Last updated September 22, 2026

Privacy

Riviera has no accounts and no tracking. Here is exactly what happens to a voice you check, including the parts we don’t control.

The short version

Riviera has no accounts. Instead it signs you in anonymously, through Google’s Firebase, with a random ID that isn’t linked to you — used only to keep things fair and stop misuse, like rate limits.
To check a voice, Riviera sends the sound over an encrypted connection through Riviera’s own server to our checking partner, Modulate. Riviera’s server doesn’t store the sound — it passes through memory only.
Nothing is sent until you agree, the first time you open Riviera.
When you listen live, the Live switch starts on, so what the microphone hears goes the same way, as it happens. Details below.
Riviera deletes its copy from your phone as soon as you close the result. Your original recording is never touched.
Modulate’s own terms let it keep a recording for up to 35 days and use it to improve its AI. Details below.
Riviera AI is a subscription that Apple bills. Riviera’s server keeps only what it needs to count your hours — never your name, email or card. Details below.
Before checking a voice, Riviera asks Apple to confirm the app is genuine. No personal information is involved.
No analytics, no advertising, no tracking.

What happens to a recording

You share a recording or video to Riviera, or pick it in the app. Riviera makes its own copy in a private folder that is never backed up. From a video, only the sound is used.
Riviera sends the sound over an encrypted connection through Riviera’s own server to Modulate. Riviera’s server doesn’t store the sound — it passes through memory only. Modulate tells Riviera which parts sound AI-generated.
You see the result. The recording and the result exist only while that screen is open.
You close it, and Riviera deletes its copy. If you leave a result open, it’s deleted the next time you open Riviera on a later day.

Riviera keeps no history. The only way to keep a result is to share its report yourself. The report is a picture and contains no sound.

When you listen live

Riviera never listens in the background, and it can’t listen to a call on this iPhone; iPhone doesn’t allow that. Hold your phone near the voice instead, like a call on speaker on another phone.

Live switch on (the default): what the microphone hears is sent over an encrypted connection through Riviera’s own server to Modulate as it happens, so Riviera can tell you while you’re still listening. Riviera’s server doesn’t store it — it passes through memory only. It’s deleted from your phone the same way as a recording.
Live switch off: Riviera only records. Nothing leaves your phone until you tap Stop. Then the recording is checked and deleted exactly like a shared one.

What our checking partner does

Modulate checks the sound under its own terms, which we don’t control. As of the date above, Modulate’s Velma Platform Terms say:

“User Content (uploaded audio files) and analysis outputs are not retained at all for standard API usage unless storage is intentionally opted into by the end user, but where required for platform usage, unless another duration has been configured by the end user, they are retained for thirty-five (35) days from the date of upload or processing, after which they are permanently deleted.”

“If you are a member of the Model Improvement Program, Modulate may use your User Content to train, develop, and improve its artificial intelligence models and algorithms.”

Riviera uses Modulate’s self-service platform, which Modulate’s terms enroll in the Model Improvement Program automatically. So a recording you check may be kept by Modulate for up to 35 days, and may be used to train and improve Modulate’s AI. Modulate says it does not sell personal data. See Modulate’s privacy policy.

Other people’s voices

A recording may include someone else’s voice. Only check recordings you have the right to share.

What Riviera doesn’t collect

No name, email, phone number, contacts, or location. No analytics or crash-reporting services. Riviera signs you in anonymously with a random ID, used only to keep things fair and stop misuse, like rate limits — it isn’t linked to you. For the subscription, Riviera’s server keeps only the purchase numbers and dates, the seconds you’ve used, and the number of checks and listens; never your name, email, Apple Account or card. The app stores a few settings on your phone, such as whether you’ve agreed to the welcome screen and whether the Live switch is on. None of them is data about you.

Subscription

Riviera AI costs $5.99 a month after a one-week free trial, and includes 10 hours of checking and listening each month. Need more? An extra hour is $1.99, and bought hours never expire — you can use them any month you’re subscribed.

Apple handles payment. Your iPhone sends Riviera’s server Apple’s signed record of the purchase, and the server keeps only the purchase numbers and dates, the seconds you’ve used, and the number of checks and listens — never your name, email, Apple Account or card.

Each month’s usage record is deleted after 400 days. The record of each bought hour is kept so it can only be counted once.

This app asks Apple to confirm it’s genuine

Before Riviera’s server checks a voice, it asks Apple to confirm the request really comes from the genuine Riviera app running on a real iPhone. This uses Apple’s App Attest, checked through Google’s Firebase, and involves no personal information.

This website

No cookies, no analytics, no trackers, and nothing loaded from anyone else.

Children

Riviera isn’t directed at children under 13.

Changes

If anything here changes, we’ll update this page and the date at the top.