Privacy Policy

?

This is a draft

This policy is pending legal review and may change before RideForm launches. It describes how the app is actually built, but it is not yet a final legal document.

The short version

The video stays on your phone. Still images taken from it, and the details you enter, are sent to our server and to Anthropic for analysis; one thumbnail is kept so your history has a picture.

We show no ads, run no analytics or tracking of any kind, and use no advertising identifiers. Deleting your account in the app permanently deletes everything we hold about you.

Who we are

RideForm is operated by RZ AI Labs (rzailabs.com). For anything in this policy, contact us at support@rzailabs.com.

What we collect

Account. You sign in with Apple or Google. We store only the anonymous subject identifier those services give us, plus a user ID we generate. We never store or request your email address or name from Apple or Google.

Rider profile. The rider name you enter (often a first name, and sometimes a child's), plus discipline, riding level, age band, and preferred language.

Per analysis. The horse name and location you type (these are free-text fields; we never access your device's location), the clip's duration, the settings used, one small thumbnail image, and the coaching feedback produced for you.

Purchases. Purchase events (which product, when), keyed to your user ID. Payment itself happens entirely through the App Store or Google Play, so we never see card numbers or billing details.

Technical. A sign-in session token (stored on our side only as a salted hash) and operational logs containing IDs, counts, timings, and error codes. Our logs never contain images or image data.

Your video and the still frames

This is the part that matters most, so here it is plainly:

Who else receives data

Anthropic (our AI analysis provider) receives the still frames together with the rider name, horse name, discipline, level, age band, context, and language you provided. That is what the analysis is made from. We do not send your account identifiers to Anthropic.

RevenueCat (purchase infrastructure) receives purchase events keyed to your user ID, so your credits arrive reliably and restore across devices.

Apple and Google are involved only in signing you in and processing payments on their own platforms, under their own terms.

That is the whole list. We use no analytics service, no advertising network, and no tracking SDK, and we never sell or share data for advertising.

Children

RideForm analyses riding videos, and the rider in a clip may be a child; the rider name entered may be a child's first name. If you are a parent or guardian, you control this data the same way as everything else: it is only ever used to produce the coaching feedback you asked for, and deleting the analysis or the account removes it. Accounts are created by the adult who signs in with their own Apple or Google identity.

Retention and deletion

Security

All traffic between the app and our server is encrypted in transit (TLS). Session tokens are stored on your device's secure keystore and on our side only as salted hashes. Still frames are never persisted, which removes the most sensitive data from what could ever be exposed.

Your choices

Changes to this policy

If this policy changes in a way that matters, we will update it here and note the new effective date. This draft has no effective date yet; the final version will state one.