Privacy policy

What rippd is

rippd is a personal fitness app: an AI coach, a food and macro log, a lifting log, and weight tracking. It is operated by Guy Dahan, an individual developer. We do not sell your data and we do not show ads in the app. This page lists what we collect, why, and every outside service that receives any of it.

What we collect

• Account basics — an account identifier from Google or Apple when you sign in, plus the name, email address and profile picture they share (Apple lets you hide your email). We never see your password.
• Your profile and goals — what you enter during onboarding and in Profile: for example age, sex, height, weight, activity level, dietary preferences, training schedule and targets, plus your time zone and language setting.
• What you log — meals (typed, photographed, scanned by barcode or spoken), estimated macros, body weight, activities, workouts, sets and weights, and rest and session times.
• Coach conversations — messages you send to the in-app Coach and its replies, kept so the Coach has context.
• In-app usage events — which screens and features you use (for example “opened the paywall” or “logged a meal”), stored in our own database and tied to your account, so we can see what works and fix what doesn't.
• Subscription status — whether you have an active plan or trial, its renewal date, and the purchase records our payment providers send us.
• Technical data — like any website, the servers that host rippd see your IP address, device and browser type; crash reports include similar technical details.

We do not collect your precise location, your contacts, or data from other apps. Meal photos and voice recordings are sent for processing (below) and are not stored by rippd.

Ad attribution and tracking (iPhone)

We use AppsFlyer to learn which ad campaigns lead people to install rippd. On iPhone, after onboarding, we explain this and then show Apple's App Tracking Transparency prompt:

• If you allow tracking, AppsFlyer may read your device's advertising identifier (IDFA), and the AppsFlyer device ID is linked to your subscription record at RevenueCat so we can attribute subscription revenue to the campaign that brought you in.
• If you decline (or haven't answered), the advertising identifier is never collected and no AppsFlyer ID is linked to your account. AppsFlyer then only uses Apple's SKAdNetwork, which reports installs to ad networks in aggregate, without identifying you or your device.

You can change your answer anytime in iOS Settings → Privacy & Security → Tracking. On Android, where there is no tracking prompt, AppsFlyer runs for install attribution; you can reset or delete your advertising ID in Android's settings.

Analytics and crash reports

• Vercel Web Analytics counts page views (page, referrer, country, device and browser type). It does not use cookies and is not tied to your account.
• Our own analytics also records, for visits to our public pages, the name of the website or AI assistant that sent you (the site name only, never the full address) and any campaign tags in the link. It uses no cookies and is not tied to your account. Our free web tools, such as the macro calculator, also record which tool was used and the goal you picked. The numbers you type, like your weight, height and age, stay in your browser and are never sent to us.
• Sentry receives error and crash reports — what failed, on which screen, with technical details about the device and request — so we can fix bugs.

AI processing

When you describe or photograph a meal, speak a voice entry, or chat with the Coach, that content — plus the relevant parts of your profile and logs the Coach needs for context — is sent to an AI provider to produce the estimate, transcript or reply. Depending on configuration and availability, that is Google (Gemini), Anthropic (Claude), OpenAI, or, for voice transcription, Groq; if one is unavailable the request may be retried on another. We do not send your email address with these requests. These providers process the data under their API terms, which do not permit using it to train their models.

If you add your own AI provider key in Settings, Coach requests go to that provider under your own account with them; the key is stored encrypted and deleted with your account. If you connect an AI assistant (such as Claude, ChatGPT or Gemini) to rippd through Connectors, that assistant can read and write the rippd data you authorize, and what it does with it is governed by its own policy. You can revoke that access in Connectors.

Payments

• In the iPhone app, purchases are made through Apple. We use RevenueCat to manage subscriptions: it receives your rippd account identifier and Apple's purchase records. We never see your card details.
• On the web, checkout is handled by Paddle, our reseller and merchant of record. Paddle collects your email address and payment details and sends us your email, plan and subscription status so we can unlock your account when you sign in with the same email.

Who processes your data

We share data only with the service providers that run rippd for us, each for the purpose described above:

• Vercel — hosting, and web analytics
• Neon — the Postgres database where your data is stored
• Google and Apple — sign-in
• Google (Gemini), Anthropic, OpenAI, Groq — AI processing
• Sentry — crash and error reports
• AppsFlyer — ad attribution
• RevenueCat and Apple — in-app subscriptions
• Paddle — web checkout

Your data is encrypted in transit (HTTPS) and stored with these managed providers. Each account's data is private to that account. We may also disclose data if required by law.

Deleting your account

You can delete your account in the app: Profile → Account → Delete account. Deletion happens immediately and permanently removes your profile, logs, workouts, Coach conversations and notes, usage events, saved AI keys and connected-assistant access from our database.

We keep your billing records — subscription status, purchase and refund history, and any pending web purchase tied to your email — because they are financial records we need for accounting, tax, refunds and fraud prevention. Deleting your account does not cancel a subscription; cancel it in your Apple ID settings or through Paddle. Records already held by the providers above (for example Apple, Paddle, RevenueCat, AppsFlyer and Sentry) follow their own retention policies. If you can't use the app, email support@rippd.ai from your account's address and we will delete it for you.

Children

rippd is not directed at children under 13, and we do not knowingly collect their data.

Changes & contact

If this policy changes, the date above changes with it. Questions or requests about your data: support@rippd.ai.