Privacy Policy
Last updated: April 5, 2026
1. Information We Collect
We collect the following types of information:
- Account Information: Name, email address, and hashed password when you register
- Usage Data: Pages visited, features used, session duration, and frequency generation history
- Session History: Frequency protocols used, AI query history, and saved presets
- Device Information: Browser type, operating system, and screen resolution
- Log Data: IP address, access times, and referring URLs
2. How We Use Your Information
- Account Management: To create and maintain your account and subscriptions
- Service Delivery: To provide frequency generation, AI-powered protocol discovery, and session recording
- Analytics: To understand usage patterns and improve the platform
- Service Improvement: To enhance features, fix issues, and develop new functionality
- Communication: To send account-related notifications and, with consent, product updates
3. Cookies and Tracking
We use the following cookies and tracking technologies:
- NextAuth Session Cookie: Essential cookie for authentication (strictly necessary)
- Google Analytics: Performance and usage analytics (can be disabled)
You can control cookie preferences through your browser settings. Disabling essential cookies may prevent you from using the Service.
4. Third-Party Services
We share data with the following third-party services:
- Google Analytics: Anonymized usage data for platform analytics
- Anthropic (Claude AI): AI queries are processed by Anthropic's API. Query content is sent to Anthropic for processing but is not used to train their models per our data processing agreement.
- Payment Processor: Payment information is handled directly by our payment processor and is never stored on our servers
5. Data Retention
We retain your account data for as long as your account is active. Session history and usage data are retained for up to 24 months. Upon account deletion, personal data is removed within 30 days, though anonymized analytics data may be retained indefinitely.
6. Your Rights
Depending on your jurisdiction, you may have the following rights:
GDPR Rights (EU/EEA Residents)
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a machine-readable format
- Restriction: Restrict processing of your data
- Objection: Object to processing based on legitimate interests
CCPA Rights (California Residents)
- Know: Know what personal information is collected
- Delete: Request deletion of personal information
- Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
- Non-Discrimination: Not be discriminated against for exercising your rights
To exercise any of these rights, contact us at privacy@rifecore.com. We will respond within 30 days.
7. Data Security
We implement industry-standard security measures including encryption in transit (TLS), hashed passwords (bcrypt), and access controls. However, no method of electronic transmission or storage is 100% secure.
8. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately at privacy@rifecore.com.
9. International Data Transfers
Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.
10. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notification. The "Last updated" date at the top indicates the most recent revision.
11. Contact Us
For privacy-related inquiries, contact us at privacy@rifecore.com.