Privacy Policy.
Rinpil ("we," "us," "our") operates a private video legacy vault that lets you record messages and schedule their delivery to specific recipients at specific future moments. This Privacy Policy explains what we collect, why, how we store it, who else touches it, and how you can delete it.
1. Information we collect
Account information. Name, email address, optional phone number, encrypted password (when using email/password), and OAuth identifiers when you sign in with Google or Apple.
User content. The videos, photos, cover images, titles, descriptions, and written messages you create; the recipient names, email addresses, phone numbers, and relationships you enter; the scheduled delivery dates, event triggers, and passing-release configurations you set up.
Device and usage information. IP address, browser and device type, session identifiers, timestamps, and basic analytics about which pages and features you use — collected to keep the service secure and to fix bugs.
Payment information. Subscription tier, billing cycle, renewal dates, and the last four digits and brand of your payment method. Full card numbers are never seen or stored by Rinpil — they are handled directly by Stripe.
2. How we use it
To operate the service (store and deliver your videos), to authenticate you, to process payments, to send transactional emails (reminders, confirmations, passing alerts), to enforce our tier limits, to prevent abuse, and to comply with law. We do not sell your personal information and we do not use your videos to train models.
3. Third parties
Cloudflare R2 — encrypted video and image storage.
Supabase — authentication and database.
Stripe — subscription billing and payment processing.
Google & Apple — optional OAuth sign-in.
Each processes your data only as needed to provide their piece of the service and under their own privacy terms.
4. How long we keep it
Videos remain in your vault for as long as your account is active. If your subscription lapses, the applicable grace window applies (7 days on First Year Free, 10 days on paid tiers). After that window your videos are permanently deleted and the account is closed for privacy. There is no dormant read-only state on any plan — that is by design, solely for the privacy of the account holder.
5. Security
Videos and images are encrypted at rest. Access is scoped by row-level security so only you can read your own vault. Delivery links are single-use signed tokens. Passing-verification releases require multi-contact confirmation and a 48-hour pause window before anything is sent.
6. Your rights
You can access, edit, download, or delete your content at any time from inside the app. You can also request full account deletion from /delete-account or by writing to us via the Contact page. Deletion is permanent — pending future deliveries are cancelled.
7. Children
Rinpil is not for anyone under 18. We do not knowingly collect information from minors.
8. Changes and contact
If this policy changes materially we'll notify account holders by email. Questions? Use the Contact page.