Privacy Policy
Effective date: August 24, 2026
RiffCheck ("the app") is developed by Puranjay Savar Mattas ("we", "us"). This policy explains what happens to your data when you use RiffCheck.
Summary: RiffCheck has no server. We don't collect, store, or transmit any of your personal data to ourselves. There is no account, no sign-up, and no analytics or tracking of any kind.
What the app does on your device
- Dataset/model checks — When you check a HuggingFace or Kaggle dataset or model, the app sends a request directly from your device to HuggingFace's or Kaggle's own public API to fetch that dataset's or model's metadata. This goes straight from your device to HuggingFace/Kaggle — never through any server we operate, because we don't operate one.
- License data — License-classification data (SPDX, and for Pro subscribers, ScanCode) is bundled with the app and refreshed periodically from its public source. No personal data is involved.
- Kaggle API key (Pro feature, optional) — If you connect a Kaggle account to check Kaggle datasets or models, your Kaggle API key is stored only in your device's Keychain. It's sent only directly to Kaggle's own API to authenticate your requests, and it is never logged or sent anywhere else.
- Saved check history (Pro feature) — If you're a Pro subscriber, your check history is saved locally on your device only, using Apple's on-device storage. It's never uploaded anywhere, and it's deleted if you delete the app.
- Watch for Changes (Pro feature) — Re-checking a watched dataset happens locally when you open the app or tap "Check Watched." Any resulting alert is a local, on-device notification — no push server is involved.
- Purchases — Subscriptions, credits, and any other in-app purchases are handled entirely by Apple's App Store and StoreKit. We never see your payment information; Apple's own privacy policy governs that data.
What we don't do
- We don't run any servers and don't collect any data ourselves.
- We don't use analytics, advertising, or third-party tracking SDKs of any kind.
- We don't ask for your name, email, or any account to use the app.
- We don't sell or share data, because we don't have any to sell or share.
Third-party services
When you use the app, your device communicates directly with:
- Hugging Face (huggingface.co, datasets-server.huggingface.co) — subject to Hugging Face's Privacy Policy
- Kaggle (kaggle.com, api.kaggle.com), if you use Kaggle features — subject to Kaggle's Privacy Policy
- Apple (App Store / StoreKit), for purchases — subject to Apple's Privacy Policy
We don't control and aren't responsible for these third parties' data practices — check their policies directly for details.
Children's privacy
RiffCheck is not directed at children and does not knowingly collect data from anyone, of any age, because it doesn't collect data from anyone at all.
Changes to this policy
If this policy changes, the updated version will be posted at this same URL with a new effective date.
Contact
Questions about this policy: support.ruffcheck@psmattas.com