Privacy Policy

This policy describes information used by the RingRing.day photo collection, digital wall and related features. For privacy questions or requests, email hello@ringring.day.

1. Information we use

When you sign in with Google, we receive your verified email, Google account identifier and, when available, your name and profile-photo URL. Your name and photo are stored privately as optional defaults for your own Anna interview. You can change or remove the selected photo before recording. A private RingRing endpoint retrieves the Google photo and removes image metadata; no access to Gmail, contacts or Google Photos is requested. Signing in does not publish your name or photo: the interview’s existing sharing choices still apply.

• Orders: your display name, artwork, website, country flag, selected space, amount, payment status and order references, to provide the wall service and resolve payment issues.
• Payments: Stripe collects payment and billing information at checkout. We receive transaction references and payment status. Card details are entered with Stripe.
• Photos: images, captions, company names, social handles and associated locations, to publish and organize the collection. Photo locations may be entered by the uploader, extracted from image metadata or supplied through device permission. They can include precise coordinates and may be published with the photo. Ordinary browsing does not request your device’s GPS location.
• Activity and security: reactions, game sessions, rewards, technical request information and hashed IP identifiers used to limit reaction abuse, to operate features and protect the service.
• Correspondence: information you send us, to respond to requests, support customers and handle complaints.

Information needed for an order must be provided to complete that order. Avoid including sensitive personal information in content intended for public display.

Voice interviews with Anna

Anna interviews can start without an account, email or photo. A private device session links saved answers. An optional photo or an emoji represents each answer on the interview wall. Under the current publication agreement, the first name, last name, age, profession and city voluntarily shared may appear with a reviewed public interview. Email and phone stay private. See the interview information and privacy notice for recording, preservation, publication and withdrawal details.

Personal time capsules

In your personal capsule space, you can write a question and a text answer, and choose an opening date one, five, ten, twenty or thirty years ahead. Sealing requires explicit agreement to automatic publication. Your public name or alias, optional nationality, avatar, question and dates appear on your People profile immediately. The answer is encrypted in storage and is not returned by the public or account interfaces before its opening date. At that date it becomes publicly readable on your profile automatically. This is server-managed encryption, not end-to-end encryption. Public content may be copied by others. You can delete a capsule from your signed-in space before or after opening; deletion here does not remove third-party copies. Capsules are retained until you delete them or request removal. Draft answers are held on the current page and are sent to RingRing only when you seal them. Existing Anna interview permissions and opening dates remain separate.

Perspectives responses

New contributions require a private account. We use your email address to send a temporary sign-in code through Resend and link your dated contributions to your history. Account sessions last up to thirty days. Earlier browser-only contributions remain accessible with their existing private browser cookie for up to thirty days; clearing that cookie removes browser access. Contact hello@ringring.day for help. We store hashed session identifiers and use pseudonymous participant identifiers in research exports. Hashed network identifiers and usage counters limit abuse.

You can answer in writing or, with separate consent, record an answer and send it to OpenAI for transcription. RingRing processes the recording to obtain text and does not archive the audio in this version. A temporary recording is available for playback in your browser while you review it. Only the text you validate and submit enters your contribution history. Recording duration and account-linked quota records are retained for up to forty-five days to manage transcription costs and abuse. OpenAI processes audio under its own applicable service terms and retention practices.

Human contributions and AI-generated responses are identified separately. For an agent submission, we also store who the agent represents, along with the provider, model, version and instructions supplied by its operator. These details are self-reported. They do not establish that a model has subjective feelings or human experiences.

Submitted responses are retained for up to thirty years from each contribution, unless deleted sooner. We preserve the original questions and date. You agree to storage and research use when submitting. Contributions are anonymous in the study by default: research exports omit your email and chosen name. This is not complete anonymization: your words or model context may identify you, so avoid identifying details. If you choose to sign, your chosen name accompanies your contribution in research records. You can view, download and delete your contributions in your private history. Raw responses are accessible to you and authorized RingRing administrators, not published in a public gallery. Annual reviews will share an analysis without publishing individual responses or identifying contributors.

Company time capsules on AI

Company pages invite customers, service providers, employees, former employees, founders, employers, company representatives and community members to answer the same five AI questions as individual contributors. A role is required; public attribution can show a first and last name or remain anonymous. A six-digit email confirmation code is required in either case. Confirmation lasts up to thirty days on the current device. Resend delivers the code. The email remains available to authorized RingRing administrators, never published or provided to the company through this feature. Roles are self-declared. Company-representative authority requires separate verification before a capsule is attributed to the company.

The author explicitly chooses an opening cycle: one or seven days; one, three, six or eighteen months; or one, two, three, four, five, ten, twenty, thirty, fifty or one hundred years. Days are measured as UTC twenty-four-hour periods; months and years follow the UTC calendar, with the last day clamped when needed. All answers in one capsule share its chosen opening date. Questions, chosen name or anonymous credit, declared role, optional public job title, sealing date, opening date and progress are visible while the answers remain sealed. Anonymous capsules store no public name or job title, but answers may contain identifying details once opened.

Answers are encrypted in storage with server-managed encryption, not end-to-end encryption. The public, author and administrator interfaces do not return the answer payload before the server-side opening date. At that date, answers in a visible capsule become publicly readable automatically, without an early-open override. Company-authority review and moderation cannot advance that date. A hidden capsule remains inaccessible publicly. After sealing, the author cannot edit the answers or shorten the opening date; they can create another capsule or remove an existing one after confirming the same email. Capsules are retained until deletion or up to thirty years after their chosen opening date, so a century-long cycle is not removed by the previous thirty-year retention schedule. Published answers may be copied by others, and deletion here cannot remove those copies.

Earlier company responses without an author-chosen opening cycle are no longer published by this feature. They remain private and can be removed by their author; a new capsule requires explicit timing and publication consent. Company capsules are separate from private Perspectives research exports. Account-linked submission counters limit abuse and are kept for up to three days. Private deletion receipts retain only submission and account identifiers to prevent retrying a removed capsule from restoring its content.

Feedback and surveys

When you give company feedback, we store the company, your stated relationship, the experience and suggestion you submit, your optional display name, review title and rating, and your publication choice. If you choose to appear anonymously, the display-name field is not stored or published. Your submitted text may still contain identifying details. Feedback is private to authorized RingRing administrators until reviewed. It can be published on the company profile only if you explicitly permit publication. A submitted feedback entry is not automatically sent to the company. User, customer, employment, recruitment and service-provider relationships are self-reported; RingRing does not mark them as verified.

The three-screen feedback flow asks for no name. Its prompts are fixed writing guidance, not an AI rewrite. Sending explicitly permits RingRing to store and review your words; publication remains a separate opt-in. After sending, a private receipt saved in your browser lets you download the receipt or delete your feedback from the company page. Session storage is used if persistent browser storage is unavailable; if neither works, you can download the receipt before leaving.

Optional feedback dictation uses your browser’s speech recognition after you choose to start it and grant microphone access. Your browser may send audio to its speech service. RingRing does not receive or store this audio. You can edit the transcription before submitting. Stopping dictation keeps the text for review; only Send feedback submits it. A draft containing your words, company and choices is kept in this tab’s session storage to survive reloading. It expires after twenty-four hours and is cleared after sending, erasing the text or closing the tab. This draft is not sent to RingRing before submission. Publication consent must be chosen again after reloading.

When you mark a published review helpful, a functional browser cookie lasts up to one year. We store a keyed hash of that anonymous browser identifier to prevent duplicate reactions on the same review, and browser storage remembers your choice. Helpful counts reflect reactions, not identity verification. Public review links can be copied and shared.

Surveys have a public response link and a separate private management link. Anyone holding the private management link can read and export the responses and open or close the survey. The creator may receive personal information that a respondent voluntarily includes in an answer. There is no account recovery for lost management links in this version. We store responses to provide these functions until they or the survey are deleted. Respondents receive a private receipt allowing deletion of their own response; a copy is saved in their browser storage when available. Survey creators can delete the survey and its responses. RingRing administrators can access stored records to operate the service and address requests. Hashed network identifiers and short-lived usage counters help limit abuse.

LinkedIn sign-in

When enabled, LinkedIn sign-in requests only your basic profile and email, using OpenID Connect. RingRing stores your LinkedIn account identifier and basic name information to recognize your private account. LinkedIn may omit a verified email; in that case, continue with an email code. Linking an existing account requires its authenticated session, rather than matching an email alone. This connection does not grant access to your contacts or permission to post on LinkedIn. A short-lived encrypted cookie secures the sign-in transaction. It does not verify employment or company authority.

Company accounts and open questions

At sign-up you choose Company, Employee or Student. This profile is saved with your private account and determines your workspace. Employees and students can use personal, work or school email addresses. Company accounts require an email outside the consumer mailbox providers blocked by RingRing; this domain rule does not verify employment or authority to represent a company. Company editing access requires a verified account and a paid order whose billing email matches that account. Stripe payment references are used to verify access. A private receipt can be kept temporarily in browser session storage during sign-in and is removed after it is connected.

When you answer a company’s open question, your answer and optional public display name are shared with the company workspace owner for review, under your explicit agreement. Pending answers remain private to you and that owner. The owner can publish or hide an answer; they cannot rewrite it. You can update or withdraw your own answer while signed in. Open answers remain stored until withdrawal or a privacy removal is processed. This review process does not give a company access to your sealed personal time capsules.

Open photo contributions

The photo form at /contribute is open without an invitation or an email address. A declared first name and a private thirty-day device session identify your drafts; the name is not identity-verified. You can take a photo or import one. We extract embedded GPS when available; using the phone position requires your browser permission. You can correct the point manually and must confirm the street and city. The map uses OpenStreetMap tiles, whose provider receives map tile requests. Image metadata is removed, while the selected coordinates are stored separately. RingRing administrators receive the submitted photo, name, location and proposed text for review by email. Open contributions remain private until approved; administrators may correct the caption, location and X message or reject the submission. After approval, the selected location is public, and the photo may also be sent to X if selected. Public name credit is optional. Your device session gives access only to your own drafts and their review status; without an email, access cannot be recovered after that session is lost. Contact hello@ringring.day for removal requests.

2. Public content

Published wall entries show their display name, artwork, website, flag, space and paid amount. Published photos may show captions, companies, social handles and locations. Selected photo posts may also appear on X. Other people can copy or share public content; removal here does not automatically remove copies elsewhere.

3. Sharing and providers

Railway provides hosting and database infrastructure. Stripe processes payments. X handles content posted to its platform. Email providers handle correspondence. We share information with providers to operate these features and may disclose records when legally required or to address fraud, security incidents or legal claims. Provider processing may occur in the United States or other countries.

If archived call features are used, the recipient’s phone number, call instructions and call status are also processed through telephony and voice providers, including Twilio and OpenAI. Transactional messages may use Resend. These features are separate from photo browsing.

4. Cookies and browser storage

The optional game uses a player cookie lasting up to 30 days to associate game rewards with your browser. Local storage remembers whether you have seen the wall introduction. Administrator session cookies last up to 90 days; connecting an administrator account to X uses a short-lived cookie lasting up to 10 minutes. Stripe may use its own storage during checkout; see Stripe’s Privacy Policy. Clearing browser storage may reset these features.

The current site does not implement cross-site advertising trackers or a special response to browser “Do Not Track” signals. Clicking a third-party link or using checkout takes you to services governed by their own policies.

5. Retention and security

Public content is stored while used in the collection or wall. Order records are retained to provide the service, resolve disputes and meet applicable recordkeeping requirements. Technical and game records support operation and abuse prevention. Outside the Perspectives retention described above, there is currently no general automatic deletion schedule. Contact us to request review or deletion of a record. Security measures cannot guarantee that transmission or storage is completely secure.

6. Privacy requests

Depending on applicable law, you may have rights to access, correct or delete information, obtain a copy, restrict certain uses or appeal a decision. Email hello@ringring.day with the record or URL concerned and your request. We may request proportionate verification before providing or changing information. If your request is denied, you can reply to ask for review. Applicable legal retention duties and the rights of others may limit deletion.

7. Updates

Policy changes will be posted here with an updated date. We will provide any additional notice or consent required by applicable law for material changes.

Questions? hello@ringring.day