Privacy policy
What Ripple measures, and what it never sees
Ripple has no account, no sign-in and no profile. It shows no advertising and does not track you across other apps or websites. It does collect a small amount of anonymous usage and diagnostic data, and this page says exactly what.
Last updated 6 September 2026.
The short version
- No account. Ripple never asks who you are.
- No ads, and no tracking across other apps or websites.
- Nothing you draw leaves your device.
- It does count which surfaces get opened, and collects crash reports, so the app can be fixed and improved. None of it carries a name or an account, and there is no way for me to work out who it came from.
- Nothing is ever sold, to anyone.
That is the whole picture. Everything below is the detail - most of it required by UK data protection law, and written out in full so a school, a clinic or a cautious parent can check it properly rather than take my word for it.
Who is responsible
Ripple is made by Steven Brammah, an individual developer based in the United Kingdom, who is the data controller for the purposes of UK GDPR. You can reach me at ripple.sensoryspaces@gmail.com.
What Ripple never sees
- Your name, email address or password. There is no account and nothing to sign in to.
- Your precise location. Ripple never asks for Location Services and never receives GPS data.
- Anything you draw on the surface. Where you touch, how you drag and what patterns you make stay on your device and are never transmitted.
- Advertising of any kind. There are no advertising SDKs and no advertising identifier (IDFA), so Ripple shows no App Tracking Transparency prompt: it has nothing to ask for.
- Your device's vendor identifier (IDFV). Firebase collects this by default; Ripple turns it off, so the anonymous app-instance identifier below is the only identifier it sends.
- Your contacts, photos, microphone, camera, health or motion data.
Nothing Ripple does collect is ever sold, and none of it is shared with data brokers.
What Ripple does collect
All of it is anonymous. None of it is linked to your identity, because Ripple has no identity to link it to.
| What | Why | Processor |
|---|---|---|
| Which experiences you open, how you reached them, which Quick Starts you tap, and whether you turn the autoplay off or on | To understand which surfaces people actually use, so the catalogue can be improved | Google Firebase |
| Whether the unlock was purchased or restored | To make the purchase work, and to know whether the free tier is doing its job | RevenueCat, Apple, Google Firebase |
| Whether the unlock screen appeared, which locked experience prompted it, and whether it was dismissed | To know whether the free tier is doing its job | Google Firebase |
| Whether a grown-up turned the grown-up check on or off | To know whether that control is being found and used | Google Firebase |
| Crash reports - stack traces, device model, iOS version | To find and fix crashes | Google Firebase |
| Performance data - app start time, screen rendering, memory use | To keep the ripple smooth on older devices | Google Firebase |
| An anonymous app-instance identifier | So repeat sessions can be counted without knowing who you are. It is not an advertising identifier | Google Firebase |
| When the app is first opened, when a session starts, while the app is in the foreground, and when the app or iOS is updated | Collected automatically by Google Analytics rather than sent by Ripple | Google Firebase |
| The town or city your internet connection appears to be in, worked out from your IP address | To know where Ripple is being used, so support and translation can follow | Google Firebase |
Your IP address is used to work that out and is not stored by Ripple. This is what Apple's App Store privacy label calls Coarse Location. It comes from your internet connection, not from location services: Ripple never asks where you are, and none of this is tied to you.
Who processes it
Google Firebase
Analytics, Crashlytics and Performance Monitoring. See Firebase privacy and security.
RevenueCat
Manages the in-app purchase. It receives an anonymous app user ID and the purchase record from Apple. It never sees your Apple Account. See RevenueCat's privacy policy.
Apple
Handles the payment itself. I never see your payment details - only whether a purchase succeeded. See Apple's privacy policy.
Both Google and RevenueCat are based in the United States. Transfers outside the UK rely on the UK International Data Transfer Addendum and Standard Contractual Clauses.
Why it is lawful to collect
Under UK GDPR the lawful basis is legitimate interests for the analytics, crash and performance data - the interest being to keep a small, independently made app working and to improve it. That data is anonymous, minimal, and never used to make decisions about individuals.
For purchases the basis is performance of a contract: without a record of what you bought, the unlock could not be restored to you.
How long it is kept
Analytics events are retained for no longer than 14 months and are then deleted automatically. Crash and performance reports are retained for up to 90 days. Purchase records are kept for as long as the purchase is restorable, because that is what makes restoring it possible.
Children
Ripple is rated 4+ and is used by children, often on a device a parent or a school owns. It is designed with that in mind: there is no account to create, no personal information to enter, no advertising, no third-party content, and no way to contact anyone from inside the app. Four places open a page from this site in Safari: two rows in Settings - this privacy policy and the educator brief - and two links on the purchase screen, the privacy policy and the terms of use. All four go to a page on this site, and nothing in Ripple opens any other website. Two optional grown-up checks, using Face ID, Touch ID or the device passcode, can be turned on: one before anything is bought, and one before an experience is closed, before Settings is opened, and before either of the purchase screen's links opens a page in Safari. The two links in Settings are behind that same check, because Settings itself cannot be opened without passing it. So with that check on, no page opens in Safari without a grown-up. Both checks are off until a grown-up turns them on.
Ripple collects no personal data from anyone, children included. The anonymous usage data described above cannot identify a child, and is never used to profile or target anyone.
Your rights
Under UK GDPR you have the right to access, correct, erase or restrict the use of your personal data, and to object to processing based on legitimate interests. In practice Ripple holds no personal data about you, so there is usually nothing to retrieve - and deleting the app stops all collection immediately. If you want the anonymous data from your installation removed as well, email me and I will delete it.
If you are unhappy with how I have handled your data you can complain to the Information Commissioner's Office.
Changes to this policy
If what Ripple collects changes, this page changes first, and the in-app privacy screen changes with it. The date at the top of this page tells you when it was last revised.
Questions about any of this?
Email ripple.sensoryspaces@gmail.com. It comes straight to me.