Privacy Policy
Effective 29 October 2026
This policy applies to the Ringlate apps for iOS and Android and to the Ringlate service.
Ringlate is a messaging app. This policy explains what data the app and our servers process, why, and what control you have. We keep it short and literal: everything listed here is what the software actually does.
1. Who is responsible
The Ringlate service is operated by Ringlate ("we"). Contact for every privacy matter: [email protected].
2. What we process and why
| Data | Why |
|---|---|
| Account — your e-mail address and the sign-in credential you choose (password or one-time code), handled by our identity provider (Logto), plus a unique account identifier. | To create and secure your account and let you sign in on your devices. |
| Profile — display name, optional username, photo, bio, birthday and emoji status. | Shown to the people you chat with, as you choose. |
| Messages and media — texts, photos, videos, voice and video notes, files, stickers, polls, reactions, shared locations and contact cards you send or receive, in private chats, groups and channels. | To deliver them to the recipients and keep them available on all your devices. They are stored on our servers and encrypted in transit (TLS); they are not end-to-end encrypted. Messages you delete for everyone are removed from our servers. |
| Calls — voice and video calls and group voice chats are relayed through our media servers so that participants can reach each other. | To connect the call. We do not record calls. |
| Location — only when you share a location or a live location in a chat. | To send that location to the chat you chose, for the duration you chose. Live sharing stops when you stop it or the period ends. |
| Address book — if you grant contacts permission. | Read on your device to let you share a contact card and to show the names you know. Your address book is not uploaded to our servers. |
| Camera, microphone, photos — when you take a photo or video, record a voice note, make a call, or pick media to send. | Only for the action you started. Nothing is captured in the background. |
| Device and notifications — device model, operating system, app version, language, and a push token (Apple Push Notification service / Firebase Cloud Messaging). | To deliver notifications and to keep your sessions list (you can end any session from Settings). |
| Diagnostics — crash reports, performance traces and anonymous usage events through Firebase Crashlytics, Performance Monitoring and Analytics (Google LLC). | To find and fix crashes and slow screens. These reports contain device and app information, not your messages. |
3. What we do not do
- We do not sell personal data and we show no advertising.
- We do not read your messages for marketing or profiling.
- We do not upload your address book.
4. Who else sees data
Only the people and chats you send content to, and the processors that run the service on our instructions: our hosting and media servers, Apple (push notifications, App Store), Google (push notifications, Play, Firebase diagnostics) and Logto (sign-in). Each receives only what its function needs. We disclose data to authorities only when the law obliges us to.
5. How long we keep data
Your account, profile and content stay as long as your account exists. When you delete a message, a chat or your account, it is removed from our active systems; copies in encrypted backups are purged on the backup rotation schedule (at most 30 days). Diagnostics are retained by Firebase for its standard period (crash data 90 days).
6. Your controls
- Delete your account at any time from Settings → Privacy and Security → Delete account; this removes your profile and your content.
- Edit or remove profile fields, leave groups and channels, delete messages for yourself or for everyone, and end other sessions, all from the app.
- Revoke camera, microphone, photo, contacts and location permissions in your device settings at any time.
- Ask us for a copy, correction or deletion of your data at [email protected]. Where the GDPR or a similar law applies, you also have the right to object, to restrict processing and to complain to your supervisory authority.
7. Security
Data is encrypted in transit with TLS. Access to servers is restricted to the people operating the service. You can protect the app with a passcode and biometrics and enable two-step verification for your account.
8. Children
Ringlate is not directed to children under 13 (or the age of digital consent in your country, if higher). We do not knowingly keep accounts of younger children; write to us and we will delete them.
9. Changes
We will post changes here and update the effective date. Material changes are announced in the app.