Privacy

What we keep, and what we do not.

TrueHeading-MCP needs very little from you: an address to sign in with, and a key to prove it is you. This page says exactly what is kept, who else handles it, and how to get it back or have it deleted.

Who we are

RippleNav Applied Research is an independent project based in Australia. If you have a question about your privacy, write to privacy@ripplenav.org and we will answer.

What we store

When you create an account we store the email address you sign up with, and a salted, one-way hash of your password — never the password itself. Payment card numbers are never handled by us; Stripe does.

Signing in

You can sign in with an email address and password, or with Google. When you use Google, it confirms who you are and shares your email address with us. Google is an identity processor only and does not give us access to your Google account.

What we never collect

We do not build advertising profiles from your data, and we do not sell it.

How your data is used

Your email address is the identity you sign in with, and the thing that is unique about your account. This site does not send email: messages from us appear in the thread on your account page, and a reply you write there reaches us the same way. Stripe processes each one-off payment and holds the billing email you provide at checkout; nothing here is sold as a subscription. Cloudflare hosts the app and the database. Nothing we collect is used by us for advertising.

Sharing

We do not share personal information with third parties except the processors named above, or where the law requires it.

Your rights

You can download a copy of everything we hold about you, or close your account and have the personal information in it deleted, from the Account page. The download is a file you keep; closing asks you to confirm who you are first, because it cannot be undone. If you cannot sign in, write to privacy@ripplenav.org from the address on the account and a person will do either for you.

Australian tax law requires a record of what was sold for five years, so before an account is deleted we copy the money facts of each purchase into a separate financial record: the transaction identifier, the date, the amount and currency, what was bought, and the payment provider's reference. That record carries no email address, no account identifier, and no link to you through this database. It is used for tax, refunds and accounting, is kept for five years from the purchase, and nothing else is done with it.

If you want something corrected, or want to complain about how we have handled your information, write to privacy@ripplenav.org and we will answer. If we cannot resolve a privacy complaint, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.

How long we keep it

Nothing is deleted for want of a sign-in, and no schedule runs by itself: this service has no timed job that removes accounts. An account with six to twelve months of no activity, and no credit left in it, may be removed by us by hand; if that is about to happen, a message is placed on your account page thirty days before it is, and signing in once keeps the account. You may also ask for earlier deletion at any time.

Changes

Significant changes to this policy will be posted here.