Privacy Policy

Last updated: October 23, 2026

This Privacy Policy explains what data Ripple (the "Service," operated by Youssef Khoweiled) collects, how it's used, and who it's shared with.

1. What We Collect

Account info: your email address and a securely hashed password. We never store your plaintext password.
Usage data: the scenarios you analyze (event descriptions, tickers, time horizons, optional context), your watchlist, and the AI-generated results.
Billing info: if you subscribe to Premium or Elite, Stripe processes your payment details directly — we never see or store your card number. We store your Stripe customer/subscription IDs and subscription status to manage your plan.
Feedback: if you fill in the optional feedback survey, we store your answers together with your account so we can follow up. They're included in your data export.
Technical data: your IP address is used briefly, in memory only, to prevent signup and login abuse — it isn't permanently stored.
Early-access list: if you join the list on our landing page, we store your email address, the date, and a short label for where you came from (for example, "tiktok"). We use it only to send you your invite and launch news, and we keep it until your invite has been sent or you unsubscribe. Every email we send to the list contains an unsubscribe link that removes your address immediately.
Anonymous page counts: we count visits to our pages (for example, how many people open the landing page or play a video) as daily totals. These counts are not linked to you: no cookie, IP address or account ID is stored with them.

2. How We Use It

To operate your account and run the analyses you request.
To manage your subscription and token balance.
To send the event/context text you submit to Anthropic's Claude API (which may use web search) in order to generate your analysis.
To fetch public market price data and news from third-party market-data sources.
To send you the emails needed to run your account: a confirmation link when you sign up or change your email, and a password-reset link if you ask for one. We don't send marketing email.
To prevent abuse, such as rate-limiting signups and login attempts, and to cap the number of free analyses per day.

3. Who We Share Data With

Anthropic — receives the event/context text you submit, in order to generate your analysis. See Anthropic's own privacy policy for how they handle data sent to their API.
Stripe — receives your billing and payment details to process subscriptions. We never see your full card number.
Resend — our email provider; receives your email address and the text of the confirmation and password-reset emails we send you.
Render — our hosting provider; the app and its database run on its servers.

We do not sell your personal data, and we don't use it for advertising.

4. Data Retention

We keep your account and scenario history for as long as your account is active. When you delete your account, your account, saved analyses, watchlist, feedback answers and sign-in sessions are removed from our database immediately. Copies in our routine database backups are overwritten as those backups are replaced.

5. Your Rights

You can export all of your scenario data at any time from the You tab.
You can delete your account and all your data yourself at any time from the You tab (“Delete account”). Deleting also cancels any active subscription. Payment records held by Stripe are kept by Stripe as required by law.
You can request correction of your data by contacting us at youssefkhoweiled@gmail.com.
If you're located in the EU/UK or California, you may have additional rights under GDPR or the CCPA (including access, correction, deletion, and data portability) — the contact above applies to these requests too.

6. Cookies

Ripple uses a single essential cookie to keep you logged in (an HTTP-only session token). We don't use tracking, analytics, or advertising cookies. The anonymous page counts described above work without cookies.

7. Security

Passwords are hashed and never stored in plain text. Session cookies are HTTP-only. We take reasonable measures to protect your data, but no system is completely secure, and we can't guarantee absolute security.

8. Children's Privacy

Ripple isn't intended for use by anyone under 18, and we don't knowingly collect data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Continuing to use the Service after changes take effect means you accept the updated policy.

10. Contact

Questions about your data? Contact us at youssefkhoweiled@gmail.com.