Privacy Policy

Who we are

Riali is a nutrition guidance app for athletes and active people, operated by Simani Abuyu Regau, based in Nairobi, Kenya. We are the data controller for the information described here. Contact us at team@riali.app.

What we collect

• Your account: your email address, your password (stored encrypted, so we never see it), and the date you confirmed you are 18 or over.
• Your profile: your event or activity level, your training answers, your bodyweight, your height, your sex (you can choose "Prefer not to say") and your date of birth. We need these to work out your daily energy estimate.
• Your week: the session or kind of day you set for each day in My week. We use it to work out that day's plates and your Market suggestion.
• Your training logs: what you log for each day in My week: whether it was a rest day, what you did (for example upper body, sprints or a class), how long it took, how hard it felt (easy, moderate, hard or all out) and, if you choose to add them, each exercise with its sets, repetitions and weight, and each run with its distance, repetitions, times and rest. We use them to show you your own numbers back, your streak and your Diary, and when you share your week. There's no space for notes, and we don't ask about injuries, pain or your health.
• Signing in with Google: if you sign in with Google, Google gives us your name, email address and profile picture.
• Phone reminders: if you turn on reminders on your phone, we keep the address your phone's browser gives us for sending them, and the reminders and times you choose. They're delivered through Google's or Apple's notification service. Turn reminders off and we delete the address.
• Your meal logs: for each of today's meals on Meals, whether you had the meal shown, had something else (and which dish, if you pick one) or skipped it. We use them, with your training logs, to show your week on Meals, your consistency rewards and your Diary. We don't ask how much you ate, how it felt or about your health.
• Health information: your allergies and the foods you avoid, your daily check-ins from before 16 October 2026 (we no longer collect new ones), anything you wrote in "What did you eat today?" before it was removed, and any supplements you select.
• Your sign-up answers about your routine: see the next section.
• Visits: we count visits to our website and app with Cloudflare Web Analytics: which pages are opened, how often, and the kind of device, browser and country they're opened from. It sets no cookies and can't tell who you are.
• Error reports: when something in Riali breaks, the app sends us what went wrong, the page, the version of Riali and your type of device and browser, so we can fix it. It doesn't include your account, name, email or anything you entered. We delete error reports after 90 days.
• Help improve Riali: if you switch on 'Help improve Riali', we note which parts of Riali you use and when (for example opening Meals, logging training or asking RiRi), never what you wrote in them, and we may look at your logs and supplement choices, to make the guidance better. Your name and email are never part of this. Switch it off and we stop, and delete what we noted.
• Payments: handled by Paystack. We keep a record that a payment happened: our reference, the plan, the amount, the date, how you paid (card or M-Pesa) and Paystack's transaction number. We never see or store your card or M-Pesa details.
• Location: if you use Near Me, your device's location is used on your device to sort places by distance. We do not store your location. Our map provider, Mapbox, receives the area shown on the map. You can choose an area manually instead.

What we ask when you sign up, and why

To build your plan. Your sex, date of birth, height and weight set your daily energy estimate. Your event, or your activity levels if you are recreational, sets the starting layout of your week, which you can change day by day in My week. The foods you avoid and your allergies decide which foods your meal plans leave out. If you are an athlete, your season stage powers the "Still in…?" reminder.

Shown back to you. Your goals, and any other event you train for, appear on your Profile. They do not change your plan.

To get to know you. We also ask about your training days, weekly budget, who shops and cooks, where you buy food, when you train, how many meals you eat, how often you eat out, how you like to track, how planning feels, any past help with food, and what would help you most. No feature uses these answers yet. We keep them so Riali can fit you better as it grows. We will tell you before they are used for anything new.

Your history of answers. When you change one of these answers, we keep a dated note of the change, so Riali can later show how your answers shift over time. Only you can see it. Nothing in the app reads it yet. It is deleted with your account.

Why we collect it

• To give you your daily guidance, shopping list and reminders — the service you signed up for.
• To manage your account and your access to paid features.
• To keep Riali secure and working.
• With your separate, optional permission, to understand how Riali is used and improve it.

Your health information, and your sex, are sensitive personal data under Kenya's Data Protection Act, 2019. We process them only with your explicit consent, which you give at sign-up and can withdraw at any time by deleting your account.

Where your information is stored

Riali's database is hosted by Supabase on servers in the United Kingdom. Your information, including your health information, is therefore stored outside Kenya. We ask for your explicit consent to this when you sign up, and our hosting provider is contractually required to protect it with appropriate security measures. The emails Riali sends, any problem report you send us and the error reports above go through our email provider, Resend, in Ireland.

Who we share it with

We do not sell your information. We share only what is necessary with: Supabase (database hosting, United Kingdom), Paystack (payments), Mapbox (maps), Resend (the emails Riali sends, such as sign-up and password emails and the problem and error reports; Ireland), Cloudflare (the website, counting visits, and passing on email sent to our address), Google's and Apple's notification services (phone reminders, if you turn them on), Google (our email inbox) and, if you use RiRi, with Anthropic (see "RiRi, the AI helper" below). Our website, hosting and map providers (Cloudflare, Supabase and Mapbox) also see the usual connection details, such as an IP address, in their own server logs. We may disclose information where Kenyan law requires it.

Google user data

If you choose to sign in with Google, Google shares your name, email address and profile picture with Riali, and nothing else: we don't ask for your contacts, calendar, files or any other Google data. We use them only to create your account, sign you in and show your name in the app. We don't sell them, don't use them for advertising, and don't share them with anyone except the services that run Riali for us, listed above. They're kept with your account and deleted when you delete your data. Riali's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you report a problem

If you use "Report a problem" in the app, we receive what you write, your email address, the page you were on, which version of Riali you were using and your type of device and browser. We use it only to fix the problem and reply to you. It is stored with your account and emailed to Riali's inbox, and "Delete my data" removes it from our database with everything else. A copy also stays in our email inbox: email team@riali.app and we will delete it.

RiRi, the AI helper

If you ask RiRi to log a day or a meal for you, she shows you what she'll save and saves nothing until you tap Save. What she saves is kept like the logs you make yourself.

If you use RiRi, your question, the recent messages in that conversation and the parts of your profile needed to answer are sent to Anthropic, which provides the AI model behind RiRi. Anthropic processes this outside Kenya, under its own privacy terms. Your questions are not used to train any AI model.

We do not keep your RiRi conversations on our servers — they stay on your device. If you turn on "Let RiRi know you", the short notes RiRi keeps about you are stored with your account, and you can read or delete them at any time in Profile. "Delete my data" removes them with everything else.

RiRi is only available on a paid plan. The full description of what it is and what it cannot do is in the Terms of Service.

How long we keep it

For as long as your account is open. When you delete your account, your personal information is deleted straight away once you confirm. Copies in our backups are overwritten on a regular cycle, within 7 days.

We keep one thing after deletion: a record of each payment (reference, plan, amount and date) with your name, email and account removed. Kenyan tax law may require us to hold payment records for five years.

Paystack, our payment provider, keeps its own record of your payments for as long as it needs to provide its services and meet its own legal obligations, under its own privacy policy. Deleting your Riali account does not delete anything at Paystack.

Your rights

Under the Data Protection Act, 2019 you have the right to be informed of how your data is used, to access it, to correct it, to delete it, to object to how it is processed, and to receive a copy in a portable form. To use any of these, email team@riali.app. We respond within 30 days. If you are unhappy with our response you may complain to the Office of the Data Protection Commissioner at odpc.go.ke.

Age

Riali is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If we learn that we have, we delete it.

Cookies and similar technologies

Riali sets no cookies, and neither does the way we count visits. It keeps your sign-in and a few settings on your device so the app works. If you open Near Me, Mapbox's map also stores a small identifier on your device.

Changes

If we change this policy in a way that affects you, we will tell you in the app before the change takes effect.