Privacy Policy

Last updated: June 24, 2026

rippl is built privacy-first. The practice lives on your device. You don't need an account, we don't sell your data, we show no ads, and your reflections and voice never leave your phone. This page explains exactly what that means, and the small amount of data that does leave the device, and why.

Who we are

rippl ("we", "us") is a mindful-hydration app published for iOS and Android. For any privacy question or request, contact us at zorzen.xyz@gmail.com.

Our approach: local-first, no account

rippl works fully offline from first launch. There is no sign-up, no login, and no user profile on our servers. Your hydration logs, intentions, journal reflections, and settings are stored on your device. We have no backend that holds your personal content.

What stays on your device (never collected by us)

  • Voice gratitude journal. Speech is transcribed by your device's own speech recognizer. The audio is never recorded to a file and never uploaded. We keep only the transcribed text, on your device.
  • Journal text and intentions. Your written reflections and the intentions you choose stay on the device. They are never sent to us, to analytics, or to any third party.
  • Hydration logs. Your water intake and the Garden you grow are stored locally and are not transmitted off the device.
  • Motion sensors. The accelerometer is used only to animate the on-screen blossom. It is read momentarily and never stored or sent.
  • Reminders. Gentle reminders are scheduled locally on your device. There is no push server and no network call involved.

The little that does leave your device

There are only two off-device data flows, and both are minimal:

  • Analytics (Google Firebase Analytics). To understand how the app is used in aggregate, rippl sends event-level analytics to Google Firebase Analytics, for example, that a screen was viewed or a glass was logged, with a water amount and the chosen intention's name. We never send your journal text, your voice, or any free-text or personally identifying content as part of analytics. Firebase also assigns a per-installation identifier (an App Instance ID) and collects standard device and usage signals. See Google's Firebase privacy and security documentation.
  • Weather (Open-Meteo). If you allow location access, rippl can show weather-aware hydration nudges on warm or dry days. To do this it reads your approximate location at low accuracy, rounds it to about 10 km, and sends only that rounded coordinate to the free Open-Meteo weather service to retrieve conditions. No account, no API key, and no identifier is attached. We never request or use your precise location. If you decline location, the app simply skips this feature.

All data transmitted off the device is encrypted in transit (HTTPS/TLS).

What we do not do

  • We do not sell or rent your data.
  • We do not use your data for advertising or ad targeting, and rippl shows no ads.
  • We do not turn your reflections or mood into a public score or surveillance.
  • We do not collect your name, email, contacts, photos, messages, or files.

Subscriptions and payments

rippl's daily practice is free. An optional membership, rippl bloom, may be offered as an auto-renewing subscription. When billing is available, purchases are processed entirely by Google Play Billing (or the Apple App Store on iOS). The app store handles your payment; rippl never sees your card or payment details. Manage or cancel a subscription anytime in your Google Play or App Store account settings.

Data retention and deletion

Because rippl is local-first, you are in control of your data:

  • Delete everything on your device by using any in-app reset option and/or by uninstalling the app. Uninstalling removes all locally stored content: logs, journal, intentions, and settings.
  • Analytics data. To request deletion of the analytics data associated with your app installation, email us at zorzen.xyz@gmail.com and we will action it. We retain event-level analytics only as long as needed to understand product usage.

Your rights

Depending on where you live (including under the GDPR and CCPA/CPRA), you may have the right to access, correct, or delete your personal data, and to object to or opt out of certain processing. Because rippl keeps your content on your device and does not sell data, you can exercise most of these rights directly on the device. For analytics-related requests, contact zorzen.xyz@gmail.com. We do not discriminate against you for exercising any privacy right.

Children

rippl is intended for adults and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has used the app in a way that sent data to us, contact zorzen.xyz@gmail.com and we will delete it.

Security

Data transmitted off the device is encrypted in transit with TLS. Your personal content is kept on your device under the operating system's app sandbox. No method of storage or transmission is perfectly secure, but we minimize what we collect precisely so there is very little to protect off-device.

Changes to this policy

If we change how rippl handles data, we'll update this page and the "Last updated" date above, and for material changes, surface it in the app. If a future version of the app collects more than is described here, we'll update this policy and the app store data disclosures before that version ships.

Contact

Questions or requests: zorzen.xyz@gmail.com.

Inspired by the work of Dr. Masaru Emoto. Offered as reflection, not medical advice.