Rileo - AI Note Taker

IMPORTANT PRIVACY INFORMATION

In order to use our app, we will ask you to provide access to your microphone for conducting voice recordings. We will also automatically collect from your device IP address, language settings, time zone, type and model of a device, device settings, operating system, Internet service provider, mobile carrier, hardware ID, other unique identifiers (such as IDFA, IDFV, UUID), information about your interactions with the app, cookies . We need this data to provide and improve our services, analyze how our customers use the app and to measure ads.

For improving the app and serving ads, we use third party solutions. As a result, we may process data using solutions developed by Amazon, Amplitude, Tableau, Microsoft Clarity, PayPal, Sentry, Stripe, Zendesk, Google, DeepGram, AssemblyAI, Solid and OpenAI. This enables us to (1) provide certain services; (2) analyze different interactions (how often users make purchases, what products our users viewed); (3) serve and measure ads (and show them only to a particular group of users, for example, only to those who have made a purchase).

Please read our Privacy Policy below to learn more about what we do with data (Section 3), what data privacy rights are available to you (Section 6) and who will be the data controller (Section 1). 

If you are a California resident, please review our California Notice at Collection and see the applicable state-specific section (Section 10)  below. If you reside in a state with a comprehensive U.S. privacy law (for example, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia), please also see Section 10 for information about your privacy rights under applicable state law.

If any questions remain unanswered, please contact us at support@rileo.com.

PRIVACY POLICY

This Privacy Policy explains what personal data is collected when you use the Rileo (the “Website”), the services and products provided through it (together with the Website, the “Service”), how such personal data will be processed.

BY USING THE SERVICE, YOU PROMISE US THAT (I) YOU HAVE READ, UNDERSTAND AND AGREE TO THIS PRIVACY POLICY, AND (II) YOU ARE OVER 16 YEARS OF AGE (OR HAVE HAD YOUR PARENT OR GUARDIAN READ AND AGREE TO THIS PRIVACY POLICY FOR YOU) AND (III) ACCEPT OUR DATA COLLECTION AND PROCESSING PRACTICES DESCRIBED BELOW. If you do not agree, or are unable to make this promise, you must not use the Service. In such case, you must (a) contact us and request deletion of your data; and (b) cancel any subscriptions using the functionality provided by support .

Any translation from the English version is provided for your convenience only. In the event of any difference in meaning or interpretation between the English language version of this Privacy Policy, and any translation, the English language version will prevail. The original English text shall be the sole legally binding version.

“GDPR” means the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

“EEA” includes all current member states of the European Union and the European Free Trade Association. For the purpose of this policy EEA shall include the United Kingdom of Great Britain and Northern Ireland.

“Process” in respect of personal data, includes to collect, store, and disclose to others.

TABLE OF CONTENTS

1. PERSONAL DATA CONTROLLER
2. CATEGORIES OF PERSONAL DATA WE COLLECT
3. FOR WHAT PURPOSES WE PROCESS PERSONAL DATA
4. UNDER WHAT LEGAL BASES WE PROCESS YOUR PERSONAL DATA (Applies only to EEA-based users)
5. WITH WHOM WE SHARE YOUR PERSONAL DATA
6. HOW YOU CAN EXERCISE YOUR PRIVACY RIGHTS
7. AGE LIMITATION
8. INTERNATIONAL DATA TRANSFERS
9. CHANGES TO THIS PRIVACY POLICY
10. U.S. STATES PRIVACY NOTICE
11. DATA RETENTION
12. CONTACT US

1. PERSONAL DATA CONTROLLER

Olosera Limited, a company registered under the laws of the Republic of Cyprus, having its registered office at Ezekia Papaioannou 14, Office 101, 1075 Nicosia, Cyprus, will be the controller of your personal data.

2. CATEGORIES OF PERSONAL DATA WE COLLECT

We collect data you give us voluntarily (for example, when you contact us for technical support and provide us with your name and email address). We also collect data automatically (for example, your IP address, device type, etc.).

2.1 Data we receive directly from you:

2.1.1.  Identifiers
When you require support and contact us, we may ask you to provide us with your name and/or email. You do not have to give this data to us in order to use the Service. It will be required only when you wish to contact us directly.

2.1.2. Voice and/or Video  Recordings 

The Service utilizes advanced artificial intelligence capabilities to process the Voice and/or Video  Recordings you provide. We use Voice Recordings and/or Video only to create the transcriptions and summaries you requested based on the recordings you shared. 

The Service does not conduct the identification or authentication of individuals based on their voices shared with us. 

2.1.3. Purchase Data

We do not collect, store, or have access to your billing data, though we receive some limited information necessary to provide you with the Service, including data about products or services purchased, date, time, and amount of the purchase.

2.1.4. Content

Our Service will access and store the content to enable the normal running of the Service. 

2.1.5. Feedback/Communications

We do not require you to provide your email, name or similar data. You can start using Rileo without creating an account. In this case, a random user ID is assigned to you.

However, we may also process your email and other information provided by you to us through customer support and other communications. 

2.2 Data we collect automatically:

2.2.1 Data about how you found us

We collect data about your referring app or URL (that is, the app or place on the Web where you were when you tapped on our ad).

2.2.2 Device data and Location data

We collect data from your mobile device. Examples of such data include: language settings, IP address, time zone, type and model of a device, device settings, operating system, Internet service provider, mobile carrier, hardware ID . 

2.2.3 Usage data

We record how you interact with our Service. For example, we log your taps on certain areas of the interface, the features, and content you interact with, how often you use the Website, how long you are in the Website, your subscription orders and crashes you experienced while using the Service.

2.2.3 Advertising IDs

We collect your Apple Identifier for Advertising (“IDFA”), Identifier for Vendor (“IDFV”) or Universally Unique Identifier (“UUID”). You can typically reset these numbers through the settings of your device’s operating system (but we do not control this).

2.3. Data we may collect onfrom third-party meeting participants

When our users utilize the Voice Meeting Notes Features, which involve an automated bot joining online meetings or calls to record and transcribe conversations, we may collect and process personal data from individuals who are not our users but are participants in those meetings ("Third-Party Participants").

2.3.1. Voice recordings of third-party participants

We may collect and process your voice/video recordings as part of the audio and/or video. This includes:

• • Audio recordings of your speech and communications 
  • Transcriptions of your spoken words generated through automatic speech transcription recognition technology
  • Summaries, insights, or other derivative content 

Responsibility for Consent

We rely on our users to obtain all necessary consents from Third-Party Participants before activating our features. By using these features, our users represent and warrant that they have informed all third-party participants about the recording and obtained any legally required consents. We as a provider of technical tools do not independently verify or monitor whether proper consents have been obtained.

3. FOR WHAT PURPOSES WE PROCESS YOUR PERSONAL DATA

We process your personal data: 

3.1 To provide our Service

This includes enabling you to use the Service in a seamless manner and preventing or addressing Service errors or technical issues.

To host personal data and enable our Service to operate and be distributed we use Amazon Web Services, which is a hosting and backend service provided by Amazon.To learn more, please visit AWS Privacy Notice.

We use DeepGram and AssemblyAI to transcribe recorded speech into text using automatic speech recognition technology. This allows us to convert your recordings—such as conversations, interviews, or lectures—into written text. To learn more, please visit Deepgram Privacy Policy and AssemblyAI`s Privacy Policy.

We then use the OpenAI API to process, analyze and summarize these transcriptions. We may also send the transcriptions in order to generate educational content such as quizzes or flashcards. The generated content is then rendered and displayed within our service.To learn more, please visit OpenAI Privacy Policy. 

We use Sentry,an error tracking and monitoring tool, that helps us identify and fix bugs. In certain cases, Sentry may record screen activity (including a short screen capture before a crash) to better understand what led to the error. These recordings are anonymised and used solely for diagnostic purposes.

3.2 To customize your experience

We process your personal data, such as gender, to adjust the content of the Service and provide content tailored to your personal preferences. 

3.3 To provide you with customer support

We process your personal data to respond to your requests for technical support, Service information or to any other communication you initiate. For this purpose, we may send you, for example, notifications or emails about the performance of our Service, security, payment transactions, notices regarding our Terms and Conditions of Use or this Privacy Policy.

3.4 To communicate with you regarding your use of our Service

We communicate with you, for example, by push notifications if you opt-in. These may include reminders and motivational messages encouraging you to enhance your photos, or other information about the Website. To opt out of receiving push notifications, you need to change the settings on your device.

The services that we use for these purposes may collect data concerning the date and time when the message was viewed by our Service’s users, as well as when they interacted with it, such as by tapping on links included in the message.

3.5 To research and analyze your use of the Service

This helps us to better understand our business, analyze our operations, maintain, improve, innovate, plan, design, and develop the Service and our new products. We also use such data for statistical analysis purposes, to test and improve our offers. This enables us to better understand what categories of users use our Services. As a consequence, we often decide how to improve the Service based on the results obtained from this processing.

We also use Tableau, the analytics platform, to discover relevant metrics, surface automated analytics and to detect drivers, trends, contributors, and outliers for metrics we follow, flagging changes and summarizing insights (Privacy Notice).

Amplitude is an analytics service provided by Amplitude Inc. We use this tool to understand how customers use our Service. Amplitude collects various technical information, in particular, time zone, type of device (phone, tablet or laptop), unique identifiers (including advertising identifiers). Amplitude also allows us to track various interactions that occur in our Website. As a result, Amplitude helps us to decide what features we should focus on. Amplitude provides more information on how they process data in its Privacy Policy.

Clarity, a Microsoft analytics  product, to identify  how people use website and uncover specific trends. Clarity`s Data Privacy and Security Policy.

3.6 To send you marketing communications

We process your personal data for our marketing campaigns. As a result, you will receive information about our products, such as, for example, special offers or new features available on the Website. We may show you advertisements on ourWebsite, and send you push notifications for marketing purposes. To opt out of receiving push notifications from us, you need to change the settings on your device.

We use Zendesk ticketing system to handle customer inquiries. When you send us inquiries via contact form or via email, we will store the details provided by you via Zendesk ticketing system, which enables us to track, prioritize and quickly resolve your requests. To learn more, please visit this Privacy Policy.

3.7 To personalize our ads

We and our partners use your personal data to tailor ads and possibly even show them to you at the relevant time. For example, if you have installed our Website, you might see ads of our products in your Ffeed.

How to opt out or influence personalized advertising

iOS: On your iPhone or iPad, go to Settings > Privacy > Apple Advertising and deselect Personalized Ads.

Android: To opt-out of ads on an Android device, go to Settings > Privacy > Ads and enable Opt out of Ads personalization. In addition, you can reset your advertising identifier in the same section (this also may help you to see less personalized ads). To learn even more about how to affect advertising choices on various devices, please look at the information available here.

In addition, you may get useful information and opt out of some interest-based advertising, by visiting the following links:

• • Network Advertising Initiative – http://optout.networkadvertising.org/
  • Digital Advertising Alliance – http://optout.aboutads.info/
  • Digital Advertising Alliance (Canada) – http://youradchoices.ca/choices
  • Digital Advertising Alliance (EU) – http://www.youronlinechoices.com/
  • DAA AppChoices page – http://www.aboutads.info/appchoices

We value your right to influence the ads that you see, thus we are letting you know what service providers we use for this purpose and how some of them allow you to control your ad preferences.

        Google Ads is an ad delivery service provided by Google that can deliver ads to users. In particular, Google allows us to tailor the ads in a way that they will appear, for example, only to users that have conducted certain actions with our Website (for example, show our ads to users who have made a purchase). Some other examples of events that may be used for tailoring ads include, in particular, visiting our Website. Google allows its users to opt out of Google’s personalized ads and to prevent their data from being used by Google Analytics.

We also use Google Tag Manager to measure your advertising ROI as well as track your Flash, video, and social networking sites and applications. To learn more, please read Google`s Privacy Policy. 

3.8 To process your payments
We provide paid products and/or services within the Service. For this purpose, we use third-party services for payment processing via external links. As a result of this processing, you will be able to make a payment and we will be notified that the payment has been made.We will not store or collect your payment card details ourselves. This information will be provided directly to our third-party payment processors. To enable the purchase and to process your payments we use PayPal and Solid, Stripe, payment processing provider. Solid Privacy Policy and  PayPal Privacy Statement.

3.9 To enforce our Terms and Conditions of Use and to prevent and combat fraud

We use personal data to enforce our agreements and contractual commitments, to detect, prevent, and combat fraud. As a result of such processing, we may share your information with others, including law enforcement agencies (in particular, if a dispute arises in connection with our Terms and Conditions of Use).

3.10 To comply with legal obligations

We may process, use, or share your data when the law requires it, in particular, if a law enforcement agency requests your data by available legal means.

4. UNDER WHAT LEGAL BASES WE PROCESS YOUR PERSONAL DATA 

In this section, we are letting you know what legal basis we use for each particular purpose of processing. For more information on a particular purpose, please refer to Section 3. This section applies only to EEA-based users.

We process your personal data under the following legal bases: 

1. your consent;

Under this legal basis we 

• may communicate with you regarding your use of our Service, for example, by sending you push notification reminding you to use the Website. 
• process the voice recordings you upload.
• collect your Apple Identifier for Advertising (“IDFA”).

2. to perform our contract with you;

Under this legal basis we:

• Provide our Service (in accordance with our Terms and Conditions of Use)
• Customize your experience
• Provide you with customer support
• Communicate with you regarding your use of our Service
• Process your payments.

3. for our (or others') legitimate interests, unless those interests are overridden by your interests or fundamental rights and freedoms that require protection of personal data;

We rely on legitimate interests:

• to research and analyze your use of the Service

Our legitimate interest for this purpose is our interest in improving our Service so that we understand users’ preferences and are able to provide you with a better experience (for example, to make the use of the Website easier and more enjoyable, or to introduce and test new features).

• to send you marketing communications

The legitimate interest we rely on for this processing is our interest to promote our Service, including new products and special offers, in a measured and appropriate way.

• to personalize our ads

The legitimate interest we rely on for this processing is our interest to promote our Service in a reasonably targeted way.

• to enforce our Terms and Conditions of Use and to prevent and combat fraud

Our legitimate interests for this purpose are enforcing our legal rights, preventing and addressing fraud and unauthorised use of the Service, non-compliance with our Terms and Conditions of Use.

• to investigate and respond to any comments or complaints that you may send us.
• In the event of a merger or acquisition of our business and/or all or any portion of its assets, your information may be disclosed to the prospective purchaser, our advisers, and any other prospective purchaser's advisers and will be one of the assets that is transferred to a new owner; and
• in connection with legal claims, compliance, regulatory and investigative purposes as necessary (including disclosure of information in connection with government agency requests, legal process or litigation).

Where we process your information based on legitimate interests, you can object to this processing in certain circumstances. In such cases, we will cease processing information unless we have compelling legitimate grounds to continue processing or where it is needed for legal reasons. To exercise your right to object, please see Section 6 of this Privacy Policy.

4. to comply with legal obligations, including, but not limited to, responding to requests by government or law enforcement authorities conducting an investigation.

5. WITH WHOM WE SHARE YOUR PERSONAL DATA

We share information with third parties that help us operate, provide, improve, integrate, customize, support, and market our Service. We may share some sets of personal data, in particular, for purposes and with parties indicated in Section 3 of this Privacy Policy. The types of third parties we share information with include, in particular: 

5.1 Service providers

We share personal data with third parties that we hire to provide services or perform business functions on our behalf, based on our instructions. We may share your personal information with the following types of service providers:

• • cloud storage providers (Amazon)
  • data analytics providers ( Amplitude, Tableau, Google, Clarity)
  • technological partners (DeepGram, OpenAI, AssemblyAI)
  • communication service providers ( Zendesk)
  • payment service provider (Solid, PayPal, Stripe)
  • marketing partners (in particular, social media networks, marketing agencies, email delivery services)

5.2 Law enforcement agencies and other public authorities

We may use and disclose personal data to enforce our Terms and Conditions of Use, to protect our rights, privacy, safety, or property, and/or that of our affiliates, you or others, and to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, or in other cases provided for by law.

5.3 Third parties as part of a merger or acquisition

As we develop our business, we may buy or sell assets or business offerings. Customers’ information is generally one of the transferred business assets in these types of transactions. We may also share such information with any affiliated entity (e.g. parent company or subsidiary) and may transfer such information in the course of a corporate transaction, such as the sale of our business, a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.

 5.4. Affiliates

We may share your personal information with our partner organisations that are part of our corporate group – these are companies that are owned by, own, or are jointly owned with us. These partner organisations will use the information in ways that align with this Privacy Policy.

6. HOW YOU CAN EXERCISE YOUR PRIVACY RIGHTS

To be in control of your personal data, you have the following rights:

Accessing / reviewing / updating / correcting your personal data. You may review, edit, or change the personal data that you had previously provided on the Website.

Deleting your personal data. You can request erasure of your personal data as permitted by law.

When you request deletion of your personal data, we will use reasonable efforts to honor your request. In some cases, we may be legally required to keep some of the data for a certain time; in such an event, we will fulfill your request after we have complied with our obligations.

Objecting to or restricting the use of your personal data. You can ask us to stop using all or some of your personal data or limit our use thereof.

Additional information for EEA-based users:

If you are based in the EEA, you have the following rights in addition to the above:

The right to lodge a complaint with supervisory authority. We would love you to contact us directly, so we could address your concerns. Nevertheless, you have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the EU Member State where you reside, work or where the alleged infringement has taken place.

The right to data portability. If you wish to receive your personal data in a machine-readable format, you can send a respective request to us as described below.

To exercise any of your privacy rights, please send a request to support@rileo.com.

7. AGE LIMITATION

We do not knowingly process personal data from persons under 16 years of age. If you are under 16, do not use or provide any information to or on this Website or through any of its features.

If you learn that anyone younger than 16 has provided us with personal data, please contact us, and we will work to delete that information from our databases.

We are not liable for any damages that may result from a visitor’s misrepresentation of age.

8. INTERNATIONAL DATA TRANSFERS

We may transfer personal data to countries other than the country in which the data was originally collected in order to provide the Service set forth in the Terms and Conditions of Use and for purposes indicated in this Privacy Policy. If these countries do not have the same data protection laws as the country in which you initially provided the information, we deploy special safeguards.

In particular, if we transfer personal data originating from the EEA to countries with not adequate level of data protection, we use one of the following legal bases: (i) Standard Contractual Clauses approved by the European Commission (details available here), or (ii) the European Commission adequacy decisions about certain countries (details available here).

9. CHANGES TO THIS PRIVACY POLICY

We may modify this Privacy Policy from time to time. If we decide to make material changes to this Privacy Policy, you will be notified by available means such as email and will have an opportunity to review the revised Privacy Policy. By continuing to access or use the Service after those changes become effective, you agree to be bound by the revised Privacy Policy.

10. U.S.  STATES PRIVACY NOTICE

Applicability

If you reside in a state that has enacted consumer privacy laws, this section applies to you. This U.S. States Privacy Notice (“Notice”) supplements our Privacy Policy and provides disclosures required by laws in states such as, for example,  California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia.

This Notice is designed to supplement our Privacy Policy to ensure compliance with state-specific laws and applies to the collection, use, and sharing of your Personal Information through our websites, mobile applications, and other online or offline services (collectively, the “Services”).

For California residents, this also serves as our California Notice at Collection.

The definition of “Personal Information” may vary by state law. Generally, it refers to information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

10.1. Categories of Personal Information We Collect and For What Purposes

The table below outlines the categories of Personal Information we collect, along with purposes of such collection. For more details, refer to other sections of our Privacy Policy.

For additional details on the purposes of processing and third parties with whom data is shared for each specific purpose, please refer to Section 3 of this Privacy Policy.

We may also process de-identified data, ensuring it cannot reasonably be linked back to you. We commit to maintaining and using de-identified data responsibly and will not attempt to re-identify such data unless required to validate our de-identification measures.

10.2. What Personal Information We Share

Certain state privacy laws, such as those in California, require us to disclose the categories of Personal Information that we have shared with third parties for business purposes over the past 12 months. During this period, we have disclosed all categories of Personal Information outlined in the “Categories of Personal Information We Collect” section for business purposes. For example, we may share IP addresses and device identifiers with service providers that assist us with crash monitoring and reporting.

Some U.S. states grant residents the right to opt out of sharing their Personal Information with third parties in exchange for valuable consideration (which may be classified as a “sale” or “share” under state privacy laws, even if no monetary transaction occurs). If you reside in one of these states and would like to limit the disclosure of your Personal Information to third parties for advertising or marketing purposes, please refer to Section 10.4. below.

For details regarding the categories of third parties with whom we share Personal Information, please refer to Section 3 and Section 5 of this Privacy Policy.

10.3. Your Privacy Rights Under State Laws

Certain U.S. state privacy laws grant residents specific rights regarding their personal information. If you reside in a state with such laws, you may have the following rights:

To exercise any of these rights, submit a request to our customer support team via email:

📧 support@rileo.com

Verification

To ensure that we properly handle the requests you make regarding your rights, we are required to verify those requests. Depending on the type of request, this may include your email, date of subscription purchase, date of last activity or some other Service use data that will reasonably identify you. We may also ask you for additional proof of identity, if necessary.

Right to Appeal

If we deny your request, you may have the right to appeal our decision. To do so, please contact us and explain your concerns. If you are dissatisfied with the result of the appeal, you may escalate the matter by contacting the Attorney General’s office in your state of residence.

Authorized Agents

If you are an authorized agent acting on behalf of a consumer, you may submit an opt-out, access, deletion, or correction request by contacting us. If you are making a request on behalf of a California resident, you may be required to submit proof of authorization, such as:

• A valid power of attorney
• Written permission signed by the consumer, along with identity verification from the consumer

California “Shine the Light” Law

California’s Shine the Light law gives California residents the right to ask companies once a year what personal information they share with third parties for those third parties’ direct marketing purposes. Learn more about what is considered to be personal information under the statute.

To obtain this information from us, please send an email message to support@rileo.com, which includes “Request for California Privacy Information” on the subject line and your state of residence and email address in the body of your message. If you are a California resident, we will provide the requested information to you at your email address in response.

Retention of Personal Information

We retain the categories of personal information listed above as reasonably necessary to fulfill the purposes outlined in this notice, unless a longer retention period is required or permitted by law. In many situations, we must retain all, or a portion, of your personal information to comply with legal obligations, resolve disputes, enforce our agreements, protect against fraudulent, deceptive, or illegal activity, or for another one of our business purposes.

10.4. Sales, Sharing, and Targeted Advertising

Privacy laws in some U.S. states broadly define the term “sale” to include sharing of information via cookies, pixels, and similar tracking technologies for certain targeted advertising activities. We do not sell Personal Information for monetary compensation. However, when you visit our apps, we and our advertising partners may collect device data and behavioral insights through tracking technologies, which could be interpreted as a “sale” or “sharing” under state laws, even if no money is exchanged.

We do not knowingly engage in sales, sharing, or targeted advertising using the personal information of individuals under 18.

More information about our data-sharing practices is available in the table below.

Opt-Out Rights

You may opt out of sales, sharing, or targeted advertising by contacting us at support@rileo.com.

Your opt-out settings apply per device and browser. If you switch devices, clear cookies, or use a different browser, you may need to reapply your opt-out settings.

11. DATA RETENTION

We will store your personal data for as long as it is reasonably necessary for achieving the purposes set forth in this Privacy Policy (including providing the Service to you, complying with our legal obligations, and enforcing Terms of Use and our other agreements). For example, to prevent abuse of trials, introductory offers, or discounts, we will retain records that you have previously initiated such trials as long as these offers remain available in our Service.

Please note that personal information may be retained for longer if it becomes the subject of a legal claim or is somehow relevant for litigation or other proceedings.

12. CONTACT US

You may contact us at any time for details regarding this Privacy Policy and its previous versions. For any questions concerning your personal data please contact us at support@rileo.com.

Effective as of: 26 February 2026