Privacy policy
Last updated 10 October 2026
This is what Ring Ring collects, why, who else handles it, how long we keep it, and what you can do about it.
The short version. We keep what we need to ring you for the things you add. Call audio is turned into text as you talk and isn't recorded. No ads, no tracking, nothing sold. Delete your account in the app and it's gone.
1. Who we are
Ring Ring is provided by Blackpebble Ltd ("we", "us"), a company registered in England and Wales, company number 11884353, registered office 39b Borough Street, Brighton BN1 3BG. We are the controller of your personal data.
Questions about privacy: hello@hattiecalls.co.uk, or write to us at the address above.
2. What we collect
Your account
- Your Apple ID user identifier from Sign in with Apple, plus your first name and email address if you share them. If you hide your email, we get Apple's relay address.
- Your mobile number, if you add one (it's optional). We text you a code to check it's yours. We store only a scrambled copy of the code, and it expires within minutes. For a US number, Twilio Verify sends and checks the code. You can remove the number in Settings.
- Your settings: when to ring, how pushy to be, quiet hours, and whether calls ring in the app or on your phone.
- Your answer to the setup question (what happens to reminders), which sets how pushy Ring Ring is. Answers from older versions of the app (what derails your day, your hardest time of day, how you heard about Ring Ring) are kept too.
Your things
- The things you add in the app: what, when, and whether they repeat.
- What happens to each one: started, done, swapped, skipped or let go, and when.
Calls and texts
- Call audio is streamed live so it can be turned into text and Ring Ring can reply. It isn't recorded.
- A written transcript of each call, what Ring Ring did as a result (for example, marked a thing done or put it off for ten minutes), and call details: when, how long, and whether you picked up.
- Texts you send to Ring Ring (like DONE, SKIP or LATER) and texts we send you.
- If something you say sounds like a crisis, a note that our safety check went off and what it did. Not a copy of what you said.
Your device and subscription
- Push notification and in-app calling tokens for your iPhone, so we can reach it.
- Your subscription status from Apple, through RevenueCat: plan, trial, renewal and expiry dates. Apple takes payment. We never see card details.
- What each call and text costs us to run, for our own accounts.
- Which setup and subscription screens you reach (for example, the plans screen, or a plan you picked), recorded by us, linked to your account, to see where setup loses people. No third-party analytics.
- How you heard about Ring Ring, if you say, is also passed to RevenueCat with your subscription status.
Health
Ring Ring is built for people with ADHD, but it never asks whether you have a diagnosis, and you don't need one. You might mention your health, mood or medication on a call. If you do, it ends up in that call's transcript. That can be health data, a special category under UK GDPR. We use it only to run your calls and your things, and to point you to help if you seem to be in crisis. Our lawful basis is your explicit consent, which you can withdraw at any time by turning calls off or deleting your account.
3. How we use it, and our lawful bases
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Run your account: sign-in, your things, calls and texts. | Contract with you (Art. 6(1)(b)). |
| Understand what you say on calls and texts, and act on it: tick a thing off, put it off a few minutes, skip it. | Contract with you (Art. 6(1)(b)). For any health data, your explicit consent (Art. 9(2)(a)). |
| Spot a possible crisis on a call and give you crisis numbers for your country (UK or US). | Legitimate interests in a safe service (Art. 6(1)(f)). Where needed, vital interests (Art. 6(1)(d) and 9(2)(c)). |
| Check your subscription, and remind you 2 days before a free trial turns into a paid one. | Contract with you (Art. 6(1)(b)). |
| See which setup screens people reach, and what they chose on the setup call, to make setup better. | Legitimate interests (Art. 6(1)(f)). |
| Keep billing records. | Legal obligation (Art. 6(1)(c)). |
| Keep the service secure, stop misuse, and keep a log of account actions (with no call content). | Legitimate interests (Art. 6(1)(f)). |
We don't sell personal data. We don't use it for advertising. We don't track you across other apps or websites. There are no ads, third-party analytics or tracking tools in the app. We don't use your calls to train AI models.
4. Automated processing
Ring Ring is an AI. It holds the conversation and acts on what you say: it can tick a thing off, skip it or ring back in a few minutes. These decisions only affect your own things and when you get rung. They have no legal or similarly significant effect on you, and you can change any of them in the app. It can mishear or get things wrong. If it does, tell us.
5. Who else handles your data
These companies run parts of Ring Ring for us. They handle personal data on our behalf, under contract, and only for what we ask.
| Provider | What they do | Where |
|---|---|---|
| Google Cloud | Hosts our servers and database | London (europe-west2) |
| Twilio | Places and receives calls, in the app and to your phone; sends and receives texts | US and other countries |
| Deepgram | Turns call audio into text, and Ring Ring's replies into speech | US |
| Anthropic | The AI model that reads the transcript and replies | US |
| RevenueCat | Tracks your subscription status from Apple | US |
| Apple | Sign in with Apple, in-app purchases, push notifications and incoming-call alerts | US and other countries |
We may also share information if the law requires it, or to protect someone's life.
6. International transfers
Some providers above handle data outside the UK, mainly in the United States. When they do, we protect it with a safeguard UK law allows: the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or, where the provider is certified, the UK Extension to the EU-US Data Privacy Framework. Ask us and we'll tell you which applies to each provider.
7. How long we keep it
| Data | Kept for |
|---|---|
| Call audio | Not stored |
| Your account, settings, things, call transcripts and texts | Until you delete your account |
| Phone check codes | Minutes (they expire), then deleted with your account |
| Billing events from Apple and RevenueCat | 6 years, linked only to an account ID |
| Cost records | Kept with the link to you removed when you delete your account |
| Audit log of account actions (no content) | 6 years |
| Server logs | Up to 30 days |
Twilio, Deepgram and Anthropic keep their own short-lived records of calls and requests to run and secure their services, under their contracts with us.
8. Deleting your account
In the app, go to Settings, then Delete account. Calls stop and your data is deleted straight away, except the billing events, cost records and audit log described above. If you signed in with Apple, we also revoke Ring Ring's access to your Apple ID.
Deleting your account or the app doesn't cancel your subscription. Cancel it in your iPhone's Settings: tap your name, then Subscriptions, then Ring Ring.
9. Your rights
Under UK data protection law you can:
- get a copy of the personal data we hold about you
- have it corrected
- have it deleted
- restrict or object to how we use it
- get the data you gave us in a portable format
- withdraw your consent at any time
Email hello@hattiecalls.co.uk. We may need to check it's you. We reply within one month.
10. Security
Data is encrypted in transit and stored with Google Cloud in London. Sign-in tokens are stored only as hashes. Only people who need it for their job can reach personal data. Nobody listens to calls live.
11. Children
Ring Ring is for adults. You must be 18 or over to use it. If you think we hold data about a child, tell us and we'll delete it.
12. These pages
This page and our other help pages use no cookies, analytics or scripts. Our server sees your IP address when you load them, as any web server does, and keeps it in its logs for up to 30 days.
13. Changes
If we change this policy in a way that matters, we'll tell you in the app or by text before it takes effect.
14. If you're in the US
Added 10 October 2026
- We collect and use the same data, the same way, as this policy says.
- We use your number to call you and to check it's yours. We don't send texts to US numbers, apart from that code.
- We don't sell or share your personal information, as US state privacy laws (like California's) use those words. No ads, no tracking.
- You can ask to see, correct or delete your data. Email hello@hattiecalls.co.uk. We won't treat you differently for asking.
- If something on a call sounds like a crisis, Ring Ring gives you US numbers: 911 in an emergency, and 988 (call or text) to talk to someone.
15. Contact and complaints
Email hello@hattiecalls.co.uk, or write to Blackpebble Ltd, 39b Borough Street, Brighton BN1 3BG.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd like the chance to sort it out first, so please get in touch.