Privacy Policy

1. Scope

This Privacy Policy applies to the rin.gy website, Marimba Ringtone Remixes for iPhone, and Marimba Remix Ringtones for Android (together, the "Services"). Ringy is the provider responsible for the Services.

The Services do not require a Ringy account and Ringy does not maintain user profiles for app access. Apple and Google may maintain separate accounts and transaction records under their own policies.

2. Information we handle

Media and created tones

Audio or video that you import to create a tone is processed on your device. Ringy does not upload or store that imported media or the resulting tone on its servers. A file leaves your device only when you choose to share or export it using your device or another service.

Technical and usage information

Depending on your platform, app version, settings, and permissions, Ringy and its service providers may process:

• Device and app information, such as device type, operating system, app version, language, browser type, IP address, and network information.
• App activity and diagnostics, such as screens viewed, feature interactions, session information, crashes, performance data, and error logs.
• Identifiers used for analytics, attribution, fraud prevention, advertising measurement, or push notifications, including device or advertising identifiers and push tokens where permitted.
• Subscription or purchase status, product identifiers, transaction confirmation, and entitlement information supplied by Apple or Google.

In supported production versions of our iPhone app, we may use Apple AdServices to understand whether an app download or redownload followed an Apple Ads ad. The app sends an attribution token to RevenueCat, which requests the attribution record from Apple. The record may include campaign, ad group and ad identifiers, country or region, conversion type, and whether the attribution followed an ad tap or view. Keyword information may be available for keyword campaigns. When Apple provides detailed attribution after the relevant tracking permission, the record may also include the time of the ad interaction. RevenueCat associates this information with the app's device-derived customer identifier and purchase or subscription records so we can measure campaign performance. This attribution process does not upload your imported audio, video or created tones.

Ringy uses a persistent device-derived identifier for usage reporting and RevenueCat purchase and restore operations. In the iPhone app, text entered in Home search is sent for analytics; in the reviewed Android version, search text is processed locally.

In app versions with native PostHog analytics, configuration requests send the verified RevenueCat customer identifier and app and build information to PostHog, including when the remote product-analytics flag is off, unless you have turned off Share usage analytics. When remotely permitted and this setting is on, selected session, paywall, purchase-result, restore, and purchase-fulfillment events are also sent. This native stream does not include session replay, automatic screen, lifecycle or exception capture, imported media, raw receipts, payment-card details, or advertising identifiers.

Google advertising services used by the apps may infer coarse location from your IP address.

Ringy does not receive your complete payment-card number. Purchases are processed by Apple or Google under their own payment and privacy terms.

Website information

When you visit rin.gy, our hosting and content-delivery providers may process IP address, request time, requested page, referring page, browser and device information, security logs, and essential session cookies. Analytics or advertising measurement may also be used where permitted by law and your settings.

3. How we use information

We use information to provide and maintain the Services, deliver ringtone content, validate purchases and subscriptions, remember entitlements, send notifications you enable, understand feature usage, diagnose problems, prevent fraud and abuse, measure marketing, comply with law, and improve the apps and website.

4. When information is shared

Ringy may provide information to vendors that process it for the purposes described above. These may include:

• Apple and Google, including the App Store and Google Play, for distribution, billing, subscriptions, refunds, entitlement validation, and platform services.
• RevenueCat, for purchase and subscription validation, entitlement management, and Apple Ads attribution and campaign analytics. RevenueCat receives the app's device-derived customer identifier and relevant purchase information, and, where enabled, an Apple AdServices attribution token and the attribution information returned by Apple.
• Google services such as Firebase or Google Analytics for analytics, diagnostics, attribution, and push-notification delivery.
• PostHog, for native analytics configuration and the selected app events described above, subject to Share usage analytics.
• Meta services for advertising attribution or campaign measurement where enabled and permitted.
• Hosting, security, file-delivery, and content-delivery providers that operate rin.gy and deliver covers, audio previews, or app content.
• Authorities, advisers, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or complete a business transaction.

Ringy does not sell personal information for money. Some analytics, attribution, or advertising activity may be considered a "sale," "sharing," or targeted advertising under certain privacy laws even when no money changes hands.

5. Privacy choices

• Use your iPhone or iPad privacy settings to control app tracking and reset or limit advertising identifiers. Apple AdServices standard attribution can be available without permission to track across other companies' apps and websites and without access to the advertising identifier (IDFA). Other advertising or tracking features remain subject to the applicable device permissions and your choices. Allowing or declining the iOS tracking prompt does not change your ringtone purchase or entitlement access.
• In supported app versions, Settings > Privacy Choices > Share usage analytics controls native PostHog event collection and configuration requests only. It is on by default when no choice has been saved, and saved opt-outs are preserved. Turning it off does not stop existing legacy reporting, purchase processing, advertising, or attribution, and does not delete records already received.
• Use Android privacy and advertising settings to reset or delete the advertising ID and control permissions.
• Turn push notifications off at any time in your device notification settings.
• Use app and device settings to control access to media, files, photos, or notifications.
• Contact help@rin.gy to ask about access, deletion, correction, or an opt-out that applies in your jurisdiction.

Ringy cannot delete information held only by Apple, Google, or another service under your separate account. Requests concerning store accounts, billing records, or platform data should be sent to that provider.

6. Retention and deletion

Imported media and created tones remain on your device until you delete them or remove the app. Push tokens are retained while notifications are enabled or until they expire. Analytics, diagnostic, identifier, and attribution data are retained only as long as reasonably needed for the purposes described in this policy, according to Ringy's settings and each provider's retention rules.

Transaction and entitlement records may be retained as needed to provide purchases, prevent fraud, resolve disputes, and satisfy legal or accounting obligations. You may request deletion of information controlled by Ringy by emailing help@rin.gy. We may need to retain limited information when required by law or for security and fraud prevention.

7. Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection; to opt out of certain sharing, targeted advertising, or profiling; and to appeal a denied request. Residents of the EEA and UK may also complain to their local data-protection authority. U.S. state residents may exercise rights available under applicable state law.

To make a request, email help@rin.gy and describe the right you wish to exercise. We may ask for information reasonably necessary to verify and process the request. Ringy will not discriminate against you for exercising a privacy right.

8. Security and international processing

Ringy uses reasonable administrative and technical safeguards appropriate to the information handled. No method of transmission or storage is completely secure. Service providers may process information in the United States and other countries, which may have different privacy laws than your home country.

9. Children's privacy

The Services are general-audience products and are not directed specifically to children under 13. Ringy does not knowingly collect personal information from a child under 13. A parent or guardian who believes a child has provided information to Ringy may contact us to request deletion.

10. Changes to this policy

We may update this policy as the Services, vendors, or legal requirements change. The current version will be posted here with a revised effective date. Material changes may also be communicated in the apps or through another appropriate notice.

11. Contact

Questions, privacy requests, and complaints can be sent to Ringy at help@rin.gy.