How Rifflo handles parent accounts, children’s creative activity, AI processing, private media, and family privacy rights.
Effective and last updated August 19, 2026Rifflo is a parent-supervised AI creativity service for children, primarily ages 10–12. The parent or legal guardian is the account holder, must be present while the child uses Rifflo, and is responsible for the session. Rifflo does not offer a separate child login.
This policy applies to play-rifflo.com, the Rifflo web application, and related services.
Parent account: Google’s stable account identifier, a Rifflo creator ID, display name, essential session records, and the version, wording, and time of the parent confirmation. Rifflo requests and stores the parent’s verified Google email address for account administration. It is private, included in the parent’s account export, and deleted with the account. Existing accounts add this email on a subsequent Google sign-in. Rifflo does not request the Google profile.
Creative activity: character descriptions, prompts, choices, stories, generated images, revisions, and the saved structure of a character world. Please use nicknames and do not enter a real name, school, address, precise location, phone number, email, photograph of a real child, or other contact information.
Optional voice input: when the microphone button is used, Rifflo receives one short audio recording solely to turn it into editable text. Voice input is not offered for names, account details, or confirmation fields.
Technical information: essential cookies, request timing, errors, security and rate-limit signals, IP address and browser information that Cloudflare or our service receives when operating and securing the site.
Rifflo sends prompts, character context, and—when needed—a reference image to OpenRouter, which routes the request to an AI model provider. Requests are configured to exclude providers marked as collecting request data. OpenRouter and the selected provider may still process request content and technical metadata to return the result, prevent abuse, and meet their legal obligations.
Optional voice recordings are sent to Cloudflare Workers AI only to produce the requested transcript. Rifflo does not use voice recordings for speaker identification, emotion analysis, advertising, model training, or product evaluation.
AI output can be wrong or unsuitable. A supervising adult should review the experience. Rifflo does not use family content for advertising or sell it, and does not intentionally use it to train a foundation model.
Cloudflare provides hosting, security, D1 database storage, private R2 image storage, and the Workers AI transcription service. Google provides parent authentication. OpenRouter and its routed model providers process other AI requests. These providers receive only the information needed for their role and operate under their own terms and privacy practices.
Private character media is not placed in a public R2 bucket. Rifflo checks the signed-in creator’s ownership before returning an image.
Rifflo is designed for co-use with a parent or legal guardian. The adult must confirm that they are at least 18 or the age of majority where they live, agree to this policy and the Terms, and remain present during use.
If we learn that personal information was submitted by a child without appropriate adult involvement, the parent can delete the account or contact us to request deletion. A checkbox and Google sign-in are an adult attestation; families and the operator may need additional age or parental-verification measures where local law requires them.
Depending on location, we process information to perform the agreement with the adult account holder, for legitimate interests such as security and service reliability, to comply with law, and on consent where consent is the required legal basis. Consent may be withdrawn, but withdrawal does not affect earlier lawful processing and may mean the service can no longer be used.
Cloud services may process information outside the country where a family lives. Applicable contractual and legal safeguards depend on the provider and region. EEA, UK, Swiss, California, and other residents may have additional access, correction, portability, objection, restriction, or deletion rights.
Saved character worlds and private images remain while the parent account is active, unless the parent deletes the account or a shorter period is required. Rifflo sessions expire; the temporary Google OAuth transaction expires after about ten minutes. Parent-confirmation records are kept with the account and may be retained longer only when necessary to document consent or meet legal duties.
Rifflo keeps a voice recording only in request memory for the brief time needed to return its transcript. It is not written to D1, R2, browser storage, application logs, or an evaluation dataset, and Rifflo discards it when the transcription request finishes. The editable transcript is handled like typed creative activity.
Operational logs and provider records follow security needs and provider retention schedules. Deletion from active systems may not immediately remove information from legally required or disaster-recovery copies.
Rifflo uses essential cookies for login and security, plus browser storage for the current creator’s work and interface state. Rifflo does not currently use advertising cookies, sell personal information, or use cross-site behavioral advertising.
Rifflo uses encrypted transport, HTTP-only session cookies, private-by-default work records, account-scoped media paths, server-side ownership checks, size and format limits, and restricted AI-provider routing. No online service can guarantee absolute security.
The signed-in parent can download a machine-readable account export from Account Settings and can permanently delete the account, database records, and private R2 images. Account Settings also provides the available controls for reviewing and managing account information. We may verify the requester’s authority before acting on a rights request.
We may update this policy when the product, providers, or law changes. Material changes will be shown in the service and may require a new parent confirmation.
These pages describe Rifflo’s current product behavior. They are not a substitute for advice from counsel qualified in every country where Rifflo is offered, especially for parental verification, international transfers, and children’s privacy.