Riia — Privacy Policy

Effective 7 July 2026

Riia ("Riia", "we", "us") is a mobile app that helps you track your skin over time — with photos, quick daily check-ins, a diary, and AI-assisted insights. We take the privacy of your skin and health information seriously. This policy explains what we collect, why, who we share it with, and the choices you have.

Riia is operated by Maria Fitzpatrick. If you have any questions, contact us at maria@pinnlo.com.

1. Information we collect

Information you give us

Account details — your email address, used to create and sign in to your account.
Skin photos — pictures you take or upload to track and analyse your skin.
Skin & health inputs — the condition/concern you choose, your daily skin ratings, diary entries, notes, goals, routines, and any medications or triggers you log. Some of this is health-related data and we treat it as sensitive.
Voice recordings — if you use voice features, the audio you record and its transcription, used to turn what you say into diary entries and replies.

Information collected automatically

Approximate location — used only to fetch local weather (temperature, humidity) that may affect your skin. You can decline the location permission and the rest of the app still works.
Diagnostics & usage — crash reports and basic usage analytics to keep the app working and improve it. We configure these tools to redact personal identifiers.

2. How we use your information

To provide the core app: store your photos, logs and diary, and show your history and trends.
To generate AI-assisted insights — analysing your photos and the text you log to describe what your skin may be doing and surface possible patterns.
To fetch local weather relevant to your skin.
To send notifications you’ve enabled (e.g. reminders).
To fix bugs, prevent abuse, and improve the app.

We do not sell your personal information, and we do not use your skin photos or health data to show you advertising.

3. Who we share it with

We use a small number of trusted service providers ("subprocessors") to run Riia. They process your data only to provide their service to us:

Provider	What it handles	Why
Supabase	Your account, logs, diary, and stored photos	Secure database, authentication, and file storage
Anthropic (Claude)	Your skin photos and logged text, when insights are generated	AI analysis of images and text
Weather provider (e.g. Open-Meteo)	Approximate location / coordinates	Local temperature & humidity
ElevenLabs	Voice audio & transcripts (only if you use voice)	Speech features
Sentry	Crash diagnostics (identifiers redacted)	Detect and fix crashes
PostHog	Usage analytics (identifiers redacted)	Understand and improve the app

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and Riia.

4. Storage & security

Your data is stored on our providers’ secure infrastructure and transmitted over encrypted connections. Access to your account data is restricted to you (via row-level security) and to the limited processing described above. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your information.

5. Retention & deletion

We keep your information for as long as your account exists. You can delete your account at any time from within the app (Profile → delete account), which removes your personal data from our systems. Backups and legally required records may persist for a limited period before being overwritten.

6. Your rights & choices

Access & export — request a copy of the data associated with your account.
Correction — edit your logs, diary, and profile in the app at any time.
Deletion — delete individual entries, or your whole account, in the app.
Permissions — camera, microphone, photos, location and notifications are all optional and controllable in your device settings.

Depending on where you live (e.g. UK/EU GDPR, California CCPA), you may have additional rights over your personal data. Contact us to exercise them.

7. Children

Riia is not directed to children under 16, and we do not knowingly collect data from them. If you believe a child has provided us information, contact us and we will delete it.

8. Not a medical service

Riia is a personal tracking and information tool. It is not a medical device and does not provide diagnosis or treatment. Its insights are informational and are not a substitute for professional medical advice. Always consult a qualified clinician about your skin.

9. International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.

10. Changes to this policy

We may update this policy from time to time. We’ll change the “Effective” date above and, for material changes, notify you in the app.

11. Contact

Questions or requests: maria@pinnlo.com.
Governing law: United Kingdom.