Privacy

The short version

• You don't need an account, a password, or an email address to use Riffmix.
• Your Riffmixes live on your device, and if you're signed into iCloud they sync through your own iCloud account automatically. You can switch that off. Either way, we never see them.
• Publishing a Riffmix is something you choose to do, one Riffmix at a time. It's the only thing in Riffmix that becomes public.
• We don't run ads, use analytics, or use any third-party tracking software, and we don't sell or share your data with anyone.
• We use the microphone only when you choose to record, and that recording is treated exactly like the rest of your Riffmix.

What Riffmix handles, at a glance

This table is a quick reference. The sections below explain each row in full.

Your identity — no account, ever

Riffmix never asks who you are. The first time you publish something, Riffmix quietly generates a private cryptographic key on your device and stores it in your iCloud Keychain — the same secure vault Apple uses for your passwords.

That key never leaves your device or your iCloud Keychain, and only you can unlock it. It proves that anything you publish is yours — nobody else can publish, change, or delete it without that key.

A short code derived from that key — your maker ID — is the only thing that identifies you across Riffmix. It isn't your name, it isn't tied to an email address, and it isn't assigned or stored by us anywhere central. Your device generates it, on its own.

Because there's no account, there's no password reset. If you lose access to the device and its iCloud Keychain, you lose the ability to change or remove Riffmixes you already published — there's no one to ask to reset it, because nobody but you ever held the key.

Your Riffmixes, and how they're stored

Every Riffmix you make is saved as a small file on your device the moment you make it — its notes, drum patterns, instrument choices, your signature and any stickers, and, if you've recorded any voice parts, the actual audio. Nothing leaves your device except through your own iCloud sync or by publishing, both described below.

If you're signed into iCloud, Riffmix automatically keeps your Riffmixes up to date across your own devices, the same way Photos or Notes do. This happens entirely inside your own iCloud account — we have no access to it, no copy of it, and no way to see it.

You can turn this off for one device at a time from Settings, under your name, then iCloud, then Riffmix — or from the sync switch on Riffmix's About page — without losing anything already on that device.

Publishing a Riffmix — the one thing that's public

Publishing is the only thing in Riffmix that leaves your device and becomes public. You decide, Riffmix by Riffmix, whether to publish. Nothing is public until you tap Publish.

• The finished audio, and the notes, drum patterns and instruments that make it up, so it can be played back for anyone with the link.
• A cover image.
• Any voice parts you recorded, as part of the mix.
• Your maker name, if you've chosen to set one — otherwise nothing about you personally is attached.
• Your maker ID, which groups your published Riffmixes together so people can see what else you've made.

A published Riffmix gets its own web link that plays in any browser — anyone who has the link can listen, with no app and no account required.

You can unpublish a Riffmix at any time from Riffmix's Publish screen, which removes it from our server.

If someone remixes a Riffmix you published, their new one will always carry a credit back to you — your maker name if you've set one, otherwise your maker ID — the same way a sample gets credited on the sleeve it came from. That credit is public, the same way your maker ID already is once you publish.

Your maker name (optional)

You can optionally give yourself a maker name so the people who follow you see something friendlier than a random ID. Setting a name is entirely optional — Riffmix works exactly the same without one.

A maker name is public the moment you set it, on every Riffmix you've published, past and future. Please don't use your real name or any other personal information.

We check names against a short list of blocked words before accepting them, but we can't review every name a person might type. If you see one that shouldn't be there, please tell us — see "Reporting a problem," below.

Following other makers

You can follow other makers to see what they publish. Your follow list is stored on your device and, if iCloud is turned on, synced through your own iCloud account — the same as your Riffmixes. We never receive your follow list.

Following someone works by fetching that maker's public list of published Riffmixes from our server — the same list anyone with their maker ID could see. We have no way to know who follows whom.

The microphone

Riffmix asks for microphone access so you can record your own voice or sounds into a Riffmix. Recording only happens when you actively choose to record — the microphone is never listening in the background.

A recording is saved as a file on your device like the rest of a Riffmix, and follows the same rules: it stays on your device unless iCloud sync is on — in which case it moves through your own iCloud account — or you publish the Riffmix it's part of, in which case it becomes part of that public mix, as described above.

Exporting a video

Riffmix can export a short video of a spinning Riffmix to share outside the app. This uses Apple's standard share sheet, which can save that video to your Photos library if you choose that option. Riffmix does not otherwise access your Photos library.

What we don't do

• We don't run ads.
• We don't use analytics, crash reporting, or any other third-party tracking software.
• We don't sell, rent, or share your data with anyone, for any reason.
• We don't send push notifications.
• We don't have your name, your email address, or a password — we never ask for them.

Reporting a problem

If a published Riffmix or a maker name shouldn't be there, you can flag it from inside the app or from its web page. A Riffmix that's flagged enough times is automatically hidden while we review it.

You can stop seeing a maker's Riffmixes at any time by unfollowing them.

For anything else — a request to remove content, a copyright concern, or a question about this policy — the form on our Support page is the route. It isn't switched on yet, so nothing filed there reaches us today.

Children's privacy

Riffmix doesn't ask anyone — adult or child — for a name, birthdate, or email address, and it doesn't require an account of any kind.

Riffmix is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you're a parent and believe your child has published a Riffmix or set a maker name, the form on our Support page is the route for asking us to remove it. It isn't switched on yet, so nothing filed there reaches us today.

Riffmix does let anyone publish a Riffmix and set an optional, freely-typed maker name. If a young person is using the app, we'd encourage a parent or guardian to talk with them about not using a real name, and about what publishing means — that it makes a Riffmix visible to anyone who has the link.

Changes to this policy

We'll update this page if what Riffmix does changes, and update the date at the top when we do.