Privacy Policy

Last updated: 23 July 2026

This Privacy Policy explains how Ripple ("Ripple", "we", "us") collects, uses, and protects information when you use the Ripple mobile application and ripple-fishing.com (together, the "Service").

1. Information we collect

• Account data: email address and password hash (managed by Supabase Auth) when you create an account. You can also use Ripple as a guest without an account.
• Photos you upload: images of water you upload for AI analysis. We may store these temporarily to generate your scan result and improve service quality.
• Location: approximate GPS coordinates if you grant location permission, used to tailor species suggestions, weather, and conditions-based notifications.
• Catch log: entries you choose to save (species, weight, length, location, notes, photos).
• Device data: device push token, app version, OS version, crash and performance logs.
• Purchase data: subscription status from the App Store, Google Play, and RevenueCat. We never see your card details.
• Usage analytics: aggregated events (screens viewed, features used) via PostHog, used to improve the product.

2. How we use information

• To deliver core features (AI analysis, catch logging, notifications).
• To send transactional and re-engagement emails (welcome, trial reminders, and similar).
• To maintain account security and prevent abuse.
• To analyse and improve product performance and accuracy.
• To comply with legal obligations.

3. AI processing and third-party services

When you run a scan, your photo, approximate location, and current weather conditions are sent to OpenAI for analysis. This data is not used to train third-party models. The app asks for your explicit consent before the first scan, and you can withdraw that consent at any time in Settings.

We share the minimum data needed with the following processors:

• Supabase — authentication, database, storage, edge functions.
• OpenAI — image and conditions analysis.
• RevenueCat — subscription management.
• Apple App Store / Google Play Billing — purchases.
• Resend — transactional email delivery.
• Expo / Firebase Cloud Messaging — push notifications.
• PostHog — anonymous product analytics.

4. Data retention

We retain account and catch-log data while your account is active. Uploaded scan photos may be retained for up to 90 days for quality monitoring, then deleted. You can delete your account and all associated data at any time — see Data Deletion.

5. Children

Ripple is not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

6. Your rights

Subject to applicable law (including the Australian Privacy Act 1988), you may request access to, correction of, or deletion of your personal information. Contact [email protected].

7. Security

We use industry-standard encryption in transit (TLS) and at rest where supported by our infrastructure providers. No system is perfectly secure — please use a strong, unique password.

8. International transfers

Our processors operate servers in multiple countries, including the United States and the European Union. By using Ripple you consent to your data being transferred and processed in those locations.

9. Changes to this policy

We may update this policy from time to time. Material changes will be notified in-app or by email. The "Last updated" date above always reflects the current version.

10. Contact

Questions or requests: [email protected].