Privacy Policy

Effective: July 6, 2026  ·  Last updated: July 28, 2026

Meet Riley is a place people come to rebuild - often at a vulnerable moment. We treat the information you share with the care that deserves. This policy explains what we collect, why, and the control you have over it.

1. Who we are

Meet Riley ("Riley," "we," "us") is a product of The 814 Project, LLC (d/b/a Riley). When you use our website and app at meetriley.us and its subdomains (the "Service"), The 814 Project, LLC is the controller responsible for your information.

2. Information we collect

We collect only what we need to give you a personalized, supportive experience.

Information you give us

• Account details - your name and email, provided when you sign in with Google.
• Wellness inputs you choose to share - for example a sobriety or start date, daily check-ins, mood and well-being responses, journal entries, program progress, and goals.
• Conversations with Riley - the messages you send and Riley's replies, so your history and context carry across sessions.
• Support and billing details - messages you send us and, if you subscribe, information needed to process payment (handled by our payment processor - we do not store full card numbers).

Information collected automatically

• Usage and device data - pages viewed, features used, approximate location derived from IP, browser and device type, and similar analytics, used to keep the Service working and improve it.
• City-level location (optional, off by default) - if you choose to share it, we store only your city and use it to add a little warmth to Riley's check-ins (weather, seasons). It is never used in your Clarity score, never sold, and you can turn it off or clear it anytime in Settings.
• Cookies and local storage - used to keep you signed in and remember preferences.

Wearables and health devices (optional, off by default)

If you choose to connect a device such as WHOOP or an Oura ring, we read a small, fixed set of daily readings: how long you slept and how settled that sleep was, a recovery or readiness score, heart-rate variability, resting heart rate, breathing rate, daily exertion, and minutes of movement or exercise. That is the whole list. We do not read continuous heart rate, location, journal entries, blood pressure, lab results, or anything you write in the device's own app.

Nothing is connected unless you connect it. You are shown exactly what you are agreeing to on the device maker's own consent screen, and we ask for the narrowest set of permissions that makes the feature work.

Riley uses these readings as context in conversation - so she is not asking how you slept on a morning you barely did. She does not report your numbers back to you, does not score or rank your days, and does not use them to diagnose anything or suggest a medical condition. Riley is not a medical device and this is not medical advice.

These readings are never used in our safety systems. They do not feed crisis detection, they do not affect sober-day counting, and they never trigger a message to you on their own. A hard night is never treated as a warning sign about you.

You can disconnect at any time from Integrations. Disconnecting revokes our access with the device maker and deletes the readings we have stored - not just the connection. Your access tokens are encrypted while we hold them and are never shown to anyone, including you.

3. Sensitive information

Because Riley supports recovery, grief, and well-being, some of what you share may feel deeply personal or health-related. You decide what to share. We use this information only to provide and personalize the Service for you, and we never sell it. Where required by law, our use of this information is based on the consent you give by choosing to provide it.

This includes readings from a wearable device, if you connect one. Those are health data and we treat them that way: opt-in only, never sold, never shared, never used to train AI models, never used for advertising, and deleted along with the connection the moment you disconnect. See Wearables and health devices above for exactly what is read.

4. How we use your information

• To provide the Service and personalize Riley's guidance to you.
• To remember your history, progress, and preferences across sessions and devices.
• To keep you safe - including recognizing when you may need crisis resources.
• To operate, secure, troubleshoot, and improve the Service.
• To process subscriptions and send Service-related messages.
• To comply with legal obligations and enforce our terms.

5. AI and your conversations

Riley's responses are generated using a large language model provided by Anthropic. To answer you, the content of your conversation is sent to Anthropic's API for processing and returned to you. Under Anthropic's commercial API terms, your inputs and outputs are not used to train their models. We do not use your conversations to build advertising profiles, and we do not sell your data.

Google Calendar (optional)

If you choose to connect your Google Calendar, Riley reads your same-day events to time supportive check-ins and compose your daily brief. Riley's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data is used only to provide visible features you choose - timing your brief and check-ins - and is never stored beyond a short-lived cache, never sold, never shared, never used for advertising, and never used to train AI models. You can disconnect at any time in Account, which revokes Riley's access at Google and deletes the cached summary.

6. When we share information

We share information only in these limited situations:

• Service providers who process data on our behalf under contract - including our database and authentication host (Supabase), AI provider (Anthropic), sign-in provider (Google), product analytics (PostHog), payment processor (Stripe), transactional email (Resend), and site hosting (Netlify).
• Legal reasons - to comply with law, respond to lawful requests, or protect the rights, safety, and property of you, us, or others.
• Business transfers - if The 814 Project, LLC is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction, subject to this policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

One gentle feature worth naming plainly: the member homepage can show how many members are present on a given night ("the porch lights"). Riley shows how many members are present - never who. The count is anonymous and aggregate, small groups are never broken out, and you can turn your own counting off anytime in Account settings ("Count me on the porch").

7. How long we keep it

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete your personal data - your conversations, check-ins, memories, Life Map, dates, scores, any readings from a connected device, and everything else tied to your account. We may also retain information as required by law.

Safety and crisis records

There is one narrow exception, and we want to be plain about it. If, during your time with Riley, a moment occurred where our safety systems stepped in - for example, a conversation that triggered our crisis support flow - a limited record of that event may be kept after you delete your account. If it is kept, it is de-identified: once your account and profile are deleted, the record is no longer linked to your name, email, or any way of identifying you. These records exist only for safety and legal accountability, are never used for anything else, and are removed within about twelve months. If no safety event ever occurred, nothing is kept - deleting your account deletes everything.

8. Your rights and choices

You are in control of your data. From your account settings you can access, export, or permanently delete your information at any time. Depending on where you live, you may also have rights to correct your data, object to or restrict certain processing, and to appeal a decision - and to do so without discrimination. To exercise any of these rights, use the in-app controls or contact us below.

Some controls are specific: your city can be cleared on your profile, a connected calendar can be disconnected from Account, and a connected wearable can be disconnected from Integrations - which also deletes the readings it produced.

9. Security

We use technical and organizational safeguards - including encryption in transit, access controls, and reputable infrastructure providers - to protect your information. No system is perfectly secure, but we work to protect your data and to respond promptly if something goes wrong.

10. Children

The Service is intended for adults 18 and older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. When you create an account, we ask for your date of birth to confirm you are 18 or older. For accounts created on or after July 23, 2026 we keep your date of birth on your profile so Riley can know your age without ever asking twice - it is never used in your Clarity score, and you can delete it anytime by deleting your account data. If we deny an account at the age gate, we keep only the fact of the denial, never the date of birth. If you believe a child has provided us information, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of the Service after an update means you accept the revised policy.

12. Contact us

Questions about your privacy, or want to exercise your rights? Reach us at:

The 814 Project, LLC d/b/a Riley
Email: support@meetriley.us