Privacy Policy

1. What we collect

If you use Ripple without an account

• Your alarms and alarm history are stored only on your phone. We never receive them.
• Usage analytics via PostHog, such as which screens you open and which features you use. These are linked to a random ID created by the app, not to your name or email.
• Crash reports via Sentry, so we can fix what breaks. These are also linked only to that random ID.

If you choose to sign in

We also collect:

• Your account email. You can sign in with Google, with Apple on iPhone, or with an email and password. If you use Sign in with Apple and choose to hide your email, we receive a private relay address. If you use email and password, Supabase Auth stores the password in hashed form. We do not keep a copy of the password.
• A backup copy of your alarms: the label you type, the times, the interval, and the category, including any custom categories.
• A backup copy of your alarm history: when each alarm fired and whether it was dismissed, snoozed, skipped, or missed.

When you sign in, analytics and crash data collected on that phone are linked to your account ID.

Alarm labels are free text, and you decide what goes in them. If you don't sign in, labels never leave your phone. If you do sign in and name a medication, a medical procedure, or anything else personal, that text is stored with your backup. "Morning dose" works as well as the drug name.

2. What we do not collect

We don't ask for your name, your location, your date of birth, or any health records. We don't track you across other apps or websites. We don't sell your data to advertisers, and we never will.

3. How we use your information

• Deliver your alarms and reminders on schedule
• Back up and restore your alarms and history, if you sign in
• Manage your Pro subscription
• Improve reliability and fix bugs
• Reply to support emails you send us

We don't use your alarm content for advertising, and we don't use it to train machine learning models.

4. Notifications and device permissions

Ripple asks for notification, exact alarm, and full-screen intent permissions so alarms can ring on time and take over the lock screen. You can revoke these in your device settings at any time, but alarms may not fire as expected afterwards.

Alarms are scheduled and ring on your phone. They work without an internet connection and without an account.

If you sign in on more than one phone, each phone updates its alarms from your backup when it next connects. Ripple does not sync live between devices.

5. Where your data is stored, and who processes it

Without an account, your alarms and history are stored only on your phone.

If you sign in, your backup and account details are stored in our Supabase database, hosted in Sydney, Australia. Our API runs at api.ripplealarm.com.

Some third parties process data in the United States:

• RevenueCat: subscription and billing management
• PostHog: product analytics, linked to a random app ID, or to your account ID if you sign in
• Sentry: crash reporting, linked to a random app ID, or to your account ID if you sign in

Other processors:

• Supabase: account sign-in and backup database (Sydney)
• Apple and Google: Sign in with Apple, Sign in with Google, and payment processing through the App Store and Google Play

For users in the UK and EU, transfers outside your region rely on our providers' GDPR safeguards, including data processing agreements and Standard Contractual Clauses where applicable.

We don't share your alarm content with anyone outside this list.

6. Security

Data on your phone is protected by your device's standard operating system encryption. Backups in our database are encrypted at rest using AES-256 and in transit using TLS.

No system is perfectly secure, but we keep the amount of personal data we hold deliberately small.

7. Data retention and deletion

Without an account: your alarms and history live only on your phone. Uninstalling Ripple deletes them, and we can't recover them. Your phone's own backup (iCloud or Google) may include them, depending on your device settings.

With an account: your backup stays in our database until you delete alarms or close your account. Signing out stops backing up that phone but does not delete the backup. Uninstalling the app does not delete your backup either.

Your alarms stay on the phone and keep ringing.

Closing your account deletes your account email and profile, your backed-up alarms, alarm history, custom categories and sign-in credentials from our database. We hold no further backups, so this can't be undone. Alarms already on your phone stay there until you delete them or uninstall the app.

Some records sit outside our database. Apple and Google keep their own record of your purchases, which we can't delete. RevenueCat, which manages subscriptions for us, also keeps a purchase record, and you can ask us by email to have it removed. Limited diagnostic data held by our analytics and crash-reporting providers is kept under their own retention schedules. You can ask us to have that removed too by emailing hello@ripplealarm.com.

You can delete your account from Settings → Delete account in the app, or at ripplealarm.com/delete-account.

8. Your rights

You can stop using an account at any time and keep using Ripple without one. You can also email hello@ripplealarm.com to request a copy of your data, correct it, or have it deleted, and we'll act on it within 30 days. If you don't have an account, the only data we hold about you is analytics and crash data linked to a random app ID, plus a purchase record held by our subscription provider if you bought Pro.

If you're in the UK or EU, you have rights under GDPR including access, correction, deletion, restriction, and portability, and the right to complain to your local data protection authority. If you're in California, you have rights under the CCPA. We apply the same standard to everyone regardless of where you live.

9. Children

Ripple isn't directed at children under 13 and we don't knowingly collect their personal information. If you believe a child has created an account, email us and we'll remove it.

10. Changes

We may update this policy. Material changes will appear on this page with a new date, and we'll tell you in the app before they take effect.

11. Contact

Questions about privacy, or a request about your data? Email hello@ripplealarm.com. We reply within 1–2 business days.