Privacy Policy

Last updated: June 3, 2026

This Privacy Policy explains how Ripe ("we," "us," or "our") collects, uses, and protects your information when you use the Ripe mobile application.

1. Information We Collect

Information you provide:

• Phone number or email address (used for authentication)
• If you sign in with Apple or Google, the name and email address those providers share with us at sign-in (used to create your account)
• Display name and @handle
• Profile photo (optional)
• Session photos you upload to your memory vault
• Chat messages sent during active sessions (ephemeral — deleted when the session ends)

Information collected automatically:

• Device location — only when you grant permission and only when the app is in the foreground, used to detect gym arrivals for check-in prompts. We do not store a history of your location.
• App usage data (screen views, feature interactions, anonymous user identifier) — collected via PostHog Analytics to understand how the app is used. Not sold or used for advertising.
• Diagnostic data (crash reports, error stack traces, device model, OS version, app version) — collected via Sentry when the app encounters an error, used solely to diagnose and fix bugs.

2. How We Use Your Information

We use your information exclusively to:

• Create and maintain your account.
• Enable coordination features (friend feeds, session groups, check-ins).
• Build your personal climbing history and memory vault.
• Send push notifications about your sessions and friend activity (you may opt out in your device settings at any time).
• Improve the reliability and performance of the service.

We do not use your data for targeted advertising, and we never sell your information to third parties.

3. Information Sharing & Service Providers

With friends you choose: Your display name, profile photo, and climbing plans are visible to your mutual friends within the app. With the optional Discover Climbers feature (below), a limited preview may also be visible to non-friends who opt in.

Discover Climbers (optional, off by default): If you turn on Discover Climbers and share a plan at a gym, your display name, profile photo, planned time block, and climb type become visible to other climbers who have also turned on Discover Climbers and have a plan at the same gym — even if you are not friends. Discovery is symmetric: you are only visible to others while you are discoverable yourself, and you only ever see people who have opted in too. Users you have blocked are never shown to you, and you are never shown to them. You can turn Discover Climbers off at any time in Settings, which stops sharing your future plans.

Service providers we use: The following third-party processors handle data on our behalf under standard data processing agreements. None of them use your data for their own purposes or for advertising.

• Supabase (supabase.com) — backend infrastructure for authentication, database, and photo storage.
• PostHog (posthog.com) — product analytics (anonymous usage events and feature interactions).
• Sentry (sentry.io) — crash and error diagnostics.
• Google Cloud Vision — automated NSFW screening of uploaded photos. Images are sent to Google for classification only and are not retained by Google after the request completes.

Contacts: If you opt in to the "Find friends from contacts" feature, your contacts' phone numbers are transmitted to our backend solely to look up which numbers belong to existing Ripe users. The phone numbers are not stored, logged, or used for any other purpose — they are discarded after the lookup completes.

Legal requirements: We may disclose your information if required to do so by law or in response to valid legal process.

We do not share your information with advertisers, data brokers, or any other third parties beyond the above. We do not engage in cross-app tracking and do not link your data with data from other companies' apps or websites.

4. Data Retention

• Session chat messages are deleted automatically when a session ends.
• Unsent intents and daily plans roll over at midnight each day.
• Your profile, session history, and memory vault photos are retained until you delete your account.
• Upon account deletion, all personal data is permanently and irreversibly erased.

5. Your Rights & Choices

• Access: You can view your data within the app at any time.
• Correction: You can update your display name and photo from Edit Profile.
• Deletion: You can permanently delete your account — and all associated data — from Profile → Settings → Delete account.
• Notifications: You may disable push notifications at any time in your device's Settings app.
• Location: You may revoke location permission at any time in your device's Settings app. This disables the gym check-in proximity prompt but does not affect other features.

6. Location Data

Ripe requests "When In Use" location permission (foreground only). Location is used solely to detect proximity to a gym you have planned to visit and to prompt you to check in. Your precise location is never stored, shared, or used beyond this single purpose.

7. Photos & Camera

Camera and photo library access is requested only when you choose to add a photo to a session memory. Photos are stored securely in our cloud storage and are accessible only to the members of the session in which they were taken.

8. Children's Privacy

Ripe is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

9. Analytics & Tracking

We use PostHog and Sentry to understand how the app is used and to diagnose problems. These tools collect anonymous identifiers, screen-view events, feature-interaction events, and crash diagnostics. They do not use advertising identifiers (such as Apple's IDFA), and we do not track you across other companies' apps or websites. Because we do not engage in "tracking" as defined by Apple's App Tracking Transparency framework, we do not display an ATT prompt.

10. Security

We implement industry-standard technical and organisational measures to protect your information, including encrypted data transmission (TLS) and secure cloud storage. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via a notice in the app. Your continued use of Ripe after changes are posted constitutes your acceptance of the revised policy.

12. Contact Us

For privacy-related questions or requests, please email us at support@ripeclimb.com.