Privacy Policy

In short

• Ripp keeps what it needs to run your account, read the Reels and TikToks you share, keep your Library and apply your plan. It shows no ads, sells nothing about you and doesn’t track you across other apps or websites.
• The reading is done by an AI model on Ripp’s servers. It sees the public video, never anything about you.
• You can delete your account, and everything linked to you, from Profile at any time.
• Questions and requests: info@ripp.app.

Who is responsible

RIPP APP LTD, company number 17523455, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, is the controller of your personal data in Ripp: it decides what Ripp keeps and why. It has paid its data protection fee to the UK Information Commissioner’s Office. Write to info@ripp.app about anything on this page.

Ripp is a UK company. If you live in the European Union, this page applies to you too, under the EU’s General Data Protection Regulation as well as the UK’s.

What Ripp keeps

• Your account: how you signed in, and what that way in gives Ripp. With Sign in with Apple, the identifier Apple gives Ripp and the email address Apple shares, which can be a private relay address. With Sign in with Google, the identifier Google gives Ripp, your Google email address and whether Google has verified it. With email, your address and, if you set one, a password, stored only as a one-way hash that nobody can read back. Ripp asks Apple and Google for nothing else and never stores your name. Ways in that share a verified email address become one account.
• Signing in: when you signed in, and your iPhone’s internet address and device details at that moment, to keep you signed in and to spot misuse. They stay until you sign out or delete your account. A sign-in code works once, for 10 minutes, and only a hash of it is stored.
• Your language: your iPhone’s language, so Ripp’s emails reach you in English or Spanish.
• What you accepted: which version of these pages, and when.
• Your imports: the Reel and TikTok links you share, the Routines Ripp reads from them, when, and a random identifier for your iPhone so it can recover its own imports. Ripp keeps the public address of each link while your account exists; anything in the link that could say who shared it is removed when you delete your account.
• Your Library: the Routines and Collections you save, and the names you give them. Today they live on your iPhone. A coming update also keeps them on Ripp’s servers, so they come back on a new iPhone when you sign in; this page will say so when it does.
• Your plan: whether you have Free or Pro, how (a subscription, a Pro Lifetime purchase, or a free period Ripp gives) and until when, whether it renews, which Routine Free keeps unlocked, and when you rip or unlock a Routine, so Ripp can apply each plan’s limits. Ripp never sees your card or other payment details: Apple takes the payment.
• What you send Ripp: problem reports and their notes, and the names and clip times you change, which show Ripp where its reading went wrong.
• Running records: what each reading cost and how long it took, and server logs kept for troubleshooting. After 90 days, Ripp removes the Reel or TikTok link and any error text from the running records of your account; what the reading cost and took stays, because it’s Ripp’s record of what it paid for.

Names, Collection names and report notes are free text that only you write. Ripp reads them only to show them back to you and to fix its readings, and treats them as ordinary data, so please don’t put health details or other sensitive information in them.

Ripp shows no ads, sells nothing about you and doesn’t track you across other apps or websites. It makes no decision about you by automated means that has a legal or similarly significant effect.

How a Reel is read

The reading happens on Ripp’s servers, never on your iPhone. Ripp fetches the public video, caption and creator from Instagram or TikTok without signing in to any account, and sends the video, caption and transcript to Google’s Gemini API, an AI model, which returns the Routine: the Movements, their times in the video, instructions, cues and any time or reps the creator stated. The reading is automatic and can be wrong, which is why Ripp asks you to check each Routine against the creator’s video.

Google receives the public video and text, and nothing about you: no account identifier, email address or internet address of yours. Ripp uses Google’s paid Gemini API service, under whose terms Google doesn’t use what Ripp sends to improve its products or train its models. Ripp deletes each uploaded video from Google as soon as the reading is done, and Google deletes any it missed within 48 hours. Google keeps the prompt and the answer for 55 days to detect abuse of its service, then deletes them. Ripp trains no AI model of its own, and your problem reports stay in Ripp’s database.

Who handles it for Ripp

These companies process data on Ripp’s behalf and on its instructions, under a data processing agreement with each:

• Supabase (Supabase, Inc.): the database, sign-in and private video storage, in the EU (Ireland). When you set a password, Supabase checks it against Have I Been Pwned’s list of leaked passwords. Only the first five characters of a hash of it are sent, never the password, so nothing that could identify you leaves Supabase.
• Render (Render Services, Inc.): runs Ripp’s servers, in the EU (Frankfurt), and keeps their logs for troubleshooting. Its network provider, Cloudflare, carries the traffic to them.
• Google (Gemini API) (Google LLC): reads each video into a Routine, as described above. It gets the video, caption and transcript, nothing about you.
• Apify (Apify Technologies, Czech Republic): a fallback that reads a Reel’s public page when Ripp’s own read fails. It gets the Reel link only, never anything about you.
• RevenueCat (RevenueCat, Inc.): keeps your purchase history from Apple and tells Ripp which Pro subscription or Pro Lifetime purchase is active, so Pro works. It gets your account identifier, Apple’s record of the purchase, when Ripp showed you the plans, and what any app request carries: your internet address, iPhone model, iOS version, Ripp’s version, language and App Store country. It gets no email, name or Library.
• Microsoft (Microsoft 365, through GoDaddy): Ripp’s mailbox, when you write to Ripp or reply to one of its emails.
• ZeptoMail (Zoho): sends Ripp’s emails from Zoho’s EU data centre: your sign-in codes and the notice when your password changes. It gets your email address and each message. Its log keeps the address, subject, time and delivery status of each email for 60 days. The subject holds the code, which stopped working after 10 minutes. It doesn’t keep the rest of the email. If an email bounces or is marked as spam, Zoho may keep the address on a list so that nothing more is sent to it. Zoho’s support staff outside the EU can reach the account for support, under standard contractual clauses.
• Cloudflare Turnstile: before Ripp sends a code or accepts a password, a check in the app tells people from bots. Now and then it asks you to tap a box. Cloudflare gets signals from your iPhone, such as your internet address and technical details of its connection and browser engine. It uses them for Ripp to stop bots, and for itself to improve that detection, and says it doesn’t use them to identify, profile or target anyone, and that the check sets no cookie. Ripp gets only a one-time pass that lasts 5 minutes, and keeps nothing from the check. Sign in with Apple and Sign in with Google skip it.
• Planned: Sentry for crash reports and PostHog for usage counts, both in the EU and keyed to your account identifier, never your email. Usage counts include when Pro starts or ends, but never a price or your country. Neither is in Ripp today; this page will name them as processors before either starts.

These companies decide for themselves how they use data, under their own privacy policies:

• Apple: Sign in with Apple and the App Store, which delivers Ripp and sells and bills Pro. Apple tells Ripp the identifier and the email address you chose to share; if you hide your email, Apple’s private relay forwards Ripp’s emails to your real address, and Apple says it doesn’t read them beyond spam filtering and deletes each once delivered. Apple keeps its own record of your purchases.
• Google (sign-in): if you choose Continue with Google, you sign in on Google’s own page. Google tells Ripp your account identifier, your email address and whether it’s verified, and knows that you signed in to Ripp. Ripp holds no Google token and can reach nothing else in your Google Account.
• Instagram and TikTok: your iPhone loads a Reel’s or TikTok’s cover picture, and its video until Ripp’s clips are ready, straight from their servers, which see your iPhone’s internet address, as when you open a post there. A TikTok share link is opened by your iPhone the same way, without cookies. Ripp sends them nothing about you.

Where your data goes. Ripp stores your data in the EU (Ireland and Frankfurt). Some providers are United States companies, or reach data from outside the UK and the EU for support: Supabase, Render, Cloudflare, Google, RevenueCat, Microsoft and Zoho. For each, Ripp relies on its data processing agreement, with the EU’s standard contractual clauses and the UK’s addendum to them, or on the provider’s certification under the Data Privacy Framework between the United States and the EU and UK. Write to info@ripp.app for details of the safeguard that covers a given provider.

Why, and on what legal basis

• To run the service you asked for (the contract between you and Ripp, the Terms): your account, sign-in and its emails, your imports and their readings, your Library, your plan and its limits, and notices about your account.
• In Ripp’s legitimate interest in keeping Ripp working, safe and affordable, weighed against your interests: problem reports, cost and error records, daily and fair-use limits, sign-in records, the check that tells people from bots, and server logs. You can object to any of these (see Your rights).
• With your consent: the ripp.app waitlist, if you joined it. You can withdraw it at any time.
• To meet legal obligations: accounting records of what Ripp paid for each reading, kept without anything that links them to you, and records of takedown requests.

Ripp collects no special category data on purpose, such as health data. The Routines you save say what you exercise, not why, and Ripp doesn’t infer anything about your health from them.

How long Ripp keeps it

• Your account, sign-in records, Library, plan, reports and edits: until you delete your account.
• Your imports: the Routine and the public address of each link stay as Ripp’s shared record of that public video; everything that links them to you goes when you delete your account.
• Running records: the link and any error text go 90 days after the reading, or at once when you delete your account; cost and timing stay, without anything that links them to you.
• Server logs: up to 30 days at Render, and 7 days at Supabase.
• Emails Ripp sent you: ZeptoMail’s log for 60 days, as above.
• Backups: Supabase keeps daily backups for 7 days, so a deleted account can stay in one for up to 7 days.
• Clips of creators’ videos: until the creator asks for them to be removed (see Takedown requests), or until no Ripp account holds that Reel or TikTok any more.
• Emails you write to Ripp: for as long as needed to deal with them, and takedown requests for as long as the video stays blocked.

Deleting your account

Delete your account in Profile at any time, whichever way you signed in. If you signed in with Apple, Ripp revokes its Sign in with Apple access. Ripp holds no Google token, so there’s nothing for it to revoke at Google, and you can remove Ripp from your Google Account’s settings. Ripp then deletes your account, your sign-in records, your Library, your problem reports and the names and clip times you changed at once, along with your address if it’s on the ripp.app waitlist, and your Library on that iPhone. The clips stored from your Reels and TikToks go too, unless someone else who uses Ripp still has that Reel or TikTok. The Routines read from Reels stay, without anything linking them to you, because they’re a reading of a public video that the next person to share it gets for free: Ripp keeps the video’s public address and removes the rest of the link you shared. Running records lose the link to you too: what each reading cost and how long it took stays, and the Reel or TikTok link and any error text go. Ripp also deletes your purchase history at RevenueCat and its own record of your plan.

Deleting your account doesn’t cancel a Pro subscription: Apple keeps billing until you cancel it in your iPhone’s Settings, under your Apple Account’s Subscriptions, so cancel it first. Deleting your account doesn’t refund a Pro Lifetime purchase either: it stays with your Apple Account, and Restore purchases can bring it back if you sign up again with the same Apple Account. Apple keeps its own record of your purchase.

After deletion, server logs can hold your internet address for up to 30 days, ZeptoMail’s log holds your email address for up to 60 days, and Supabase’s backups can hold your account for up to 7 days. None of them is used for anything but troubleshooting and recovery, and all of them expire on their own.

Your rights

Under UK and EU data protection law you can ask Ripp for a copy of your data, to correct it, to delete it, to restrict or object to its use, to receive the data you gave Ripp in a portable form, and to withdraw a consent you gave. Write to info@ripp.app from the address on your account, or say which way you signed in. Ripp answers within one month, and may ask you to confirm it’s you before it acts. Most of it you can do yourself: Profile deletes your account, and Delete all data clears your iPhone.

If you’re unhappy with Ripp’s answer, you can complain to the UK Information Commissioner’s Office at ico.org.uk. If you live in the EU, you can also complain to your own country’s data protection authority; in Spain that’s the Agencia Española de Protección de Datos at aepd.es.

Cookies and tracking

The Ripp app and these pages set no cookies and use no analytics, advertising or tracking code. There is nothing to consent to and no banner to show. The one cookie on Ripp’s servers is set only when Ripp’s own team signs in to its internal review tool. Ripp doesn’t use Apple’s advertising identifier and doesn’t track you across other companies’ apps or websites, so iOS never asks you to allow tracking for Ripp. The check that tells people from bots (Cloudflare Turnstile, above) sets no cookie either.

Security

Everything between your iPhone and Ripp’s servers is encrypted in transit. Passwords are stored only as one-way hashes, stored video is private and reachable only through links that expire within hours and are given only to the Ripp app of someone who added that video, and access to Ripp’s systems is limited to the people who run it. No system is perfectly secure; if a breach ever affects you, Ripp tells you and the authorities as the law requires.

Age

Ripp is for people 18 or older, and doesn’t knowingly hold data about anyone younger. If you believe a child has an account, write to info@ripp.app and Ripp deletes it.

Changes to this policy

Ripp may update this page. Each version has a date at the top; when a change matters, Ripp asks you to accept the new version in the app, and tells you in the app or by email before it applies. Earlier versions are available on request.