DE
Cloud
Cloud

Privacy Policy

Effective date: October 20, 2026

R1BBIT is a platform for programming and controlling ESP32 boards. It is operated by VS TECH INC (“we”, “us”). This policy explains what information we collect, why we collect it, who we share it with and how you can delete it. It applies to the website r1bbit.com and its forum, the cloud service at cloud.r1bbit.com, the R1BBIT apps for iOS and Android, the web firmware flasher, and the boards you connect to them (together, the “Service”).

1. Information we collect

Account information

  • Your email address and display name.
  • Your password, stored only as a salted hash. If you sign in with Google or Apple, we receive your email address, name and an account identifier from Google or Apple through Firebase Authentication. If you use Apple’s “Hide My Email”, we receive a relay address instead of your real one.
  • Your plan, subscription status and preferences such as the interface language.

Your boards and their data

  • Board identifiers (device key and MAC address), board type, the name you give it, firmware information and online status.
  • Data your boards send: variables and sensor readings (telemetry), status messages, terminal output and logs.
  • Scripts, configurations, widget dashboards and files you keep in the Service or upload to your boards.
  • Wi-Fi network names and passwords you enter are passed to your board: directly over USB when you flash it in the browser, or through our servers when you configure a board from the app. We do not store them in your account.

Content you create

  • Messages you send to the AI assistant and anything you attach to them, such as photos or screenshots (see section 3).
  • Support requests, and posts and comments on the forum. Forum posts are public.

Technical and usage information

  • IP address, browser or app version, device model and operating system.
  • Approximate location (country and city), which we derive from your IP address when you sign in.
  • Which parts of the Service you use and when, such as app sessions and the pages you open. We use this to understand how the Service is used.
  • A push notification token, if you allow notifications.
  • Crash reports from the Android app (through Firebase Crashlytics): device model, system version and the state of the app when it crashed.

Payments

Paid plans are processed by Stripe. Your card details go directly to Stripe; we receive the plan, the subscription status and payment confirmations, never your full card number.

Phone permissions

The apps ask for permissions only for the features that need them:

  • Bluetooth and local network — to find and connect to your boards.
  • Location (Android) — Android requires it to scan for Bluetooth and Wi-Fi devices. The app does not read or send your location.
  • Camera — to take photos, for example to show the AI assistant your wiring.
  • Microphone — for push-to-talk voice rooms.
  • Notifications — to show alerts that your scripts send.

If you add a widget that uses your phone’s sensors, such as the accelerometer or the compass, its readings are sent to your board while the widget is in use.

Website

r1bbit.com uses cookies and Google Analytics to measure traffic and improve the site. You can block cookies in your browser settings; some features may then stop working.

2. How we use information

  • To provide the Service: connect your boards with the apps and the website, store telemetry, run your dashboards, deliver notifications and run the AI assistant.
  • To keep accounts secure and to prevent abuse and fraud.
  • To send service emails, such as address verification, password resets and important notices, and occasional tips to help you get started. Reply to any of them to stop the tips.
  • To answer support requests.
  • To understand how the Service is used and to find and fix problems.
  • To comply with the law.

We do not sell your personal information, we do not use it for advertising, and we do not track you across other companies’ apps or websites.

3. The AI assistant

When you use the AI assistant in the editor, we send your request to an AI provider to generate the answer. A request can include your message, the current script, recent terminal output from your board, your board type and any images you attach. We use OpenAI (United States) and Z.ai (Zhipu AI). They process the request on our behalf to produce the answer and may keep it for a limited time under their own terms. Please do not put passwords or other sensitive personal information into AI requests. The conversation history is stored on your device, in the app or in the browser.

4. Who we share information with

We share information only with service providers that help us run the Service, and only what they need for their task:

  • DigitalOcean — hosting for our servers and databases (California, United States).
  • Google Firebase — sign-in with Google and Apple, push notifications, and crash reports from the Android app.
  • Apple — Sign in with Apple and push notifications on iOS.
  • Stripe — payments and subscriptions.
  • OpenAI and Z.ai — the AI assistant (see section 3).
  • ip-api.com — to determine the country and city from an IP address.
  • Telegram — internal alerts to our team about events in the Service. An alert about a new sign-up can include the email address, name and approximate location.
  • Google Analytics — traffic measurement on r1bbit.com.

Voice and video rooms run on our own servers (LiveKit). Audio and video are streamed in real time and are not recorded. Email is delivered through our own mail servers. To keep the Service reachable in some countries, part of the traffic and email may pass through relay servers that we operate outside the United States.

We may also disclose information when the law requires it, or to protect the rights, property or safety of our users, the public or VS TECH INC.

5. How long we keep information

  • Account information, boards, scripts and dashboards — for as long as your account exists.
  • Telemetry history — for the period of your plan, from 3 days on the free plan up to 365 days on paid plans. Older data is deleted automatically.
  • Server logs and backups — for a limited time, after which they are overwritten.
  • Payment records — kept by Stripe for as long as the law requires.

6. Deleting your account

You can delete your account at any time:

After your request, the account is scheduled for deletion and permanently deleted 30 days later. If you have a paid subscription, it is cancelled, and the account is deleted when the paid period ends. Until then you can change your mind: sign in and restore the account. Deletion removes your profile, boards, scripts, dashboards, telemetry and other data linked to your account. Copies in backups are overwritten on a rolling basis. Records that we must keep by law, such as payment records held by Stripe, are kept for the required period.

7. Security

Connections to the Service are encrypted, passwords are stored as salted hashes, and access to our systems is limited to the people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Children under 13 should use R1BBIT together with a parent, guardian or teacher who creates and manages the account. If you believe a child under 13 has given us personal information, write to us and we will delete it.

9. International transfers

We process information in the United States and in the other countries where our service providers operate. Their data protection laws may differ from those of your country.

10. Your rights

Depending on where you live, including the European Union, the United Kingdom and California, you may have the right to access, correct, export or delete your personal information, to restrict or object to its processing, and to withdraw consent. We do not sell personal information or share it for cross-context behavioral advertising. To exercise your rights, write to info@r1bbit.com. You can also complain to your local data protection authority.

11. Changes to this policy

We may update this policy as the Service changes. The effective date at the top shows when it last changed. If the changes are significant, we will let you know in the Service or by email.

12. Contact

VS TECH INC
Email: info@r1bbit.com