The operator of Ripploom (the “Operator”) handles information only for clearly stated purposes necessary to provide the Service. This Privacy Policy applies to the Ripploom app and related website.
1. Information We Collect
Account information
We collect identifiers issued by Apple or Google, a display name and email address when first provided by the authentication provider, your Ripploom username, and profile image. If you choose Hide My Email with Apple, we process the relay address issued by Apple. We do not collect your password.
Content and activity
We collect text and images you post, categories, visibility settings, a country you optionally share, activity involving Catch, Manifest, Remix, and Reflect, and reports and blocks. We do not collect cities or GPS coordinates.
Notifications and device information
If you enable notifications, we collect a notification token, language, time zone, and notification settings. Server logs may record an IP address, request time, app version, and similar technical information for security and troubleshooting.
Optional analytics
Only when you explicitly consent, we use Firebase Analytics to collect feature-usage events, app and device information, and an opaque internal user ID. Analytics events do not include post text, photos, or email addresses. You can disable analytics at any time in the app’s Settings screen.
2. How We Use Information
- To provide authentication, posts, Ripple Trail, notifications, and other Service features
- To review content safety, respond to reports, and prevent misuse
- To respond to inquiries and send important notices
- With consent, to analyze usage patterns and improve the Service
- To investigate failures, maintain security, and comply with legal obligations
3. Service Providers
We send or store information with the following providers only as needed to operate the Service. Potential faces are checked on your device before posting, and photos are not sent externally for that face check.
- Apple / Google: sign-in authentication
- Cloudflare: APIs, basic text safety checks, databases, image storage and delivery, and security
- Google Cloud: image safety checks when optional cloud image analysis is enabled
- Google Firebase: push notifications and, with your consent, usage analytics
Each provider processes information under its own privacy policy. Information may be processed on servers outside your country or region. Safety checks assist publication and privacy decisions; an account will not be suspended solely because of an automated result.
4. Disclosure to Third Parties
We do not disclose personal information to third parties except with your consent, where necessary for a service provider, in connection with a business transfer, or where required by law.
5. Information Visible to Others
If you publish content publicly, your username, profile image, post content, selected country, and action connections may be visible to other users. We do not make your email address, precise location, or notification token public.
6. Retention and Deletion
We retain information only for as long as needed for the purposes described above or as required by law. When you delete a post, we remove its photo, text, country information, and association with you. To preserve Ripples created by other users and the structure of a Trail, we may retain the post ID, parent-child relationship, category, and creation time as an anonymous deleted node. After account deletion, content is similarly deleted or anonymized. Information needed for legal compliance, fraud prevention, reports and safety matters, or backup rotation may be retained only for the necessary period.
7. Your Choices and Rights
You can change your profile, notification settings, analytics consent, and visibility settings in the app. You may contact us to request access, correction, deletion, or restriction of your information, subject to applicable law. We may need to verify your identity.
8. Security
We use reasonable safeguards such as encryption in transit, access controls, separation of secrets, and expiration of authentication tokens. No method of transmitting or storing information on the internet is completely secure.
9. Children’s Privacy
If the law where you live requires parental consent at your age, you must obtain that consent before using the Service. If we learn that information was collected without required consent, we will take appropriate steps to delete it.
10. Changes to This Policy
When this Policy changes, we will update the last-updated date on this page. Material changes will be communicated in the app or by another reasonable method.
11. Contact
Please contact us through the contact form or the support page.