Privacy Policy

1. Who we are

Rivet apps are made by Dreamkid LLC (“Dreamkid”, “we”, “us”). This policy covers the website rivetapps.store and the RivetCal, RivetChat, RivetChar and RivetNotch desktop apps (the “Apps”). Dreamkid LLC is responsible for them.

2. What we collect

Nothing. We don't ask you to create an account with us, and the Apps don't send us your calendar, messages, contacts, files, usage statistics or crash reports. The Apps contain no analytics or advertising code.

3. What stays on your computer

To work, the Apps store some information locally in their own data folder on your computer. This never leaves your computer except as described in section 4:

• RivetCal: a local cache of your calendar list and events, its settings, and the Google and Microsoft sign-in tokens needed to keep the calendars connected. The cached event information can include event titles, dates and times, locations, descriptions, attendees, response status, reminders, recurrence information and video-conference links.
• RivetChat: your WhatsApp Web sessions for each account, account names, settings, chosen sounds, wallpapers you import, and your lock password (stored as a secure hash, not as plain text).
• RivetChar: your favorite and recent characters and your settings (theme, skin tone, hotkey and similar). To type a character into another app, RivetChar briefly places it on your clipboard, presses ⌘V using the macOS Accessibility permission you grant, and then puts your previous clipboard back. It does not read, record or store anything you type.
• RivetNotch: its settings and the arrangement of your menu bar. To open and move menu bar icons, RivetNotch uses the macOS Accessibility permission you grant to perform clicks and ⌘-drags in the menu bar. If you allow Screen Recording, it draws pictures of your menu bar icons, and only of those icons, to show them in its bar; the pictures are kept in memory and never saved or sent anywhere. RivetNotch never records your screen.

RivetCal sends calendar data only between your device and Google or Microsoft over encrypted HTTPS connections. When you remove an account in RivetCal, it deletes that account's locally cached calendar data and tokens; for Google accounts it also asks Google to revoke the connection. You can also revoke access from your Google Account permissions, your Microsoft account app permissions, or, for work and school accounts, My Apps. You can delete all remaining local app data by uninstalling the app and deleting its data folder.

4. Services the Apps connect to

The Apps connect directly from your computer to these services. We are not in the middle and cannot see the traffic.

• Google (RivetCal). When you connect a Google account, RivetCal uses Google sign-in and the Google Calendar API to list the calendars you can access; show, create, edit and delete events; add Google Meet links; show invitations and RSVP status; and check free/busy availability when you use its scheduling features. Google's Privacy Policy applies.
• Microsoft (RivetCal). When you connect an Outlook or Microsoft 365 account, RivetCal uses Microsoft sign-in and Microsoft Graph to read your name and email address; list your calendars; show, create, edit and delete events; add Microsoft Teams meeting links; show invitations and respond to them; and, for work and school accounts, check free/busy availability when you use its scheduling features. It asks only for the Calendars.ReadWrite and User.Read permissions, plus the sign-in permissions that keep it connected. Microsoft's Privacy Statement applies.
• WhatsApp (RivetChat). RivetChat loads WhatsApp Web from web.whatsapp.com. Your messages are handled by WhatsApp under its own Privacy Policy.
• GitHub (updates). To check for updates, the Apps download a small version file from GitHub. Like any web request, GitHub receives your IP address. No personal information is sent. GitHub's Privacy Statement applies.

5. Google user data

RivetCal's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. RivetCal uses Google Calendar data only to provide the calendar, event-management and availability features visible in the app. Google user data is stored only on the user's device as described above; it is not sent to our servers or shared with third parties. We do not sell it, use it for advertising, or use it to develop, improve or train generalized AI or machine-learning models. If we change how RivetCal accesses, uses, stores or shares Google user data, we will update this policy and obtain any required consent before using the data for that new purpose.

6. Microsoft user data

RivetCal uses data from Microsoft Graph only to provide the calendar, event-management, Teams meeting and availability features visible in the app. Microsoft account data is stored only on the user's device as described above; it is not sent to our servers or shared with third parties. We do not sell it, use it for advertising, or use it to develop, improve or train generalized AI or machine-learning models.

7. This website

rivetapps.store uses no cookies, analytics or advertising trackers and has no forms. It is hosted by Vercel, which, like any web host, processes basic technical information such as IP addresses in server logs to deliver and secure the site. See Vercel's Privacy Policy. Fonts are served by Google Fonts.

8. If you email us

If you email us, we receive your email address and whatever you choose to write. We use it only to reply to you and delete it when it's no longer needed.

9. Purchases

The Apps aren't on sale yet. When they are, payments will be handled by a payment provider, and we will update this policy before launch to explain what information that involves.

10. Children

The Apps are not directed at children under 13, and we don't knowingly collect information from anyone.

11. Your rights

Because we don't hold personal data about you, there is usually nothing for us to access, correct or delete. Your data is on your computer and with the services you connect (Google, Microsoft, WhatsApp), where you can manage it directly. If you have a question, we're happy to help.

12. Changes

If we change this policy, we'll update the date at the top of this page. If a change affects how the Apps handle Google user data, we will explain it clearly and obtain any required consent before using that data for the changed purpose.

13. Contact

Questions about privacy: apps@rivetapps.store.