The short version
Rivona Player has no developer-operated account, advertising, analytics or tracking. Local media and library records stay on your devices by default. If you choose a network source, your device connects to that source. If you enable Private Sync, only favorites, playlists, playback progress and allowlisted preferences are stored in your private Apple CloudKit database.
Local media and library data
Media you add from Files or a selected folder remains under your control. Rivona stores the library information needed to find and play it, including titles, artists, albums, playback position, favorites, playlists and app settings. Local cache files, edited artwork and compatibility results remain on your device. Rivona does not operate a server that receives this library.
Network media and WebDAV
When you enter an HTTPS audio, video, HLS or WebDAV address, your device connects directly to the server you selected. That server may receive normal connection information such as your IP address and request details under its own policy. WebDAV usernames and passwords are stored in the Apple Keychain on your device and are excluded from Rivona reports and CloudKit records. Rivona does not proxy or copy your media through a Codeverything server.
Optional Private Sync
Private Sync is off until you enable it on each device. When enabled, favorites, playlists, playback progress and a limited allowlist of preferences are stored in your private CloudKit database and processed by Apple so your signed-in Apple devices can merge them. Media files, artwork, file names, paths, security-scoped bookmarks, WebDAV credentials, cache files, compatibility samples, purchase records, transaction identifiers and diagnostic exports are excluded.
Purchases
Apple StoreKit processes Lifetime Unlock and purchase restoration. Rivona receives only the entitlement information needed to unlock features and respond to refunds or revocations. Codeverything does not receive your payment-card details, Apple Account password or full purchase credentials.
Diagnostics and support
Compatibility, playback-quality and sync diagnostics are generated on your device. Rivona does not upload them automatically. If you choose Export Report and later send that file to support, the report is designed to omit raw paths, URLs, credentials and account identifiers, but you remain in control of whether it is shared.
What we do not do
- No Rivona account or sign-up.
- No advertising, cross-app tracking or advertising identifier.
- No developer-operated analytics or telemetry upload.
- No automatic upload of media, artwork, file paths or diagnostics.
- No public CloudKit database for your library state.
Playback integration and notifications
Rivona publishes the current item to Apple's system Now Playing interface so Lock Screen, Control Center, AirPlay and media-key controls can work. Background audio and remote notifications support playback and optional private sync. These are Apple platform features and are not advertising or analytics services.
Retention and deletion
Local library and cache data remain until you remove them in Rivona or uninstall the app. Source files outside the app are not deleted by Rivona's cache controls. Private Sync records remain in your private iCloud database until they are removed through the app or your Apple account controls. Disabling sync stops future synchronization on that device but does not silently delete your local library.
Children
Rivona is a general-purpose media player and is not directed to children. It has no account, advertising or developer-operated data collection from children or adults. The content you choose to play remains your responsibility.
Changes
If a future Rivona release changes these practices, this policy and the App Store privacy information will be updated before that version is released.
Contact
Questions? Email support@codeverything.cn.