Privacy

Joining the waitlist is not the same as signing up for Rilo, and it does not start any text messages. Until early access opens and you separately opt in, we do not text you.

• Your email address. Required, because it is how we tell you when early access opens.
• Your phone number, if you chose to give one. Optional. We hold it so we can text you the invite instead of emailing it, and for nothing else until you opt in to messages.
• What you said you would use Rilo for, if you answered. Optional, free text, and used only to decide what to build and who to invite first.
• Roughly where the signup came from: a ?ref= value on the link, or the fact that you arrived from another site. No cookies, no advertising identifiers, no third-party tracking script.

We do not sell this list, share it, or use it for anything other than opening early access. To be removed, email hey@userilo.com and we delete your row within 30 days.

• Your phone number. It is how we text you and how we know which account is yours.
• The messages between you and Rilo, in both directions.
• The commitments we create from those messages: the title, the deadline, the kind of proof, and whether you kept it.
• Proof you send us: photos, screenshots, links, or text.
• A small behavioural summary: your completion rate, your current streak, patterns like which days you tend to miss, and the reasons you have given for missing.
• Your settings: tone, check-in frequency, quiet hours, timezone.
• Basic product analytics such as page views and whether a commitment was created. These are not tied to your messages.

We use it to run the product: to text you, to decide when a check-in is useful, to judge whether your proof supports what you committed to, and to make Rilo sound like it remembers you.

We do not sell your data. We do not share it with advertisers. We do not build profiles for anyone else.

Rilo runs on a small number of vendors, and each one only gets what it needs to do its job:

• Twilio delivers the text messages, so it processes your phone number and message contents.
• Anthropic processes message text and proof images so Rilo can write replies and judge proof. It is not used to train models on your data under our API terms.
• Supabase stores the database and proof images.
• Vercel hosts the app and its server logs.

We may also disclose data if the law requires it, or to protect someone from harm. If Rilo is ever acquired, your data moves with it and this policy travels along until it is replaced by one you are told about.

Proof images are stored privately. They are never publicly readable, and the app shows them through short-lived signed links. You choose what to send: if a photo would show something you do not want us to hold, send a different one or use text instead.

Messages, commitments, and proof stay until you delete your account. Magic link tokens are single use and expire. Server logs roll off on our host’s normal schedule.

Text STOP at any time and Rilo stops texting you. To delete everything, email hey@userilo.com from the address you want us to reply to, and include the phone number on the account. We delete the account, its commitments, its messages, and every proof image within 30 days, and confirm when it is done.

Depending on where you live you may also have the right to ask what we hold about you, to get a copy, or to correct it. Same address, same turnaround.

Rilo is for people 18 and over. We do not knowingly collect data from children.

If we change this in a way that matters, we will say so on this page and, when it is significant, in a text.