Legal
Privacy Policy
Plain-language summary of how Rivnly handles your data. Last updated October 28, 2026.
What we collect
To connect to Rivian's API on your behalf, Rivnly stores:
- Your Rivian email and password (encrypted with Fernet AES-128-CBC).
- Session tokens returned by Rivian after login.
- Vehicle state snapshots (battery, location, climate, doors, tire PSI, OTA, etc.) polled every 15s–5min.
- Drive and charging session history generated from those snapshots.
- Optional phone-key material if you enroll to send vehicle commands — encrypted at rest.
- Optional leaderboard profile (handle + city/state) if you choose to join the public leaderboard.
- Your Rivian account profile as Rivian returns it (name, email, unit preferences, and the addresses on file with Rivian). From your addresses we use only your home state, to suggest an electricity rate.
- Optional home electricity rate, and the date each rate took effect, if you enter one in Settings. It is used only to estimate what your home charging cost.
What we don't collect
- Analytics pixels, ad trackers, Google Analytics, or Segment.
- Third-party social logins or embedded social widgets.
- Any identity information beyond what Rivian returns for your account.
How we use your data
Your data powers your dashboard, your drive and charging history, your badges and records, and the email notifications you receive. That's it. We don't sell, share, or monetize your driving data.
Subscriptions and payments
If you subscribe to Premium in the iOS app, Apple processes the payment. Rivnly stores your App Store subscription identifiers and status, linked to your Rivnly account, so it can provide Premium. We never see or store your payment details. Subscriptions bought on the web are processed by Stripe.
The leaderboard
The leaderboard and fleet software page are opt-in. Nothing about you appears publicly until you explicitly create a profile and pick a handle. Leaderboard rows show only your handle, vehicle model/trim/color, city/state, and the statistic being ranked — never your email, VIN, or precise location.
API keys
You can create scoped API keys (read-only or read+commands) to pull your own data into external tools. Keys are hashed at rest — we only store the hash, not the full key. You can revoke any key at any time.
Data export and deletion
Settings → Data lets you export every snapshot, drive, and charging session as CSV with no row limits. Settings → Danger Zone lets you delete your account and all associated records in one click.
Security
Credentials and phone keys are encrypted with Fernet before being written to the database. Transport is always HTTPS. The app is hosted on Railway with managed Postgres and Redis.
Affiliation
Rivnly is not affiliated with, endorsed by, or connected to Rivian Automotive, Inc. "Rivian" is a registered trademark of Rivian Automotive, Inc. We consume Rivian's unofficial API at your request and under your authentication.
Contact
Questions? Reach out at hello@rivnly.com.