Privacy policy

The short version

• We keep what we need to run the apps, and nothing for advertising.
• One sign-in cookie. No advertising or tracking cookies.
• Cloudflare Web Analytics counts visits in aggregate, without cookies.
• We never sell your information.
• Health information and children’s information are shared only when you say so.
• You can see, export and delete what we keep.

Renfro Vibes is run by Christian Renfro. Questions and requests go to support@renfrovibes.com. Some parts below are marked coming: they describe apps that are not open yet, so you know how they will treat your information before they do.

What we keep

• Your account: your email address; your name and photo if you add them; when you joined and which apps you have opened; where you came from when you signed up, if a link said so; and which version of the terms you accepted.
• Signing in and security: your signed-in devices, each with its browser’s name and a rough network (the first part of its internet address, never the whole address); sign-in codes and links, stored only in scrambled form; your passkeys’ public keys; and your security activity, such as sign-ins, key and computer changes and invites, with the network stored only as a one-way hash. Security activity is kept for about a year.
• What you make: your rooms, campaigns, maps and notes in D&D Companion; your days in the Day Planner; and, when they open, your books and coaching records.
• Your AI keys: encrypted, with when each was last used and a daily count. Nobody can read them back, you included.
• Your computer: if you pair one, its name, the station program’s version, and a short report of its operating system, processor, memory, graphics card and AI engines, so your account page can show it.
• People (coming): who watches over whom, in which app, what is shared, the invites and the address each went to, and each time a watcher looked at your information, which you can see.
• Notifications: whether email alerts are on, and an ntfy topic if you set one up.
• Payments (coming): Stripe takes your card. We never see or keep your card number; we keep what you bought, the amount and the receipt.

How we use it

• To run the apps, sign you in and keep your account safe, including limits that stop people guessing codes or flooding the service.
• To send the email you need, and to answer you when you write.
• Never for advertising, never sold, and never used by us to train AI models.
• When you use an AI feature, what you send goes to the AI that answers: your own computer, the provider of a key you saved, or, when credits pay for it, the provider we pay.

Cookies and your browser’s storage

• One sign-in cookie, set by our account server for renfrovibes.com and its apps. Page scripts cannot read it. It lasts up to 30 days, or 90 days if you signed in with a passkey.
• While you sign in, a second cookie lasts 15 minutes. It remembers which browser asked for the code, so the email’s link can warn you if it is opened somewhere else.
• No advertising or tracking cookies. While the Workout Coach still runs on its own site, it keeps its own sign-in cookie there.
• Your browser’s storage keeps small conveniences on your device: the first letter of your name, so the site bar can show it while it reconnects, and a Day Planner day you made while signed out.

Analytics

Cloudflare Web Analytics counts visits and page loads in aggregate, without cookies and without building a profile of you. The sign-in and invite pages load no analytics and no other third-party script, apart from Cloudflare’s check that you are a person (Turnstile) on the sign-in form when it is switched on.

Email

Sign-in and security email always comes. News comes only if you say yes, and you can stop it with one click. We do not send any news today. Resend delivers our email for us, with open and click tracking switched off.

Who helps us run it

These services handle your information only to run the apps:

• Fly.io runs our servers, in the United States.
• Neon hosts our database, in the United States.
• Cloudflare runs our domain and this website, stores files such as pictures and maps, counts visits, and runs the check that you are a person on the sign-in form.
• Resend sends our email.
• AI providers, when you use AI: through a key you saved (your own account with them), your own computer, or, when credits pay for it, the provider we pay.
• Stripe takes payments, and a printing partner prints and ships printed books (both coming).
• Map services in the Day Planner: OpenFreeMap draws the map, Photon finds places and OSRM plans drives. They see the places you look up, not your account.
• Google Fonts: some older pages still load typefaces from Google, which then sees your internet address. The account pages and newer pages use our own copies.
• The people you choose: watchers you accept, and people you share a room, a plan or a book with.
• The law: when a valid legal request requires it, or to protect someone from harm.

We do not sell or rent personal information, and we do not share it for advertising.

Health information (Workout Coach)

• What: your plan and targets, weight entries, meals, check-ins, the answers you gave when you started, and your chats with the coach.
• Why: to coach you, and to show it to the coaches you accept.
• Who sees it: you; people you accept as your coach, after a separate step that asks you plainly; and the services above that store it and the AI that answers your chats. Never sold, and never used for advertising.
• Alerts about your check-ins say only that you checked in, never your numbers or your words.
• Your rights, which Washington’s My Health My Data Act gives its residents and we give everyone: to know what health information we keep, who we share it with and why; to get a copy; to have it deleted; and to take back your consent at any time, by ending the coach in People or by writing to us. We answer within 45 days. If we say no, reply to appeal, and we answer that within 45 days too.
• Today the Workout Coach runs on its own site with its own sign-in and its own database. When it moves onto your Renfro Vibes account, we ask you before anything of yours moves.

Children’s information (Children’s Books, coming)

• Children’s Books is for parents and guardians. Children do not get accounts. If we learn a child made one, we delete it.
• A parent may give a child’s first name, age and pictures to make a book. The pictures are used only to make that book’s illustrations, which means sending them to the picture service that draws them. Nothing is public unless you share the book.
• We never use a child’s information for advertising, and never use it to train AI models.
• You can delete a picture, a child’s details or a whole book at any time. Deleting a book deletes its pictures. A parent can ask us what we keep about their child and have it deleted.

Keeping it safe

Everything travels encrypted. AI keys are stored encrypted, and codes and links are stored only in scrambled form. Your account page lists your signed-in devices and your security activity, and you can sign out the others. No system is perfect: if something happens that affects your information, we tell you.

Seeing, exporting and deleting

• You can change your name, photo and email address on your account page.
• To get a copy of what we keep, or to close your account and delete it, write to us from your account’s email address. Today we do it by hand, within 30 days; a button in your account is coming.
• When an account is closed we delete what you made and your details. We keep payment records the law requires, without your email address, and security activity for up to a year. Backups roll over within a few weeks.
• You can stop news email with one click, and take back consent for health sharing at any time.

Where it is kept

On servers in the United States.

Changes to this policy

The date at the top changes with every version. When we change something that matters, we tell you by email or on the site before it takes effect.

Contact

Renfro Vibes is run by Christian Renfro. Write to support@renfrovibes.com.