. Device permissions

We request the following permissions to operate the app and provide services. You can disable some or all permissions in your device settings at any time:

• Microphone/recording: Used for transcription only when you tap voice input.
• Photos and camera: Used when you select or take a profile photo, or choose campaign evidence, backgrounds or images to share. Profile photos and submitted campaign evidence are uploaded; backgrounds and share images are processed on your device. Only selected images are read.
• Internet access: Used for configuration updates, resource downloads, purchase verification, accounts, companions, shared focus, feedback, sharing rewards and cloud backup.

Notifications: You choose whether to receive reminders. For companion push notifications, we process the device push token, notification preferences, device language and time-zone offset to deliver reminders in your language and respect quiet hours. Plan and app-blocking reminders are scheduled locally on your device. Turning off notifications does not disable other features.

Screen Time and app restrictions: When you enable app blocking or focus restrictions and grant system permission, iOS uses Screen Time capabilities to enforce them. Selected apps and restriction settings are stored locally for use by the app and its extensions. They are not uploaded to Riji's servers or used for advertising.

3. Third-party SDKs and services

We use the following third-party SDKs and services for in-app purchases and related features. They may collect certain device information:

4. How we store personal information

Storage: Local data is stored on your device. Account, companion, feedback and Pro focus-backup data is stored on access-controlled servers. We use authentication, encrypted transmission, access controls and data minimisation to protect it.

Retention: Local data is deleted when you uninstall the app or clear its data. Online data is retained as needed for the features described above. When you delete your online account in Account & security, we delete account identities, profile photos, companion relationships, feedback, contact details and cloud focus backups. Records that must be kept for security or dispute resolution are de-identified.

5. Your rights and account deletion

You can view or change your nickname, profile photo and linked accounts in the app, and delete your online account and related cloud data from Account & security. Account deletion does not automatically delete records still stored on your current device. To remove local data too, delete the relevant records in the app or uninstall it. You can also contact us using the details below to request access, correction, a copy or deletion of your information.

6. Children and young people

The app is primarily intended for adults. If you are a minor, read this policy with your parent or guardian and obtain their consent before using our services. Local legal rules concerning the age of minors apply where relevant.

7. Changes to this policy

We may revise this policy from time to time. If material changes are made, we will show the revised policy in a dialog when you sign in or update the app. We will collect, use and store personal information under the revised policy only after you agree.

8. Contact us

For questions, comments or concerns about this policy or our privacy practices, please contact us:

Developer: 大连微行科技有限公司 (Dalian Vixi Technology Co., Ltd.)

Email: hi@xiaozilv.com

We will review your request promptly and respond within fifteen working days after verifying your identity.