Privacy Policy

1. Information We Collect

Account Information. When you create an account, we collect your name, email address, and password (stored encrypted). If you sign in via Google or Apple, we receive your name and email from those providers.

User Content. We collect content you generate through the Services, including chat conversations with our AI assistant (Morpheus), research reports you generate, agent strategies you configure, watchlists, market preferences, and customer support inquiries.

Subscription and Billing Information. If you purchase a paid tier, our payment processor (Stripe) collects payment information directly. We do not store full payment card numbers. We receive limited information including subscription status, plan tier, and the last four digits of your payment method.

Usage Data. We collect information about how you interact with the Services, including pages and features accessed, time spent, click patterns, search queries, and combined engagement metrics.

Diagnostic Data. We collect crash logs, performance metrics, error reports, and other technical diagnostic information to identify and fix issues.

Device and Log Data. We automatically collect device identifiers, IP address, browser type, operating system, mobile network information, referring URLs, and similar log data.

Cookies and Similar Technologies. We use cookies and similar technologies to keep you signed in, remember your preferences, understand usage patterns, and improve the Services. You can control cookies through your browser settings.

2. How We Use Your Information

We use information we collect to:

• Provide, operate, and maintain the Services
• Authenticate users and secure accounts
• Process subscriptions and payments
• Personalize content, including market recommendations and AI agent outputs
• Send transactional emails (account confirmations, password resets, billing notices)
• Send product updates, market alerts, and marketing communications (you can unsubscribe at any time)
• Provide customer support
• Analyze usage patterns to improve features and performance
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We share information only as described below:

Service Providers. We share information with vendors that help us operate the Services, including:

• Supabase (database and authentication infrastructure)
• Lovable AI Gateway, and through it Google and OpenAI (AI features including Morpheus, AI Agents, Research Reports, and AI-generated briefings)
• Stripe (payment processing)
• Cloud hosting and content delivery providers
• Email delivery providers
• Analytics and crash reporting providers

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

Prediction Market Platforms. We analyze publicly available pricing from third-party prediction market platforms to compute our own derived measures. We are not affiliated with, endorsed by, or partnered with any venue. We do not share your personal information with these platforms.

Legal Compliance. We may disclose information to comply with applicable laws, regulations, legal process, or government requests, or to protect the rights, property, or safety of RiddleAI, our users, or others.

Business Transfers. If RiddleAI is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.

With Your Consent. We may share information for other purposes with your consent.

4. AI features and third-party processing

Our AI features (Morpheus, AI Agents, Research Reports, and AI-generated briefings) are powered by the Lovable AI Gateway, a third-party AI service. The Gateway processes your request using Google's Gemini models, and OpenAI's models as a fallback.

What we collect for these features: the text of the questions and messages you submit to an AI feature, and the prediction-market context associated with your request.

How we collect it: directly from you, at the moment you use an AI feature, after you have granted in-app permission.

How we use it: solely to generate and return AI responses to you. We do not use these inputs for advertising or to build user profiles.

Who we share it with and protection: we transmit this data to the Lovable AI Gateway and its underlying model providers (Google and OpenAI) only to generate your response. These providers process the data under agreements requiring confidentiality and data-protection standards equivalent to those described in this policy. We do not share your account credentials or payment information with them.

You may withdraw permission for AI features at any time in the app's Settings.

5. AI and Machine Learning

Our AI features, including Morpheus and Research Reports, process your queries and conversation history to generate responses. Queries are sent to the Lovable AI Gateway and its underlying model providers, Google and OpenAI, for processing. Conversation history is stored in your account and you can delete it at any time.

6. Data Retention

We retain account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, accounting, or security purposes.

Diagnostic data is typically retained for up to 90 days. De-identified and summarised data may be retained indefinitely for analytics purposes.

7. Security

We implement reasonable technical and organizational measures to protect your information, including encryption in transit (TLS/HTTPS), encryption at rest, access controls, and security monitoring. No system is perfectly secure. You are responsible for keeping your account credentials confidential.

8. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, including:

• The right to access the personal information we hold about you
• The right to correct inaccurate information
• The right to delete your personal information
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent at any time

To exercise these rights, contact us at hello@getriddle.ai. We will respond within the timeframes required by applicable law.

California Residents (CCPA/CPRA). California residents have additional rights, including the right to know what personal information we collect, the right to delete personal information, the right to correct personal information, and the right to opt out of the sale or sharing of personal information. We do not sell personal information.

European Residents (GDPR). If you are located in the European Economic Area, United Kingdom, or Switzerland, our legal basis for processing your personal information includes performance of a contract, our legitimate interests, your consent, and compliance with legal obligations.

9. International Data Transfers

We are based in the United States. If you access the Services from outside the United States, your information will be transferred to, stored in, and processed in the United States. By using the Services, you consent to this transfer.

10. Children's Privacy

The Services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected information from a child under 16, we will delete it. If you believe a child has provided us with personal information, please contact us.

11. Third-Party Links

The Services may contain links to third-party websites or services. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third party you interact with.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Material changes will be communicated through the Services or by email.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

RiddleAI Inc.

Email: hello@getriddle.ai