Privacy policy
What our applications collect, what never leaves your device, who else ever sees anything, and how to make us delete it.
Who this covers
This policy applies to Riftwell, LLC (“Riftwell”, “we”), to every application we publish, and to this website. Where an application behaves differently from the others, it is named.
The short version
Everything our applications do happens on your device. Nothing you draw, model, measure or import is ever sent to us, because there is nowhere for it to go — we operate no server that holds a drawing.
We do not sell personal information, we do not share it for advertising, and we run no advertising or analytics in our applications or on this website. Nothing is for sale yet, so we take no payments and hold no payment details.
This site runs no analytics and no advertising, and sets no cookies for analytics, advertising or profiling. Our host may set a cookie strictly necessary for security and bot filtering. Nothing here profiles you, and there is nothing to opt out of — which is why you are not being asked to accept anything.
What each application handles
Each row states the information an application works with, and whether it leaves your device.
| Application | Information | Leaves your device? |
|---|---|---|
| PipeSketch3D | Drawings, models, project files and any title block you import | No. Only your email address and a random per-installation identifier, and only if you sign in. |
| TubeBender | Runs, bender and material settings, measured springback, and any drawing you open in it | No. Only your email address and a random per-installation identifier, and only if you sign in. |
| DuctConstruct3D | Duct models and project files | No. Only your email address and a random per-installation identifier, and only if you sign in. |
docs/platform/PRIVACY-DISCLOSURE.md, which is derived from the applications’ own code; when an application’s data behaviour changes, that file changes first. A mismatch between this page and those forms is one of the most common causes of review rejection, and the store form is the harder one to change afterwards.
On your device, and off it
Where an application can do something on your device, it does. Our applications have no upload path: there is no server that holds a drawing, because no application ever sends one. Signing in tells us which applications your account may open. It does not move your work anywhere, and there is no route by which it could.
Two cases are worth stating plainly because they involve the camera and the microphone. PipeSketch3D can stand your drawing, DuctConstruct3D your duct, and TubeBender your bent tube, in the space in front of you. The camera image is drawn on the screen and discarded frame by frame. Nothing is photographed, nothing is stored, and nothing is transmitted — the camera permission those applications ask for is used for that and for nothing else.
PipeSketch3D and TubeBender can also listen when you tap their microphone button, so you can say a run or a bend instead of typing it. What you say is turned into text on your device. It is not recorded, not stored and not sent to us or to anyone else; if your device cannot do this on its own, the application asks you to type instead.
None of our published applications sends anything to a hosted artificial-intelligence model. If that ever changes, this page will say which application, what is sent, and to whom, before the change ships.
Why we process it
We use this information for three reasons:
- To provide the service — creating your account, signing you in, checking which applications it entitles you to, and answering a support message about the service.
- To keep it secure — keeping the service secure, preventing abuse, and diagnosing faults.
- Because the law requires it — where a law requires us to keep or produce something.
We do not rely on consent for anything today, because we ask for nothing optional. If that changes, this page will say what we are asking for and how to withdraw it.
We make no decisions about you by automated means that produce legal effects or similarly significant effects.
Who else sees it
| Provider | Purpose | What it sees |
|---|---|---|
| Supabase | Accounts, and the entitlement check an application makes when you sign in | Your email address, your password (which it stores hashed, and which we never see), a random identifier for the installation you signed in from, and which application you signed into and when. Never a drawing: no application sends one. |
| Google Workspace | Our mailboxes | Anything you send us by email |
| Cloudflare | Serving this website and the account portal | Standard server logs |
All three process information in the United States. We do not sell personal information and we do not share it for cross-context behavioural advertising. We may disclose information where we are legally required to, or to establish or defend a legal claim.
If we add or change a provider in a way that affects how your information is handled, we will update this table before the change takes effect.
How long we keep it
Information held on your device stays there until you delete it or remove the application.
Information held on our side is kept for as long as your account exists, then deleted on the schedule on the deletion page. Support correspondence is kept for 12 months, or longer where we are required to preserve it for a legal claim. Server logs are kept for 30 days.
If you take part in a watched beta session, its recording is kept for 1 year from the session, then deleted; a written transcript is kept for 3 more years.
Your rights
Depending on where you live, you may have the right to ask us for a copy of the information we hold about you, to correct it, to delete it, to obtain it in a portable form, to object to or restrict some processing, and to opt out of sale or sharing — we do neither. You will not be treated differently for exercising any of these.
Write to privacy@riftwell.dev. We will acknowledge within one business day and respond within 30 days. Where a law allows a longer period or an extension, we will still aim for 30 days and will tell you if we need more time and why.
We may need to verify that the account is yours before acting. We will ask only for what is necessary to establish that, and we will not use it for anything else.
If we get it wrong. If we refuse a request or you are unhappy with how we handled it, reply and say so — an appeal goes to the same address and gets a decision within 45 days from a fresh look, not a repeat of the first answer. If you are still unsatisfied, you may complain to your state Attorney General.
Someone acting for you. You may use an authorised agent. We will ask for written authorisation from you, and we may still verify your identity directly.
Deleting your account
You can delete your Riftwell account at any time. Deletion means deletion: the account record is removed, not disabled, suspended or hidden. It cannot be signed into afterwards and it cannot be restored on request.
From this website, without installing anything. Go to the account and data deletion page. You do not need the application, an account you can still sign into, a support ticket, or a conversation with a salesperson.
What is deleted. Your account record and sign-in credentials, the record of which applications your account was entitled to open, and the record of the devices you signed in from.
When. Deletion is irreversible from the moment you confirm it. We complete it on live systems within 7 days of verifying the request, and the last encrypted backup copies age out within 35 days on their normal cycle. Those backups are never restored into live systems except in a disaster, and if that happens the deletion is re-applied.
What we keep, and why. A small number of things survive deletion, each for a stated reason and a stated period: the record of the deletion request itself, so we can show we complied; transaction and tax records the law requires us to hold; and security and abuse logs, which are not linked back to your identity. The periods are set out in full on the deletion page.
What was never ours to delete. Drawings, models, sketches, measurements and project files are held on your device and are never sent to us. Deleting your account does not touch them, and removing them does not need our involvement: delete them in the application, or remove the application. If you want them gone from a device you no longer control, that is a matter for the device, not for us.
Children
Our applications are not directed to children, and we do not knowingly collect personal information from a child. If you believe a child has provided us with information, write to privacy@riftwell.dev and we will delete it.
Security
We keep the amount of information that leaves your device small, because information we never receive cannot be lost. Where we do hold data it is encrypted in transit and at rest. No system is perfect; if you find a weakness, the security page tells you how to tell us.
Where your information is held
Our applications are offered in the United States only. We operate from the United States, and our providers hold and process information there.
This website
This site runs no analytics, shows no advertising, and embeds no tracking pixels.
Two third-party requests are made from your browser. Typefaces are requested from Google Fonts, which necessarily receives the request. Email addresses on this site are obfuscated by a small script served by Cloudflare, which turns them into readable addresses in your browser so that they cannot be harvested from the page source. Neither is used to profile you.
Our host records standard server logs, kept for 30 days.
Changes
If this policy changes materially we will update the date at the top of this page and, where an application is affected, tell you inside it. The version in force is always the one published here.
Contact
Riftwell, LLC
117 S. Lexington Street
Suite 100
Harrisonville, Missouri 64701
United States