Privacy Policy
The short version. RIALITI Capture takes photos and videos with proof that they came from a real camera. The captures you choose to archive are uploaded to our server and kept so that they can be verified later. We collect nothing else about you: no account, no location, no contacts, no advertising identifiers, no analytics. We do not sell data. You can ask us to delete your captures at any time.
Who we are
RIALITI is an independent research project building tools that prove a photo or video came from a real camera. Questions and requests about this policy go to founders@rialiti.io.
What the app collects
Everything below is created only when you press the capture button and then choose to archive the result. Shots you discard never leave your phone. The app cannot read your existing photo library.
- Photos and videos you archive, including the sound in videos. These are the files being proven real, so we store them in full.
- Capture details: the time of capture, your phone's model name, and a cryptographic fingerprint of the file.
- The proof itself: a public key created in your phone's secure hardware for that one capture, and the hardware attestation certificate chain that shows the key is genuine. This chain identifies the make of your phone's security hardware. It does not contain your name, your Google account or your phone number.
- An optional label. The app has a free-text field called Identity. Whatever you type there is stored with the capture. It is not shown publicly, but only a salted hash of it enters the tamper-evident log, and it is removed when you delete the capture. Leave it blank if unsure.
- Device enrollment. On first use the app creates a signing key in your phone's secure hardware and our server issues it a random device ID. This lets us tie captures to an enrolled phone and revoke a phone if it is compromised. The ID is random and is not linked to any account.
Like any web server, ours records the IP address and time of each request in short-lived operational logs.
What we do not collect
- No accounts, names, email addresses or phone numbers, unless you type one into the Identity field yourself.
- No location. The app never asks for location permission, and the files it makes contain no location data.
- No contacts, messages, or other files on your phone.
- No advertising identifiers, no analytics, no crash-reporting services, no third-party tracking code of any kind. The app contains no advertising.
Why we collect it
- To verify captures. The stored record is what lets anyone later check that a file is the real, unedited original. Without it there is nothing to compare against.
- To keep the service honest. Enrollment and the proof let us detect tampered apps and revoke compromised devices.
- To improve our detection systems. Captures archived during our testing programme are also used to test and improve the systems that tell real captures from edited or generated ones. This use is internal to RIALITI.
Who can see what
Archived media files are not published, listed, or browsable. Nobody can scroll through captures.
A capture's verification record is visible to anyone who submits a matching file for checking, or who has the record's link. That record shows the fingerprint, the capture time, the phone model and the proof. It does not include the media file, a thumbnail, or the Identity label.
We do not sell personal data and we do not share it with advertisers. We use Google Cloud (United States) to run the server and Cloudflare to carry network traffic; both act only as infrastructure. We would disclose data if the law required it.
How long we keep it
Archived captures and their records are kept for as long as the service runs, because verification depends on the record still existing when someone checks it. Operational server logs are kept for a short period and then discarded. Captures on your phone stay there until you delete them in the app or uninstall it.
Deleting your data
From the app. Open a capture in Your captures and choose Delete. "Delete from this phone" removes the local copy. "Delete everywhere" also removes the photo or video, its fingerprints, its thumbnail and its label from our archive, and marks the record as withdrawn by its owner, so it can no longer be verified. This works because the request is signed by the same key in your phone's secure hardware that created the capture. We never use the Identity label to decide ownership.
If you reinstalled the app. We do not identify users, so a reinstalled app gets a new key and can no longer prove that earlier captures are yours. For those, email founders@rialiti.io with the capture's verification link or its fingerprint and we will remove them the same way.
What cannot be undone. The capture's fingerprint, and a salted hash of its label, sit in an append-only, tamper-evident log. Neither contains an image, and neither can be turned back into the label or identify you. They stay so that the log's history remains provable.
The iPhone waitlist
The form on our home page that asks to be told when RIALITI Capture is on iPhone collects your email address, the optional note you write about what you would use it for, the address of the page you sent it from, and your browser's user agent string (the line that names your browser and system). They are stored in a Google Sheet that only we can open. We use them only to tell you when the iPhone app exists, and for nothing else. To be removed, email founders@rialiti.io from the address you signed up with.
Security
All traffic between the app and our server uses HTTPS. Signing keys are created inside your phone's secure hardware and never leave it. Write access to the archive requires a valid proof from an enrolled device.
Children
The app is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has archived captures with us, email us and we will delete them.
Changes
If this policy changes, the new version will appear at this address with a new effective date. Changes that broaden how we use your data will also be announced inside the app.