Privacy.

ACCESS

Data accessed

• Your Apple Music library
• Your Apple Music favorites
• Your progress and preferences, kept on your device (tracks sorted, sort or shuffle order, changes waiting to be sent, recent favorites)
• Your Ripple Pro purchase, checked with the App Store on your device
• The day's counter (the date and the number of tracks sorted), kept in the iOS Keychain
• Technical identifiers and IP address (analytics)

USAGE

What for

• Display your playlists
• Add tracks to playlists
• Create playlists
• Read your favorites to show which tracks are already in them
• Add a track to your favorites or remove it when you swipe
• Count the tracks you sort each day and unlock unlimited sorting if you have Ripple Pro

STORAGE

Local data only

Your music never passes through a server: your tracks, your playlists and your choices go straight from your device to Apple Music. Only a technical access key goes through our server, carrying no music data, because the app cannot work without it (article 6(1)(b) of the GDPR). This server is hosted by Fly.io in Paris and uses your IP address only in memory, to limit the number of requests, without storing it. Apart from that, the Ripple Pro check with Apple, the minimal signal and the usage analytics described below, nothing is sent.

PURCHASES

Ripple Pro

Ripple Pro is a one-time purchase on the App Store. Apple handles the payment under its own privacy policy: Ripple never sees your name or your payment details, only sales reports that don't identify you. To unlock Ripple Pro, the app asks Apple, from your device, which purchases belong to your Apple Account, without going through our server. The day's counter (a date and a number of tracks sorted), used for the limit of 50 tracks a day, stays in the iOS Keychain on your device and is never sent.

THIRD PARTY

Apple Music and App Store

Your Apple Music data and your Ripple Pro purchase are handled by Apple, under Apple's privacy policy.

ANALYTICS

Usage analytics

We use Google Analytics (website) and Firebase Analytics (app) to understand how Ripple is used: screens viewed, features used, when the Ripple Pro offer is shown and how a purchase or restore ends (for example purchased or canceled), app version, device type, approximate country. No track or playlist names are ever sent, nor any payment details. This data is pseudonymous: it is tied to a technical device identifier, never to your name or an account. It also includes your IP address, used by Google to estimate your country. Google signals, ad personalization and granular location and device data are turned off. Event data is retained for 2 months, user data for 14 months. Google processes this data in the United States: that transfer relies on the EU-US Data Privacy Framework, to which Google LLC is certified. Subject to Google's privacy policy.

WEBSITE

This website

goripple.app keeps two settings in your browser, your language and your analytics choice (kept for 6 months), and sets Google Analytics cookies only if you accept. To play previews and display the App Store rating, the home page loads files from Apple servers as soon as it opens. Like any web request, this sends your IP address to Apple. The site is hosted by OVH, in France. Like any web server, it keeps a technical log of the pages requested (IP address, page, browser) for 14 days, for security.

CONSENT

Your choice

Usage analytics only run if you accept them. On this website, the banner lets you accept or decline, and the Consent link at the bottom of each page lets you change your mind at any time. In the app, the choice is asked on the home screen once you are signed in, and stays available in the settings under “Help Ripple”. Declining does not change how Ripple works. The lawful basis for this processing is your consent, under article 6(1)(a) of the GDPR.

One exception, which does not depend on this choice: the app sends a minimal signal to goripple.app on first launch and when signing in to Apple Music succeeds or fails. Besides the event, the app version and the language, a failed sign-in adds the cause of the failure and, since version 1.88.1, three yes-or-no answers given by iOS about the Apple Music account: can it play Apple Music, can it subscribe, is library sync on. No identifier and no personal data, and your IP address is not stored. It only serves to count installs and Apple Music sign-ins, successful or not, and to understand why sign-ins fail, on the basis of our legitimate interest (article 6(1)(f) of the GDPR), and is kept for 90 days.

YOUR RIGHTS

Control

• Revoke Apple Music access in iOS Settings
• Log out, then delete the app, to erase its data on your device (only the day's counter may stay in the iOS Keychain)
• Write to hello@goripple.app to request deletion of analytics data
• Reopen the banner at any time with Consent, at the bottom of this page

GDPR

Your legal rights

The controller is Théodore Faraut Schwieg EI, whose address is on the legal notice. Under the GDPR you have the right to access, rectify, erase, restrict and object to the processing of your data, the right to data portability and the right to withdraw your consent at any time, without affecting earlier processing. French law also lets you set instructions for your data after your death. Write to hello@goripple.app: we answer within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL (cnil.fr), the French data protection authority.

CONTACT

Questions?

hello@goripple.app