Privacy Policy

This policy explains what Ripple collects, why, and your choices. Ripple is operated by the controller named in the Terms.

What we collect

• Account: your email address and, if you use Google sign-in, the basic profile Google shares.
• Networks you share: network name, security type, the password (stored encrypted), the pin location and radius you choose, and whether it is premium or paused.
• Connections: which network you connected to, when, and by what method, so you can see your history. Owners see only a count.
• Access log: every time a password is released or refused we log the user, network, outcome and time, plus a salted hash of your IP address for abuse prevention. Entries are deleted after 90 days.
• Subscription: your plan status and billing identifiers. Card details are handled by Stripe and never reach us.
• Push tokens if you enable notifications.

Location

Your device position is sent to our server only when you ask to connect or to see networks nearby. We use it to check that you are inside a network's radius and then discard it. We do not store your coordinates and we keep no location trail. The only locations we store are the pins that owners place on networks they share. The app's background geofencing runs on your device; a list of network locations you have access to is monitored locally by your operating system.

Why we process it, and legal bases

• To provide the service you asked for (contract).
• To keep the service secure and prevent abuse, including rate limiting and access logs (legitimate interests).
• Location checks and notifications, based on your consent through the permission prompts on your device. You can withdraw it in your device settings at any time.
• Billing and tax records (legal obligation).

Advertising

Free accounts see rewarded ads before connecting. Ads are served by Google (AdMob and Google Ad Manager), which may process device identifiers and ad interaction data under its own policy. Where required, we ask for your consent first. Premium accounts see no ads.

Who we share data with

Processors that run Ripple: Supabase (database and authentication), Vercel (hosting), Stripe (web payments), Google (ads, sign-in), and the app stores for in-app purchases. We do not sell personal data.

Retention

Account data is kept until you delete your account. Access logs are kept for 90 days. Billing records may be kept as long as the law requires.

Your rights

You can access, correct, export and delete your data. In the app, open Account to download a copy of your data or to delete your account and everything linked to it, which also cancels any subscription. You may also contact us, and you have the right to complain to your data protection authority.

Children

Ripple is not for anyone under 16.

Changes

If we change this policy in a material way we will tell you in the app before it takes effect.