Privacy Policy

1. Who we are

Rafts is operated by Rafts, LLC, a Delaware limited liability company ("Rafts," "we," "us"). You can reach us at hello@rafts.app for any privacy question or request.

2. What we collect

When you create an account

• Email address
• If you use Sign in with Apple, a private relay email (we cannot see your real Apple ID email)
• Display name (optional)

When you set up your profile

• The niche you selected (e.g. Lifestyle, Fitness, Tech)
• Your preferred notification time
• Local time zone

When you use Rafts

• The video file or shareable link you submit for analysis
• The name you give a video (optional)
• A thumbnail image generated from the video
• The video's duration
• Content you upload to build a Skill (clips, captions)
• The AI-generated feedback and content Rafts produces
• Patterns Rafts identifies across your analyses

What we do NOT collect

• Audio recordings outside of your selected video
• Your camera roll, contacts, calendar, or location, beyond what you explicitly upload
• Advertising identifiers (IDFA). We don't run ads.
• Behavior on other apps or websites

Automatic information

• App version, OS version, device model, locale
• Anonymized usage events (e.g. "user opened Analyze tab")
• Crash reports including app state at the time of crash

Subscription information

If you subscribe to Rafts Pro, our payment processor (RevenueCat, with Apple In-App Purchase) handles your purchase. We receive only your subscription status, not your card details.

3. How we use what we collect

• To provide and improve the Rafts product
• To generate your video feedback and Patterns
• To send you notifications you opted in to
• To respond when you contact support
• To detect and fix bugs and crashes
• To prevent abuse and enforce our Terms

We do not use your data to train AI models. Your analyses are not used to improve Gemini, Claude, or any other model.

4. AI processing

When you use Rafts' AI features, content you upload or share (video files, captions, account data imported from TikTok) is processed by third-party AI providers — specifically Anthropic (Claude) and Google (Gemini) — to generate analysis and recommendations.

We do not store your raw uploaded video beyond the time needed to complete the analysis, unless you explicitly choose to retain it.

You can delete your uploaded content, imported account data, and your Rafts account at any time from Settings → Data → Delete.

5. Who we share data with

We share narrowly with service providers (sub-processors) that help us run Rafts. Each is contractually limited to what we need them to do.

• Supabase — database, authentication, storage, edge functions
• Google (Gemini API) — visual analysis of your video thumbnail and uploaded video file at analysis time
• Anthropic (Claude API) — writing your text feedback
• RevenueCat — managing your subscription
• Apple — In-App Purchase, Sign in with Apple
• Resend — sending welcome and transactional emails
• PostHog — anonymized product analytics
• Sentry — crash reporting
• Cloudflare — hosting our marketing website

We do not sell your personal information. We do not share your data for advertising. Both AI providers process data under their own privacy commitments; neither retains your content or trains models on it under their business-tier data terms.

We may also disclose information if required by law, or to protect the rights, safety, or property of Rafts or our users.

6. How long we keep data

• Account data: while your account is active, plus 30 days after deletion to handle billing reversals
• Analyses: as long as your account exists, unless you delete them. Deletion is permanent within 30 days.
• Crash logs and analytics: 90 days, then aggregated
• Backups: rolled off within 60 days

You can request faster deletion at any time (see Section 8).

7. How we protect data

• Data in transit: TLS 1.2+
• Data at rest: AES-256 (Supabase default)
• Access: row-level security on every table — you can only read and write your own rows
• Apple Sign-In uses a private relay; we never see your real email if you choose that option

No system is perfectly secure. If we ever experience a breach that affects you, we will notify you without undue delay and within the timeframes required by applicable law.

8. Your choices and rights

You can, at any time:

• Access and download all your data (Settings → Export)
• Correct your profile information (Settings → Profile)
• Delete individual analyses (swipe in Library)
• Delete your entire account (Settings → Delete account)
• Turn off notifications (Settings → Notifications, or iOS Settings)
• Opt out of analytics (Settings → Privacy → Analytics off)

EU / UK (GDPR)

You also have the right to object to processing, restrict processing, request data portability (we provide JSON export), withdraw consent at any time, and lodge a complaint with your supervisory authority.

Legal bases: Contract (to provide the service), Legitimate interests (to improve and secure the service), Consent (for optional notifications and analytics), Legal obligation (to comply with laws).

California (CCPA / CPRA)

You have the right to know what we collect, delete what we have, correct inaccurate information, and opt out of sale or sharing (we do neither, but the right exists). We will not discriminate against you for exercising these rights.

9. Children

Rafts is not directed at children. You must be at least 13 years old to use Rafts (16 in some jurisdictions where local law requires). If we learn we've collected information from a child under the applicable age, we'll delete it.

10. International transfers

Rafts, LLC is registered in Delaware, United States. Some of our service providers (Supabase, Google, Anthropic, Cloudflare, Apple) operate globally. When data is transferred outside your region, we rely on Standard Contractual Clauses or equivalent safeguards.

11. Changes

If we change this policy materially, we'll notify you in the app and update the date above. Continued use after a change means you accept the updated policy.

12. Contact

Questions, requests, or concerns: hello@rafts.app

Rafts, LLC — Delaware, United States