Privacy

Rivo predicts a race finish time and builds a training plan from it. This page says exactly what the app collects, where it goes and how to remove it. There is no advertising, no data sale and no tracking across other apps or sites.

No account, by default

The app works without an email address or a password. When something must persist (a claimed result, a race date, a plan) the app creates an anonymous identity, a random id kept in your iPhone's Keychain. Sign in with Apple is optional and only links that same identity to your Apple ID so your number survives a new phone. We never receive your Apple email unless you choose to share it.

What we collect

• Health and fitness data, linked to your anonymous id. The benchmarks you type (a 5 km time, station times), your sex and birth year (for the cohort your number is compared with), and, if you allow Apple Health access, summaries of workouts: start time, duration, distance, average and maximum heart rate, and per-lap duration and distance. Raw Health samples never leave the phone; the app derives the summary on the device and sends only that.
• Races and results. Race dates and divisions you enter; a public result you claim as yours (name as published, event, splits) from openly published results.
• Identifiers. The anonymous user id; a push token if you allow notifications; a Garmin device pairing if you set one up.
• Purchases. Subscription status from Apple through RevenueCat: product, period, expiry. Never a card number.
• Usage data. Product events (a prediction completed, a paywall viewed, a push opened) sent to PostHog under the anonymous id, used only to see whether the product works. No third-party advertising identifiers, no fingerprinting.

What we do with it

Predict your finish, build and adapt your plan, render the cards you choose to share, and send the notifications you keep switched on. Each prediction stores its inputs and the model version that made it so we can measure our own error after your race.

Who processes it

Supabase (database, authentication, card image storage), Railway (the API and worker), RevenueCat (subscription status), PostHog (usage events), Apple (App Store, push notifications, Sign in with Apple). Each acts on our instructions. Nobody else receives your data.

Sharing

A card is shared only when you tap share. A card link shows the card image and a download button, nothing else, and carries no cookies or analytics.

Retention and deletion

In the app, You tab → Delete account removes every row, every stored image and the sign-in identity immediately. There is no backup copy kept for you afterwards. You can also email [email protected].

Apple Health

Health data is read only with your permission, used only for the purposes above, never used for advertising, never sold, and never disclosed to a third party except the processors named here acting on our behalf.

This website

userivo.app sets no cookies and runs no analytics.

Our Instagram accounts

If you comment the word PLAN on a post of an Instagram account we run, we reply once with a direct message holding the link you asked for. To do that we keep that comment's ID, the account it was on and the time we replied. Nothing else: not the comment's text, your username or your profile. Email [email protected] to have it removed.

Children

Rivo is for adults training for a race and is rated 4+ only because it contains nothing objectionable. We do not knowingly collect data from anyone under 16.

Your rights

Access, correction, export and erasure: email [email protected]. Under the GDPR and the UK GDPR the legal basis is performance of the service you asked for, and consent for Health data and notifications, which you may withdraw in iOS Settings at any time.

Changes

If this page changes materially the app will say so on its next open. The effective date above is the record.