Last updated: 14 July 2026 · Operated by Gengyue Geng (Ripple) · gengyue081@gmail.com
Summary
Ripple reads health metrics from Apple Health to learn your personal baseline and give observational explanations of changes. We do not sell your data, do not use it for advertising, and do not track you across other apps or websites. Ripple is a wellness tool, not a medical device, and does not diagnose, treat, or prevent any condition.
What we collect
Health & fitness data (from Apple Health, with your permission): heart rate, HRV, resting heart rate, respiratory rate, blood oxygen, sleep, steps, and active energy. We only read the types you grant; you can revoke access anytime in the Health app.
Account data: your email address (for sign-in) or your Apple ID relay (Sign in with Apple), and a Ripple user identifier.
Content you enter: calendar events/plans and personal facts you choose to record, and your feedback on explanations.
Usage data: basic in-app interaction needed to operate features. We do not use third-party advertising/analytics SDKs.
How we use it
To compute your personal baseline and detect meaningful deviations.
To generate observational explanations, correlating a reading with your own recorded activities and habits.
To operate your account (authentication, sync, export, deletion).
Where it goes / third parties
Backend hosting: your data is stored on our backend infrastructure (Supabase / Vercel) tied to your account, protected by row-level access controls.
AI processing (OpenAI, United States): to generate an explanation, Ripple sends to our AI provider (OpenAI): the reading you asked about, related metrics and your baseline values, short summaries of your recent days, and any plans or personal notes you added that are relevant to the question. Your name, email address, and contacts are never sent. This processing happens on OpenAI's infrastructure in the United States; your data is not routed through China. OpenAI does not use this data to train its models and provides data protection equivalent to this policy; we do not permit our AI provider to use your data for advertising. The app asks for your explicit permission in-app before your health data is first shared this way, and each Ripple explanation screen links its sources.
We do not sell your data, share it with data brokers, or use it for advertising. Health data is never stored in iCloud by Ripple.
Your choices & rights
Export: download everything we hold about you in-app (Settings → Privacy & data → Export).
Delete: delete your account and all data in-app (Settings → Privacy & data → Delete account); irreversible.
Revoke Health access: anytime in Apple's Health app.
Retention
We keep your data while your account is active. When you delete your account, your data is deleted from our systems.
Children
Ripple is not directed to children under 16. We do not knowingly collect data from children.
Changes
We may update this policy; material changes will show a new "Last updated" date.