Privacy Policy

1. What data we collect

None, by default. Rigly is local-first. Your rig records, service entries, trips, checklists, receipt photos, and PDF exports all live in your iPhone's SwiftData store. They never leave your device unless YOU share them (via the iOS share sheet, AirDrop, email, etc.).

We do not collect:

• Personal identifiers (name, email, phone number)
• Location data
• Device identifiers (IDFA, IDFV)
• Usage analytics or telemetry
• Crash reports (unless you opt-in via Settings → Help shape Rigly)

2. The one exception: PLAYRIOT Listens (optional feedback)

If you choose to send feedback through the in-app PLAYRIOT Listens widget (Settings → Help shape Rigly, or shake-to-feedback), we receive the text you type and a random install ID — no email, no name, no Apple advertising identifier. That install ID is a random number generated on your device so we can match a reply to the right person and stop one vote being counted twice. It is kept in your device's keychain, so it can survive a reinstall. This is purely opt-in — Rigly sends nothing unless you use it.

3. Photos and receipt scans

When you scan a receipt or attach a photo to a service entry, Rigly:

• Asks permission to access your camera (NSCameraUsageDescription)
• Runs VisionKit + Vision OCR on-device — no cloud roundtrip
• Saves the photo as a JPG inside the app's sandboxed documents directory
• Never sends the photo anywhere

4. Subscriptions and payments

Rigly Pro purchases are processed entirely through Apple's StoreKit. We never see your payment information, name, or Apple ID. Apple's privacy policy governs payment data: apple.com/legal/privacy.

Subscription entitlement is stored on your device after purchase and validated against the App Store on launch.

5. Required-reason API declarations

Per Apple's PrivacyInfo.xcprivacy requirement, Rigly declares these required-reason APIs:

• UserDefaults (CA92.1) — Storing app preferences (subscription tier cache, last-seen onboarding state). Local only.
• FileTimestamp (C617.1) — Inspecting saved receipt and photo file dates for the service log.
• DiskSpace (E174.1) — Checking available space before saving a receipt scan to disk.

6. Children's privacy

Rigly is not directed at children under 13. We don't collect data, so there's no child-specific data path. If a parent has questions, email [email protected].

7. International users

Rigly works the same everywhere — there's no data to transfer internationally because no data leaves your device.

GDPR (EU users): You have rights to access, rectify, and erase any personal data we process. Since we don't process any, these rights are satisfied by default: your data lives only on your device, and you can delete it by deleting the app.

CCPA (California users): Same answer. We don't sell or share personal information because we don't collect any.

8. Changes to this policy

If we ever change how Rigly handles data — say, if a future v2 adds optional iCloud sync — we'll update this policy and notify you in-app before any new data collection begins.

9. Contact

Questions? Email [email protected]. We'll answer in plain English, not legalese.