Privacy policy

The short version

• We never store what you type into a prompt or what an AI app answers. That text goes from your device straight to the AI app.
• You can search, use and rate prompts without an account.
• When you use a prompt, we keep only which prompt, which AI app, your yes / partly / no answer, and a scrambled device id.
• We don't sell data, and we don't show ads.

What we store when you use a prompt

• The prompt and version you used, the AI app you chose (or picked afterwards), and the time.
• Your “Did it work?” answer, any reason chips you picked, and an optional note of up to 280 characters if you write one. Please keep personal details out of notes.
• A random device id that lives in your browser. On our server it is scrambled (hashed with a secret) before it is stored, so it cannot be turned back into you. It is only used so each device counts once a day and to spot abuse.
• A scrambled version of your internet address, kept for rate limiting only.
• Where a visit came from (the website's name only, like google.com), and any campaign tags in the link.
• Your approximate location (country, state and city), estimated from your internet address. We don't keep the address itself, and we never see your precise location.

The blanks you fill in and the compiled message stay in your browser. They are never sent to Riprova.

What we store when you sign in

Signing in is only needed to share a prompt or connect an AI tool. Then we keep your email address (to sign you in), the name and handle you choose, and an optional bio and photo link. Your name and handle are public on the prompts you share.

Sign-in uses a one-time email link. If Google sign-in is offered, we receive your email and name from Google and nothing else.

Connected AI tools

If you connect an AI tool, it gets a personal key that can only fetch prompts and report runs. A report contains the prompt id, the app and model, whether the tool finished, and the yes / partly / no answer. There is no field for anything else, so the tool cannot send us your content even by mistake. You can revoke a key at any time.

Analytics

We use PostHog to count page views and taps so we can tell whether Riprova is working. It is configured so it cannot read anything you type, never records your screen, and does not receive search terms. Events carry ids and app names, never content.

Feedback

If you send feedback, we keep what you write and your email if you give it.

If you answer our short survey, we keep your answers, anything you write, and your email if you give it.

Reports and hidden prompts

When you report a problem, we keep the reason, your optional note, and the scrambled device id or your account so one person counts once. Prompts that get several “unsafe” reports from different people are hidden until someone reviews them.

Where it lives and how long

Data is stored with Supabase (database and sign-in) and served by Vercel. We keep use and answer records so the track record of each prompt stays honest over time. If you delete your account, your profile and email are removed and the prompts you shared are either removed or kept under an anonymous name, your choice.

Your choices

• Clear your browser's site data for Riprova to reset the device id.
• Email us to see, correct or delete what we hold about you, or to delete your account.

Contact: ben@riprova.run

How the numbers work