Privacy Policy

Last updated: 16 August 2026

1. Who We Are

2. What Data We Collect

RizzArchitect is designed as an offline-first training app. We collect as little data as possible. Specifically:

2.1 Data you provide

• First name — entered voluntarily during onboarding. Stored only on your device (local database). Never transmitted to our servers.
• Journal entries, progress, FRED-Scores — stored only on your device. Never transmitted.

2.2 Data the app can collect automatically

Whether and from when this happens depends on your country and your decision — see 2.4. In both cases it is switched off with the same toggle in the app settings.

• Usage analytics (Firebase Analytics) — session length, feature usage, non-identifying device class. No personal content.
• Crash reports (Firebase Crashlytics) — app stacktrace + device model + Android version when the app crashes. No personal content. Used solely to fix bugs.
• Advertising ID and marketing events (Meta) — the Advertising ID (Google Advertising ID, GAID) is a resettable identifier for your device. We send it to Meta together with events such as "trial started" or "subscription purchased", so we can measure which ad brings new users to RizzArchitect. Under the GDPR the Advertising ID counts as personal data. You can reset or delete it at any time in your Android settings under "Privacy → Ads".
• Install source (Google Play Install Referrer) — read once on first launch and stored on your device. It contains the campaign identifier of the link you installed from — no device identifier and no personal data. This value is only transmitted while measurement is active.

2.3 Payment data

Subscriptions and one-time purchases are processed by Google Play Billing. We never see your payment method or bank data. We only receive a purchase-token from Google that confirms your entitlement. See Google's Privacy Policy.

2.4 When we ask and when we don't

This depends on where you are, because the law differs:

• In the EEA, the UK and Switzerland, nothing from 2.2 is collected or transmitted before you have explicitly agreed. A dialog appears on first launch. If you decline, everything stays switched off.
• In all other countries, a right to opt out applies instead of prior consent. There, measurement begins when you first open the app; you are informed about it on first launch.
• If your country cannot be determined reliably, we treat you as an EEA user — that is, with prior consent.

In both cases: you can turn collection off at any time in the app under Settings → "Usage data" — a single tap, with no follow-up question. From that moment nothing further is collected and nothing further is sent to Google or Meta.

2.5 This website

Everything above concerns the Android app. On rizzarchitect.com we use Microsoft Clarity to understand how the site is used — which sections people read, where they stop scrolling, which links they tap. Clarity records pseudonymised interaction data (page views, clicks, scroll depth, an approximate location derived from your IP address, browser and device type) and can replay it as an anonymised session recording. Text you type into fields is masked by Clarity before it is transmitted. We never receive your name, email address or any other direct identifier this way.

The same regional rule as in 2.4 applies: in the EEA, the UK and Switzerland Clarity stays switched off until you accept the banner. Your region is determined from your browser's time zone, which never leaves your device; if it cannot be matched to a country, we treat you as an EEA visitor and ask. In all other countries measurement runs by default and you can switch it off.

You can change your decision at any time via Privacy settings in the footer of every page — withdrawing is one click, exactly like accepting. We set no advertising cookies and run no marketing pixels here.

What is stored on your device: your decision itself, in your browser's local storage under ra_clarity_consent. That entry is the only reason we do not ask again, and it is written whether you accept or decline. If you accept, Clarity additionally sets its own cookies (currently _clck and _clsk) so that a returning visit can be recognised as the same session. If you decline, no Clarity cookie is set. Advertising cookies we never set, in either case.

No other third party is contacted. Fonts, images and scripts are served from our own server. Earlier versions of this site loaded its typefaces from Google Fonts, which transmitted your IP address to Google on every page. That was changed on 19 August 2026; the font files now sit on our own host and no request leaves for Google.

3. Legal Basis (GDPR Art. 6)

• Art. 6(1)(a) — Consent: Firebase Analytics, Firebase Crashlytics, and the transmission of your Advertising ID and marketing events to Meta. All three are tied to the same consent and stay completely switched off without it. You can withdraw at any time in the app settings; withdrawing is as easy as giving consent.
• Art. 6(1)(a) — Consent: Microsoft Clarity on this website (see 2.5). Without your acceptance Clarity is told not to use analytics storage. You can withdraw at any time via "Privacy settings" in the footer.
• Art. 6(1)(b) — Contract: Processing purchase data to deliver the subscription you bought.

For users outside the EEA, the UK and Switzerland, the respective national law applies. There, collection relies on the opt-out model — for example CCPA/CPRA in California — together with the switch-off described in 2.4.

4. Third Parties We Use

• Google LLC (Firebase Analytics, Firebase Crashlytics, Google Play Billing, Google Play Install Referrer). Data transfer to USA covered by the EU–US Data Privacy Framework. Google Privacy Policy.
• Meta Platforms Ireland Ltd. (Meta SDK for Android) — receives your Advertising ID and marketing events, with your consent, so we can measure how our ads perform. Data transfer to USA covered by the EU–US Data Privacy Framework. Meta Privacy Policy.
• Microsoft Corporation (Microsoft Clarity — on this website only, never in the app). Data transfer to USA covered by the EU–US Data Privacy Framework. Microsoft Privacy Statement.

No ads are shown inside the app. We run ads for RizzArchitect on Meta platforms and use the data above to measure whether they work. We do not serve you ads in the app, we do not sell your data, and we run no advertising pixels on this website. The website does use Microsoft Clarity for anonymous usage statistics — see 2.5.

5. How Long We Keep Your Data

• On-device data (first name, journal, progress) — as long as the app is installed. Deleted the moment you uninstall or use the in-app "Delete Account" function.
• Analytics events — Firebase default retention (14 months), then auto-deleted. Can be disabled anytime.
• Crash reports — Firebase default retention (90 days).
• Advertising ID and marketing events at Meta — per Meta's retention policy. We keep no copy ourselves. Resetting your Advertising ID in your Android settings breaks the existing link.
• Billing records — held by Google Play per their retention policy. We keep no copy.
• Website usage data (Microsoft Clarity) — held by Microsoft under their retention policy for Clarity; session recordings expire automatically. We keep no copy.

6. Your Rights (GDPR Chapter 3)

You have the right to:

• Access your data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data (Art. 17) — fastest path: uninstall the app or use the in-app "Delete Account" button
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21) — turn it off anytime in the app under Settings → "Usage data"
• Withdraw consent at any time (Art. 7(3))
• Lodge a complaint with a supervisory authority. For Italian residents: Garante per la protezione dei dati personali. For other EU residents: your national data protection authority.

To exercise any right, email us at webliongenova@gmail.com.

7. Data Deletion

Since nearly all data lives on your device, deletion is immediate:

• Open the app → Settings → "Delete Account" → confirm. All local data is wiped.
• Alternatively: uninstall the app.
• For Firebase Analytics/Crashlytics data stored in the cloud: email webliongenova@gmail.com with your device's install-instance ID (Settings → About). We will request deletion from Google within 30 days.
• For data sent to Meta: email the same address. You can also break the link yourself by resetting or deleting your Advertising ID in your Android settings under "Privacy → Ads".

8. Children

RizzArchitect is not directed at users under 18. We do not knowingly collect data from minors. If you believe a minor has provided data, contact us and we will delete it.

9. Changes to This Policy

We may update this policy to reflect changes to the app or the law. Material changes will be announced in-app before they take effect.

10. Contact