Privacy Policy

Effective: July 6, 2026  ·  Last updated: August 2, 2026

Meet Riley is a place people come to rebuild - often at a vulnerable moment. We treat the information you share with the care that deserves. This policy explains what we collect, why, and the control you have over it.

1. Who we are

Meet Riley ("Riley," "we," "us") is a product of The 814 Project, LLC (d/b/a Riley). When you use our website and app at meetriley.us and its subdomains (the "Service"), The 814 Project, LLC is the controller responsible for your information.

2. Information we collect

We collect only what we need to give you a personalized, supportive experience.

Information you give us

• Account details - your name and email, provided when you sign in with Google.
• Wellness inputs you choose to share - for example a sobriety or start date, daily check-ins, mood and well-being responses, journal entries, program progress, and goals.
• Conversations with Riley - the messages you send and Riley's replies, so your history and context carry across sessions.
• Support and billing details - messages you send us and, if you subscribe, information needed to process payment (handled by our payment processor - we do not store full card numbers).

Information collected automatically

• Usage and device data - pages viewed, features used, approximate location derived from IP, browser and device type, and similar analytics, used to keep the Service working and improve it.
• City-level location (optional, off by default) - if you choose to share it, we store only your city and use it to add a little warmth to Riley's check-ins (weather, seasons). It is never used in your Clarity score, never sold, and you can turn it off or clear it anytime in Settings.
• Cookies and local storage - used to keep you signed in and remember preferences.
• Before you sign up - if you talk to Riley on our website without an account, we store a random id in your browser and a one-way scrambled version of your network address so the same person cannot send thousands of messages a day. We never store your network address itself, we cannot turn the scrambled version back into it, and these counters are cleared within a couple of days.
• Whether our emails were opened - the emails we send you include a small invisible image, and links in them pass through our email provider on the way to their destination. That tells us an email was opened and which link was followed, so we can find out what is actually worth sending and stop sending what is not. It records the message, not the person - we never read anything you do outside our own emails, and this is never used in your Clarity score or shared with advertisers. You can stop it entirely by unsubscribing from any email; the app keeps working exactly the same.

What Riley is curious about

Riley keeps a short list of things she has been wondering about your life - someone whose name has come up more than once, or a part of your world you have not talked about yet. It is how she remembers to ask, the way a friend would, instead of asking the same thing every week.

Two things about that list. She asks at most twice about anything, ever - and if you say you would rather not get into something, that is recorded so she never raises it again. And everything the list is built from lives in your Life Map, where you can read it and remove any of it; take a person off your Life Map and Riley stops wondering about them the same day.

Wearables and health devices (optional, off by default)

If you choose to connect a device such as WHOOP or an Oura ring, we read a small, fixed set of daily readings: how long you slept and how settled that sleep was, a recovery or readiness score, heart-rate variability, resting heart rate, breathing rate, daily exertion, and minutes of movement or exercise. That is the whole list. We do not read continuous heart rate, location, journal entries, blood pressure, lab results, or anything you write in the device's own app.

Nothing is connected unless you connect it. You are shown exactly what you are agreeing to on the device maker's own consent screen, and we ask for the narrowest set of permissions that makes the feature work.

Riley uses these readings as context in conversation - so she is not asking how you slept on a morning you barely did. She does not report your numbers back to you, does not score or rank your days, and does not use them to diagnose anything or suggest a medical condition. Riley is not a medical device and this is not medical advice.

These readings are never used in our safety systems. They do not feed crisis detection, they do not affect sober-day counting, and they never trigger a message to you on their own. A hard night is never treated as a warning sign about you.

You can disconnect at any time from Integrations. Disconnecting revokes our access with the device maker and deletes the readings we have stored - not just the connection. Your access tokens are encrypted while we hold them and are never shown to anyone, including you.

3. Sensitive information

Because Riley supports recovery, grief, and well-being, some of what you share may feel deeply personal or health-related. You decide what to share. We use this information only to provide and personalize the Service for you, and we never sell it. Where required by law, our use of this information is based on the consent you give by choosing to provide it.

The people in your life

When you tell Riley about someone - your sister, your sponsor, a friend at work - she keeps their first name, who they are to you, and how you have described them, so she can ask after them by name. If you use a program that asks for a trusted contact, we store what you enter for that person.

We hold this only to support you. We do not build a profile of anyone else, we never contact them, and we never sell or share any of it. All of it appears in your Life Map under People Who Matter, and removing a person there removes them from everything Riley says from that day on. Please only share what you are comfortable sharing on their behalf.

Your own words, kept as you said them

A few features keep a short quote in your own words rather than our summary of it - for instance the reason we grouped you with the members facing something similar. We do that because paraphrasing what someone said about their own grief or sobriety is how a record stops being true. These quotes are never shown to other members, and they are deleted with your account.

This includes readings from a wearable device, if you connect one. Those are health data and we treat them that way: opt-in only, never sold, never shared, never used to train AI models, never used for advertising, and deleted along with the connection the moment you disconnect. See Wearables and health devices above for exactly what is read.

4. How we use your information

• To provide the Service and personalize Riley's guidance to you.
• To remember your history, progress, and preferences across sessions and devices.
• To keep you safe - including recognizing when you may need crisis resources, and alerting a person on our team in the situations described in Safety, crisis, and human review.
• To operate, secure, troubleshoot, and improve the Service.
• To process subscriptions and send Service-related messages.
• To comply with legal obligations and enforce our terms.

5. AI and your conversations

Riley's responses are generated using a large language model provided by Anthropic. To answer you, the content of your conversation is sent to Anthropic's API for processing and returned to you. Under Anthropic's commercial API terms, your inputs and outputs are not used to train their models. We do not use your conversations to build advertising profiles, and we do not sell your data.

Anthropic's models also do quieter background work on the same information - writing the short recap of a conversation, distilling what is worth remembering about you, drafting the wording of a check-in. Same provider, same terms, same promise: none of it trains anyone's model and none of it is sold.

How Riley finds the right memory

So that Riley can recall the memory that actually fits what you are saying - rather than only the most recent one - each memory is converted into a numeric fingerprint by OpenAI. Doing that means the text of that memory is sent to OpenAI's API. Under OpenAI's API terms your content is not used to train their models. The fingerprint itself is a long list of numbers that cannot be read back as words; we store it alongside the memory and delete it with your account.

A second look, for safety

Once a day, a model re-reads the previous day's messages that our safety checks did not flag, and asks one question: did any of these say something serious in a way the first pass would miss. Anything it raises goes to a short internal review list, never back to you and never into your Clarity score. It exists because the most important message someone sends is often the one that does not sound like an emergency.

Your conversation journal

Your conversations with Riley are saved to your account so you can go back and read them. To make them easier to find later, Riley writes a short title and a one or two sentence recap of each one - these are for you to read in your list, and Riley never brings a past conversation up on her own. You can rename a conversation, and you can delete one at any time, which removes it and everything said in it. What was said is never edited. If you would rather not have this at all, you can turn Journal Conversations off in Settings.

Google Calendar (optional)

If you choose to connect your Google Calendar, Riley reads your same-day events to time supportive check-ins and compose your daily brief. Riley's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data is used only to provide visible features you choose - timing your brief and check-ins - and is never stored beyond a short-lived cache, never sold, never shared, never used for advertising, and never used to train AI models. You can disconnect at any time in Account, which revokes Riley's access at Google and deletes the cached summary.

6. Safety, crisis, and human review

This is the part of the policy we most want you to actually read.

Riley is not watched around the clock

Nobody is sitting and reading your conversations as they happen, and no one is on call 24 hours a day. Our safety alerts are best effort. They can be delayed, and they can be missed. Riley is not an emergency service and must never be relied on as one. If you are in danger right now, call or text 988, or call 911.

When a person on our team sees part of your conversation

Riley watches for language that suggests you may be at serious risk. That check runs automatically, on the words in the message, before Riley answers. Most of what it notices needs nothing more than Riley responding well.

But when it reaches our two most serious levels, an alert is emailed to our operator - a person at The 814 Project - so a human being knows. That alert contains your name, your email address, how long you have said you have been sober if you track that, when you were last active, the part of your message that triggered it, and the last several messages of that conversation, exactly as they were written. It is sent through our email provider.

We tell you this plainly because it is the one place a conversation with Riley is read by a person. Nothing else you say to Riley is ever read by a human as a matter of course. The record we keep of the alert itself stores only that it fired and at what level - never what was in it.

If you talk to Riley on our website without an account, the same check runs, and the alert carries the message that triggered it without any way to identify you.

Following up

After a serious moment, Riley may check in on you over the following days. You can decline that, and declining is remembered.

7. When we share information

We share information only in these limited situations:

• Service providers who process data on our behalf under contract. In full, and we will keep this list current:
  • Supabase - our database and sign-in system. Holds everything.
  • Anthropic - the model behind Riley's replies and her background memory work.
  • OpenAI - memory fingerprints only, described in section 5.
  • Google - signing in with Google, and Google Calendar if you connect it.
  • WHOOP and Oura - only if you connect that device, and only what is listed under Wearables.
  • Open-Meteo - if you have entered a city, we send that city name to look up local weather and air quality. Nothing about you goes with it, and the results are cached by place, never against your account.
  • Apple, Google and Mozilla push services - if you turn on notifications, the message has to travel through the push service your browser uses.
  • Stripe - payments. We never store full card numbers.
  • Resend - the emails we send you, including the safety alert described in section 6.
  • PostHog - product analytics.
  • Netlify - hosting.
  We also use a social publishing tool for our own marketing posts. No member information ever goes to it, and we never use anything you have written to Riley in marketing.
• Legal reasons - to comply with law, respond to lawful requests, or protect the rights, safety, and property of you, us, or others.
• Business transfers - if The 814 Project, LLC is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction, subject to this policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

One gentle feature worth naming plainly: the member homepage can show how many members are present on a given night ("the porch lights"). Riley shows how many members are present - never who. The count is anonymous and aggregate, small groups are never broken out, and you can turn your own counting off anytime in Account settings ("Count me on the porch").

8. How long we keep it

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete your personal data - your conversations, check-ins, memories, Life Map, dates, scores, any readings from a connected device, and everything else tied to your account. We may also retain information as required by law.

Safety and crisis records

There is one narrow exception, and we want to be plain about it. If, during your time with Riley, a moment occurred where our safety systems stepped in - for example, a conversation that triggered our crisis support flow - a limited record of that event may be kept after you delete your account. If it is kept, it is de-identified: once your account and profile are deleted, the record is no longer linked to your name, email, or any way of identifying you. These records exist only for safety and legal accountability and are never used for anything else. We keep them no longer than we need to for those purposes. If no safety event ever occurred, nothing is kept - deleting your account deletes everything.

The safety alert email described in section 6 sits in our operator's inbox and is not deleted by deleting your account, in the same way an email you sent a person does not disappear from their inbox. It is treated as a confidential safety record and is never used for anything else.

9. Your rights and choices

You are in control of your data. From your account settings you can access, export, or permanently delete your information at any time. Depending on where you live, you may also have rights to correct your data, object to or restrict certain processing, and to appeal a decision - and to do so without discrimination. To exercise any of these rights, use the in-app controls or contact us below.

Your export contains your profile and every record tied to your account. If any single part of it is unusually large we cut that part at 5,000 entries, and the export tells you which ones and how to ask us for the rest - we would rather say so than hand you something that quietly stops.

Some controls are specific: your city can be cleared on your profile, a connected calendar can be disconnected from Account, and a connected wearable can be disconnected from Integrations - which also deletes the readings it produced.

10. Security

We use technical and organizational safeguards - including encryption in transit, access controls, and reputable infrastructure providers - to protect your information. No system is perfectly secure, but we work to protect your data and to respond promptly if something goes wrong.

11. Children

The Service is intended for adults 18 and older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. When you create an account, we ask for your date of birth to confirm you are 18 or older. For accounts created on or after July 23, 2026 we keep your date of birth on your profile so Riley can know your age without ever asking twice - it is never used in your Clarity score, and you can delete it anytime by deleting your account data. If we deny an account at the age gate, we keep only the fact of the denial, never the date of birth. If you believe a child has provided us information, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of the Service after an update means you accept the revised policy.

13. Contact us

Questions about your privacy, or want to exercise your rights? Reach us at:

The 814 Project, LLC d/b/a Riley
Email: support@meetriley.us