Legal
Privacy Policy — Ringbox
Last updated 2026-09-25
Ringbox is made by VELOZ ("we", "us"). This policy explains what the app does with your information. It covers the Ringbox iPhone and Android app and nothing else.
Contact: hello@veloz.dev
The short version: Ringbox does not have accounts and does not need the internet to work. Your rings, the people you save them under, your photos and your sizes are stored on your phone and are never uploaded to us. What does leave your phone is a small amount of anonymous usage data and your purchase status, and neither of those contains anything you typed.
1. What stays on your phone
All of this is stored in the app's own storage on your device. We cannot see it, and it is not sent to us or to anyone else:
- Ring names, notes, the hand and finger, the measurement method and the date
- The people you create, including their names and any dates you add for reminders
- Your measured sizes and calibration
- Photos of your rings, both the original and the cut-out version. Backgrounds are removed on the device using Apple's on-device Vision framework — photos are never uploaded for processing
- Secret profiles and everything inside them
- Your reminders. These are scheduled as local notifications by the operating system; there is no server involved and nothing is sent anywhere
- Your settings: units, default size system, haptics and language
- What your home screen widgets show. To draw them, the app copies your rings, sizes and small thumbnails of your ring photos into a storage area on your phone that only Ringbox and its widgets can read. Secret profiles are never shown on a widget, because a home screen is not private
Deleting a ring deletes its photo files. Deleting the app removes all of it.
2. What leaves your phone
2.1Anonymous usage analytics (PostHog)
So we can tell which parts of the app people use and where they get stuck, the app sends a small set of predefined events — for example that a measurement was started, which of the three methods was used, that a ring was saved, or that the paywall was shown. The app also records which screens are opened and for how long, and when the app is opened or sent to the background. These events carry a randomly generated identifier for your installation, not for you. They also carry basic technical context: your device model, OS version, app version, and language and region.
The app also downloads a few settings from PostHog — for example the order of the welcome screens or which plans the purchase screen shows — so we can improve them without releasing an update. To do that, PostHog sees the same installation identifier.
We deliberately never send the content you create. No names, no ring names, no notes, no photos, no dates.
There is one exception, and we want to be plain about it: if you cancel your plan and choose "Something else", the short note you type is sent with the cancellation survey so we can read the reason. That is the only free text that ever leaves the app. Do not put anything personal in that box. The reason you pick is also kept with your installation's anonymous record, so that when the App Store later reports the cancellation we can see why it happened.
2.2Purchases (RevenueCat and Apple)
If you buy the Diamond plan, Apple processes the payment — we never see your card, your name or your Apple Account. To know whether your purchase is active across reinstalls, we use RevenueCat, which receives the store receipt, an anonymous app user ID, and the identifier described above so that a purchase can be matched to the anonymous usage data from the same installation. RevenueCat tells the app one thing back: whether the Diamond plan is active.
The Diamond plan is offered as a one-time lifetime purchase or as a yearly or weekly subscription. Subscriptions renew through your Apple Account until you cancel them, and you manage or cancel them in your App Store settings — the app itself cannot see or change your billing.
2.3When you share or print
If you share a size card, print the paper sizer, write to us from the app or leave a rating, the app hands that to your phone's share sheet, print dialog, Mail app or the App Store. It goes only where you send it, and we do not receive a copy.
2.4Nothing else
The app has no ads, no ad networks, and no social media SDKs. We do not track you across other companies' apps or websites, and we do not sell or share your information.
3. What we never collect
We do not collect your name, email address, phone number, contacts, precise location, health data, or any biometric data. Face ID is handled entirely by the operating system: the app asks it to authenticate you and is told only whether it succeeded. Your face data never reaches the app and never reaches us.
4. Device permissions
- Camera — only when you choose to photograph a ring
- Photo library — only when you choose to pick an existing photo. The app reads the photo you select; it does not browse your library
- Face ID — only to unlock secret profiles
- Notifications — only when you create your first reminder
You can withdraw any of these at any time in your device Settings. The rest of the app keeps working.
5. Why we are allowed to process this (UK/EU users)
VELOZ is the data controller. We rely on our legitimate interest in understanding how the app is used and in keeping it working, on the necessity of processing your purchase to give you what you paid for, and on your consent where your device asks you for a permission. Analytics data is pseudonymous and is not used to make decisions about you as an individual.
6. How long we keep it
Anonymous usage events are kept for up to 24 months and then deleted. Purchase records are kept for as long as you may be entitled to the purchase, plus the period we are required to keep financial records. Anything on your device stays until you delete it.
7. Who processes data for us
| Provider | What they handle |
|---|---|
| PostHog | Product analytics and remote app settings |
| RevenueCat | Purchase and subscription status |
| Apple | The App Store transaction, subscription billing and ratings, under Apple's own privacy policy |
These providers act on our instructions and may store data in the United States. Where data is transferred out of the UK or EEA, it is covered by the European Commission's Standard Contractual Clauses.
8. Your rights
Depending on where you live, you may have the right to ask for a copy of your data, to have it corrected or deleted, to object to or restrict processing, and to complain to your data protection authority.
Because the app has no accounts, we usually cannot connect a request to a specific person — the analytics identifier is random and not tied to your identity. If you want the data from your installation deleted, email hello@veloz.dev and we will explain how to send us the identifier so we can find and delete it. Otherwise, deleting the app removes everything held on your device.
Under California law: we do not sell or share personal information, and we have not done so in the preceding twelve months. We do not use personal information for cross-context behavioural advertising.
9. Children
Ringbox is not directed at children and we do not knowingly collect information from children. If you believe a child has provided us with information, email us and we will delete it.
10. Changes
If we change this policy we will update the date at the top. If a change materially affects how your information is used, we will say so in the app.
11. Contact
Questions about this policy? Email us at hello@veloz.dev.