Privacy

Your notebook is private. We don’t sell your data, we don’t show ads, and we don’t read your notes. This page explains exactly what we collect, why, and who helps us run Riddled.

What we collect

• Your account: your email address, used to sign you in (with an emailed link or Google) and to contact you about your account.
• What you write: your notes, folders, images and screenshots you add, the goals you set for notes, and your conversations with Riddled. We store these so you can use them on any device.
• Your settings: preferences such as layout, voice, text size and theme.
• Usage records: how many times Riddled read or replied, and the technical cost of each (for example, how much text was processed). We keep these to run allowances, prevent abuse and keep the service affordable. They don’t include the content of your notes.
• Basic analytics: anonymous page-view statistics (which pages are visited, from which country and device type), collected without cookies.
• Payment details (when paid plans launch): handled by our payment processor. We never see or store your full card number.

You need an account to use the notebook. You can sign in with an emailed link or with Google; if you choose Google, we receive your name, email address and profile picture from Google, and nothing else.

How Riddled’s AI uses your writing

Riddled reads along to ask questions and reply. To do that, the relevant parts of the note you’re working in (and earlier conversations on it) are sent to an AI model provider to be processed, and the response is shown to you. We send only what’s needed for that note.

• We use AI providers under terms where your content is not used to train their models.
• Providers may keep requests for a limited time to detect abuse, as their terms allow. We don’t permit them to use your content for anything else.
• You can turn reading along off everywhere (Customize Riddled) or for a single note (“Quiet in this note”). When it’s off, nothing is sent unless you explicitly ask Riddled about something.

Speaking your notes

Dictation uses your browser’s built-in speech recognition. Depending on your browser, your voice may be processed by the browser’s maker (for example, Google in Chrome) under their privacy policy. Riddled never receives your audio, only the text that appears in your note.

Who helps us run Riddled

We use a small number of service providers, each only for the job described:

• Supabase: database, sign-in and file storage, where your account, notes and images are kept.
• Vercel: hosting the website and app, and anonymous analytics.
• An AI model provider (currently OpenAI): processing the parts of notes Riddled reads.
• Stripe (when paid plans launch): payments and invoices.

These providers may process data in the United States and other countries. We don’t sell or rent your personal information to anyone, and we don’t share it for advertising.

Who can see your notes

Only you. Our database enforces that each account can reach only its own notes. We don’t look at your content, except when you ask us to help with a problem, when we must investigate abuse or a security issue, or when the law requires it.

Cookies and local storage

We use a cookie only to keep you signed in. Your browser’s local storage remembers your display preferences on that device. We don’t use advertising or tracking cookies.

How long we keep things

• Your notes and conversations: until you delete them or your account.
• When you delete your account, your notes, images and conversations are deleted, and removed from backups within 30 days.
• Usage and billing records: as long as we need them to run the service and as the law requires (for example, tax records).

Your choices and rights

You can view and edit everything you’ve written in the app. You can ask us to send you a copy of your data, correct it, or delete your account and everything in it by emailing privacy@riddled.ai. Depending on where you live (for example, in the EU, UK or California), you may have additional rights, such as objecting to processing or complaining to a data protection authority. We’ll respond within 30 days and won’t treat you differently for using them.

Keeping your data safe

Data is encrypted in transit and at rest. Access is restricted per account at the database level, images are stored privately and shown only through short-lived links, and we limit and monitor how the service is used to prevent abuse. No system is perfectly secure, but if a breach ever affects your data, we will tell you promptly.

Children

Riddled isn’t intended for children under 13, and we don’t knowingly collect their information. If you believe a child has given us data, contact us and we’ll delete it.

Changes

If we change this policy in a meaningful way, we’ll update the date above and let account holders know by email before the change takes effect.

Contact

Questions or requests: privacy@riddled.ai.