Privacy Policy

Last updated: May 2026

1. Introduction

Rippl ("we", "our", "us") operates the Rippl mobile application. This Privacy Policy explains how we collect, use, and protect your personal information.

2. Information We Collect

2.1 Account Information

When you sign in with Google, we receive your name, email address, and profile picture. We use this solely for authentication and displaying your profile within the app.

2.2 Location Data

Rippl uses your device location to show nearby posts on the map and to tag your posts with a location. Location data is only collected while you actively use the app and is not tracked in the background.

2.3 Content You Create

Posts, comments, and reactions you create are stored on our servers. Photos you upload are stored in Supabase Storage. All posts are automatically deleted after 4 hours.

2.4 Pre-Registration Data

If you sign up for launch notifications on our website, we collect your name, email address, and preferred platform (iOS/Android). This data is used solely to notify you when Rippl launches and is deleted after launch. To request removal of your pre-registration data, contact us at [email protected].

2.5 Device Information

We collect basic device information (device type, OS version) for crash reporting and analytics via Firebase Crashlytics and Firebase Analytics.

3. How We Use Your Information

To provide and maintain the Rippl service
To display posts on the map near your location
To authenticate your identity
To improve app stability and performance
To send push notifications (with your permission)

4. Data Storage and Security

Your data is stored on Supabase (hosted on AWS) and protected by row-level security policies. Photos are stored in Supabase Storage with access controls. We use HTTPS for all data transmission.

5. Third-Party Services

We use the following third-party services:

Supabase: Database and file storage
Google Sign-In: Authentication
Firebase Crashlytics: Crash reporting
Firebase Analytics: Usage analytics
Mapbox: Map rendering
Cloudflare: CDN and media processing

6. Data Retention

Posts expire and become invisible after 4 hours. Associated media files are permanently deleted by a background cleanup process within 24 hours of post expiry.
Account information is retained until you delete your account
Crash logs are retained for 90 days

7. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

Access your personal data
Rectify inaccurate data
Request deletion of your data
Export your data
Object to processing
Withdraw consent

To exercise these rights, contact us at [email protected].

8. Account Deletion

You can delete your account at any time from the app settings. This will permanently remove your profile, all posts, and associated data from our servers.

9. Children's Privacy

Rippl is not intended for users under 13 years of age. We do not knowingly collect information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app.

11. Contact Us

For privacy-related questions, contact us at:
[email protected]