Ring Ping

Privacy Policy

Last updated 5 November 2026

The short version

Ring Ping calls your phone at the times you choose. We collect only what we need to do that, we never sell your data, there are no ads, and you can download or delete everything at any time.

Who we are

Ring Ping (“Ring Ping”, “we”, “us”) is an Android app and a website (ringping.space) built and operated by Bhavishya Singla. For privacy questions or requests, contact us through bhavishyasingla.com.

What we collect

  • Account details — your name, email address and, if you choose, a profile photo. If you sign up with email we store your password only as a salted, slow hash (PBKDF2); we never see or store the password itself. If you continue with Google we receive your name, email address, profile picture and a Google account identifier — nothing else from your Google account.
  • Your events and alarms — title, date and time, repeat rule, time zone, melody, on/off state and call history (answered or missed).
  • Preferences — theme, how many times Cola should call and the gap between calls.
  • Devices and sessions — which devices are signed in (device name, platform, app version, browser user agent, approximate time last used) so you can see and sign them out. Session tokens are random, expire, and are stored hashed.
  • Security signals — your IP address and the number of recent sign-in or code attempts, used briefly to stop abuse (for example, too many wrong codes). These records are deleted automatically.
  • One-time codes — 6-digit sign-in, verification and password-reset codes. They are stored hashed, expire after 10 minutes and are locked after 3 wrong tries.

What we don’t collect

We don’t access your contacts, location, microphone, camera, SMS or phone number, and we don’t place telephone calls. Reminder “calls” are created by the Ring Ping app on your own phone.

Using Ring Ping without an account

On Android you can use Ring Ping fully offline without signing in. Your events and alarms then stay only on your phone and never reach our servers.

How we use your information

  • To provide the service: ring your phone on time, sync your events and alarms between your devices, show your profile and keep your account secure.
  • To send service emails — sign-in, verification and password-reset codes. We don’t send marketing email.
  • To show reminder notifications on your phone: an optional morning summary of today’s calls and an evening note about anything you missed. These are generated on your phone.
  • To understand and improve the product, using the analytics described below.

Analytics

  • Website: Google Analytics 4 and Microsoft Clarity load only after you choose “Allow” in our cookie banner. They help us see which pages and features are used. IP addresses are anonymised, Google Signals and ad personalisation are off, and Clarity masks text you type. You can change your choice any time via “Cookie choices” in the footer or Settings → Privacy.
  • Android app: we use Microsoft Clarity to understand how the app is used and where it is confusing (for example, which screens are opened and whether reminders are created as events or alarms, and with which repeat rule). Text fields are masked and we never send the titles of your events or alarms, your email address or your password to analytics.
  • Analytics data is used only in aggregate to improve Ring Ping. It is not used for advertising and is not sold.

Service providers we use

  • Cloudflare — hosts the website and API and stores account data (Cloudflare Workers and D1), protects sign-up and sign-in forms with Cloudflare Turnstile.
  • Resend — delivers our sign-in and verification emails.
  • Google — “Sign in with Google” (Google Identity Services / Credential Manager) and, with your consent, Google Analytics on the website.
  • Microsoft — Clarity analytics (website only with consent; Android app as described above).
  • ElevenLabs — Cola’s voice lines were recorded once with ElevenLabs and ship inside the app. We do not send your reminders to ElevenLabs; the title of each reminder is read by your phone’s built-in text-to-speech.
  • Each provider only processes data on our behalf to run these features.

Where your data is stored and how it’s protected

Data is stored with Cloudflare and may be processed in data centres outside your country. All traffic is encrypted with TLS. Web sessions use secure, HttpOnly cookies; the Android app keeps its session token in encrypted storage on your device. Access is limited to what is needed to run the service.

How long we keep it

  • Account data — for as long as your account exists.
  • Deleted events and alarms — kept in your Recycle bin for 30 days so you can restore them, then permanently erased.
  • Sessions — expire after 30 days of inactivity. One-time codes — 10 minutes. Abuse-prevention records — up to 24 hours.
  • When you delete your account we permanently delete your account, events, alarms, Recycle bin, devices and sessions straight away.

Your choices and rights

  • Download a copy of your data or delete your account at any time in Settings → Privacy (web). You can sign out other devices in Settings → Account & security, and change analytics consent at any time.
  • Depending on where you live (for example under the GDPR or India’s DPDP Act), you may also have the right to access, correct, delete or restrict use of your personal data, and to complain to a data-protection authority. Contact us and we will respond within 30 days.

Children

Ring Ping is not directed to children under 13, and we don’t knowingly collect their data.

Changes and contact

If this policy changes we will update the date at the top and, for significant changes, tell you in the app. Questions? Reach us via bhavishyasingla.com.

Terms of Use