Privacy Policy

1. Introduction

Ring-Ring values every ride and every stride. This Privacy Policy explains what personal data we collect when you use the Ring-Ring app and website, why we collect it, how long we keep it, who we share it with, and what rights you have over it.

Ring-Ring's approach to your data rests on a small number of fixed commitments:

• No advertising, and no advertising trackers of any kind
• We never sell your personal data
• Your subscription pays for the service — your data is not the product
• Movement sensing can be switched on or off by you at any time, in the app
• Your individual routes are never stored on Ring-Ring's servers, and never published
• Contributing to civic mobility statistics is a separate, explicit, revocable choice — never a condition of using Ring-Ring

This policy applies to the Ring-Ring mobile application, ring-ring.nu, and any connected dashboards used by gift partners, employers, cities, and membership organisations.

2. Who is responsible for your data

Ring-Ring® B.V., Lisdoddelaan 30, 1087 KA Amsterdam, the Netherlands (KvK 63050269, VAT NL824098389B01), is the data controller for the personal data described in this policy ("Ring-Ring", "we", "us").

Data protection contact: privacy@ring-ring.nu

Definitions

• Gifts — the non-monetary value you accumulate for verified rides and strides.
• Sats — the unit of digital value made available to you through Ring-Ring's reward system, held in the app's wallet.
• Rides and strides — cycling and walking activity detected and valued by the app.
• Trusted partners — third-party processors that provide sensing detection, payment processing, and settlement infrastructure on Ring-Ring's behalf, under written data processing agreements.
• Open protocol — the decentralised, public network to which Ring-Ring may publish aggregated mobility statistics. Individual routes are never published to it by Ring-Ring.

3. What data we collect

3.1 Account data

Name, email address, authentication credentials — Ring-Ring uses passwordless / magic-link and, where applicable, social sign-in; we do not store plaintext passwords — account role, and account activity timestamps.

3.2 Movement data

With your permission, the app detects walking and cycling automatically. The detection is performed by our sensing partner, whose software runs inside the app and processes your device's location: GPS coordinates, route paths, timestamps, distance, and detected mode of travel. Background location access is required for detection to work while the app is closed; you control this permission in your device settings and in the app, at any time.

Ring-Ring itself receives only a summary of each trip — mode of travel, distance and timing. Your route is not sent to, read by, or stored on Ring-Ring's servers. Section 5 sets out exactly how this works, including how the app is still able to show you your own route on a map.

3.3 Reward data

Your Gifts balance and redemption history, your sats balance, connected multiplier status, and steward-status progress where applicable.

3.4 Payment data

For individual subscriptions, payment is handled directly by Apple or Google — Ring-Ring receives confirmation that a valid subscription exists, but never sees or stores your card details. For organisation subscriptions, payment is handled by our payment partner; we store invoicing details but not full card or bank details.

3.5 Cryptographic identity and wallet keys

Ring-Ring generates a cryptographic keypair to give you a decentralised, self-sovereign identity within the open protocol. This keypair is not tied to your name unless you choose to link it publicly. Only its public component is stored on our servers.

The app also creates a wallet that only you control. The seed that controls the funds in it is generated on your own device, held in your device's secure keystore, and never transmitted to Ring-Ring, to our partners, or to anyone else. We cannot read it, recover it, or move your sats. One consequence matters more than the rest: the app does not yet offer a recovery phrase or backup, so if you lose your device, the sats in that wallet are lost with it. Keep balances small until wallet recovery is available.

3.6 Device and technical data

Device type, operating system, app version, crash and performance logs, and IP address, collected for security, reliability, and fraud-prevention purposes.

3.7 Optional civic-sharing data

If, and only if, you explicitly opt in, your trips may contribute to the aggregated mobility statistics Ring-Ring publishes for cities and researchers: zone-to-zone journey counts per mode and time period, the distribution of flow across the street network, and location-linked feedback chosen from fixed categories. This is off by default.

Your individual route is never published, in any form. Aggregates are published only where at least ten distinct people contribute to a figure, no single person may dominate one, times are coarsened into periods rather than moments, and the first and last few hundred metres of every trip are removed before any calculation — so home and work addresses never enter it. Feedback is limited to fixed categories, never free text, and is attached to a location rather than to a trip or to you. What is published is signed by Ring-Ring, not by you.

Separately, you may choose to publish a route of your own, under your own key. That is your act rather than Ring-Ring's processing, it is off by default, and because the open protocol cannot un-publish anything, it is permanent.

4. Why we use your data, and our legal basis

5. How your data moves through Ring-Ring

• Your device detects a ride or stride. That sensing runs through our sensing partner, which processes your location data on Ring-Ring's behalf under a written data processing agreement.
• Ring-Ring's servers receive the summary of each trip — mode, distance and timing — and use it to calculate your Gifts and sats. The route itself is deliberately never sent to our servers, and we neither read nor store it.
• When you look at one of your rides on the map, the app fetches that route straight from our sensing partner using a token issued for you alone, draws it on your screen, and discards it. It does not pass through Ring-Ring.
• Reward payouts settle through settlement infrastructure partners acting on Ring-Ring's behalf. Ring-Ring never takes custody of your funds: sats are paid out to the wallet on your own device, which only you control.
• If you have opted in to civic sharing, your trips contribute to aggregated statistics that are published to the open protocol under Ring-Ring's own signature. You can withdraw that consent at any time, and future trips stop contributing. Already-published aggregates describe groups rather than people and cannot be traced back to you.

6. Who we share your data with

We do not sell your personal data, to anyone, ever. We share limited data only with:

• Trusted partners who provide sensing, payment, and settlement infrastructure — bound by written data processing agreements. Movement sensing is provided by a single sensing partner; it is the only partner that receives your location data.
• Your employer, city, or membership organisation — but only ever in aggregate, non-identifying form. They never receive your individual movement history.
• Gift partners — only confirmation that a redemption occurred, never your movement history.
• Regulators or law enforcement, only where legally required.
• A successor entity in the event of a bona fide business transfer, always subject to the protections of Ring-Ring's steward-ownership structure and this policy.

7. Data separation between roles

Ring-Ring's architecture enforces strict separation between stakeholder roles. These rules are structural, not just policy:

• Your individual ride and stride data is never visible to employers, cities, or membership organisations at an individual level — aggregate data only.
• An employer cannot see which of their connected employees are active or inactive, only collective totals.
• A city receives civic data only from citizens who explicitly opted in, and only as aggregated statistics — never an individual trace.
• A gift partner sees redemption events but never your broader movement history.
• If you hold more than one role, each dashboard is siloed — data does not cross between your roles.

8. International data transfers

Where a trusted partner processes data outside the European Economic Area, Ring-Ring ensures an appropriate safeguard is in place before the transfer occurs — such as the European Commission's Standard Contractual Clauses, or an adequacy decision covering that country.

9. Data retention

We retain your account, movement, and reward data for as long as your account remains active, and for a limited period afterward where necessary to meet legal, tax, security, or dispute-resolution obligations.

Aggregated statistics already published to the open protocol persist on that public, decentralised infrastructure independently of your account. They describe groups rather than individuals, and are therefore no longer personal data. The same permanence applies to any route you chose to publish yourself, under your own key.

10. Your rights

Subject to the conditions of the GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time — for example, turning off civic sharing — without affecting processing carried out before withdrawal

11. Account and data deletion

You can ask us to delete your account and the personal data associated with it at any time, whether or not you still have the app installed. Email privacy@ring-ring.nu from the address your account uses, or from any address if you tell us which account you mean. No reason is required.

We confirm the request, delete your account data — account details, trips, and reward history — and keep only what tax, accounting or fraud-prevention law obliges us to retain, for the period that law prescribes. We complete this within the timeframe the GDPR sets, and confirm to you when it is done. Deletion from within the app itself is being built; until it ships, email is the route.

Two things deletion cannot reach. Aggregated statistics already published to the open protocol describe groups rather than individuals and cannot be withdrawn from it; the same is true of any route you chose to publish yourself, under your own key. And the sats in your wallet are yours, held on your own device: they are unaffected by deleting your Ring-Ring account, and we could not move them even if you asked.

12. Children's privacy

Ring-Ring is intended for adults. The app is not directed at, and is not knowingly used by, anyone under the age of 18 — it holds a wallet and pays out real value, which is not something we offer to minors. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us so we can remove it.

13. Security

We apply industry-standard technical and organisational safeguards — including encryption of data in transit and at rest, access controls, and regular security review of our own systems and our trusted partners' — to protect your personal data.

14. Changes to this policy

Where we make material changes to this policy, we will notify you in-app before the changes take effect. The effective date at the top of this page always reflects the version currently in force.

15. Contact us