Effective date: June 30, 2026 · Last updated: July 3, 2026
This Privacy Policy explains how Rivership (a sole proprietorship based in Tokyo, Japan — “we”, “us”) handles information in connection with the iOS applications we publish on the App Store (each, an “App”). It applies to all of our Apps unless an App provides its own separate policy.
Our Apps are designed to be on-device first. We do not require you to create an account, and the content you produce in most Apps (such as habits, notes, study progress, logs, and timers) is stored locally on your device and, if you enable it, in your own private iCloud. We do not operate servers that collect or hold that personal content.
We do not sell your personal information. The limited processing that does occur is described below and is tied to specific features.
| Feature | What is processed | Who processes it |
|---|---|---|
| App content (habits, notes, logs, study progress, etc.) | Stored locally on device / your iCloud. Not transmitted to us. | You / Apple iCloud |
| Purchases & subscriptions | Purchase and entitlement events, and an anonymous app-user identifier, used to unlock paid features and restore purchases. We never receive your name or payment card details. | Apple; RevenueCat, Inc. |
| Advertising (ad-supported Apps only) | Some Apps show ads. The ad provider may collect device identifiers, coarse usage and interaction data to deliver and measure ads. These Apps offer a paid option to remove ads. | Google AdMob |
| AI feedback & generation (IELTS Writing Coach, JutoDesk, BukkenWriter, AdPulse) | The text you choose to submit (an essay, clauses, meeting notes, property details, or ad metrics) is sent through our processing endpoint to a third-party AI provider to generate your result. It is used only to produce that result, is not stored by us beyond returning it, and is not used to train models. Do not submit information you are not authorized to share. | Anthropic (Claude API) |
| On-device photo & face analysis (TeamShot, SnapCull) | Photo selection and face grouping are performed entirely on your device using Apple’s frameworks. Your photos and any face data never leave your device and are not sent to us or any third party. | You (on-device) |
| Diagnostics | If you opt in via iOS settings, Apple shares aggregated crash and usage analytics with us. This is not linked to your identity. | Apple |
| Location at the moment of a photo (Dokoichi) | When you take a photo, the App reads your device location once and converts it on your device to a town or city name plus coordinates rounded to roughly 1 km. The exact coordinates are discarded and never stored or sent to us. You can choose the level of detail (neighborhood, city, or none) or pick the town by hand. The App does not read location in the background and has no real-time location sharing. | You (on-device); Apple MapKit for reverse geocoding |
| Photos and places you share in a room (Dokoichi) | Photos you post, the town name, the date, and an anonymous author id are stored in your private iCloud. If you join a room, they are shared through Apple's CloudKit sharing with the 2 to 12 members of that room only. We do not operate a server for this data and cannot read it. | You / Apple iCloud (CloudKit) |
| Reports and blocks (Dokoichi) | If you report a photo, the App stores the photo id, the reason, and an anonymous reporter id in the room's shared zone so the room owner and we can act on it. Blocks are stored only on your device. | You / Apple iCloud; Rivership (report handling) |
TeamShot helps you sort your own photos by person. To do this, when you select photos, the App uses Apple’s on-device Vision framework to detect faces and to compute a temporary numerical “feature print” of each detected face. These feature prints are compared to each other only to group photos that appear to show the same person, so you can hand each person their photos.
On-device content remains until you delete it or remove the App. Face data used by TeamShot is not retained: face feature prints are discarded immediately after grouping, and grouping results are held only in memory for the current session and cleared when you reset or close the App. Purchase records are retained by Apple and RevenueCat as needed to provide and restore your entitlements. Text submitted for AI feedback is processed transiently to return your result and is not retained by us for any other purpose.
Dokoichi: photos, places, and rooms remain in your device and your iCloud until you delete them. "Delete all data" in Settings removes them from both and leaves every room. Reports are kept for up to 90 days after they are resolved, then deleted.
Our Apps are not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will address it. Dokoichi requires users to be 13 or older; users who are found to be under 13 are removed from rooms and their content is deleted.
We are based in Japan. Third-party providers listed above may process data in other countries under their own safeguards and policies.
We may update this policy as our Apps evolve. Material changes will be reflected here with a new “Last updated” date.
Rivership · Tokyo, Japan
[email protected]