Privacy Policy

SameSky · Effective 2026-05-09

SameSky ("the app") is operated by RIPPLEIT LLC. This policy explains what we collect, why, where it's stored, and how to delete it.

What we collect

• Profile: a name you choose, your timezone (IANA identifier, e.g. Europe/London), and an optional photo.
• Account identifier: an opaque UUID generated by our server when you first launch the app. There is no email, password, or phone number.
• Pair code: a short server-generated code (e.g. HEARTH-42) that lets you connect with one partner.
• Pair state: the user IDs of you and your partner, your shared status text (if any), pulse / nudge / meetup metadata.
• Push notification token: an Apple APNs device token (iOS) or Google FCM token (Android), used solely to deliver push notifications from your partner.

Why we collect it

To synchronize state between two paired users (you and your partner) and to deliver push notifications when your partner updates something. That's the whole purpose of the app.

Where it's stored

All structured data (profiles, pairs, statuses, tokens) is stored in Cloudflare D1 — a managed SQLite database. Photos you upload are stored in Cloudflare R2 object storage. Cloudflare's infrastructure is the only third-party storage involved.

How long we keep it

• Profile + account identifier: until you delete your account (see below) or remove the app and stop using it.
• Status / pulse / meetup metadata: until you unpair or delete your account.
• Push tokens: replaced each time you reinstall or refresh the app; deleted on account deletion.

Third parties

• Apple Push Notification service (APNs) — used to deliver pushes to iOS devices. Apple receives the encrypted payload destined for your device.
• Google Firebase Cloud Messaging (FCM) — used to deliver pushes to Android devices. Google receives the encrypted payload destined for your device.
• No analytics, no advertising SDKs, no profile sharing.

Account deletion

You can delete your account from inside the app: Settings → Privacy & Security → Delete my account. This action:

• Removes your user record from our database.
• Removes any pair you were part of (your partner is notified).
• Deletes any photos you uploaded from R2 storage.
• Discards your push tokens.

Once deletion completes, no recoverable copy of your data remains on our infrastructure.

Children

SameSky is not intended for children under 13. If you believe a child has registered, contact us at emirborovac@rippleit-co.com and we will delete the account.

Changes to this policy

If we change this policy materially we will update the effective date above. Continuing to use the app after a change means you accept the updated policy.

Contact

Privacy questions: emirborovac@rippleit-co.com.