Legal

Privacy Policy

Effective: 3 April 2026 · Last updated: 16 June 2026 · Operated by: RIP Club Ltd (Co. No. 17112888) · Contact: [email protected]

1. Who We Are

RIP. is a financial education application operated by RIP Club Ltd, registered in England and Wales (Company No. 17112888). Throughout this policy, "we", "us", and "our" refer to RIP Club Ltd.

We are a data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Questions about this policy? Contact us at [email protected].

ICO Registration Number: ZC110349 (registered 24 March 2026, RIP Club Ltd)

2. What Data We Collect

Data you provide to us

Username — we do not collect your real name
Date of birth — to verify your age and determine whether parental consent is required
Location — country or region, selected during onboarding
Email address (optional) — provided voluntarily in Profile → Settings to receive duel challenge notifications and weekly school leaderboard updates by email. Available to users aged 16 and over only. Not required to use the app. You may add or remove your email address at any time.
Payment information — processed securely by Apple App Store or Google Play; we never store your card details
Parent or guardian's email address — required for users aged 13 to 15 to obtain verifiable parental consent
Phone number (optional) — available to users aged 16 and over only. Used solely to help your friends find you on RIP. We store only a one-way scrambled (hashed) version of your number for matching — never your raw number, and your number is never shown to anyone. You may add or remove it at any time, and it is deleted when you delete your account. Where SMS verification is enabled, your number is used once to send a verification code and is not retained in raw form.

Contacts (only with your permission, 16+)

If you choose to find friends from your contacts, we access your device address book only with your explicit permission, and only to check which of your contacts already use RIP. Matching is performed using one-way hashes; we do not upload, store, or share your contact list. You can use RIP fully without granting contacts access.

Data we collect automatically

Device identifiers and operating system information
App usage data — screens visited, features used, session duration
In-app behaviour — duels played, virtual trades made, leaderboard position
Approximate location at country or region level, derived from your IP address
Crash reports and performance data

Data we do not collect

Your real name — only your chosen username is stored
Precise GPS or physical location
Your camera or microphone (we access your contacts only with your permission and only to find friends — see above)
Biometric data of any kind
Real financial account information
Social media handles or account identifiers

3. How We Use Your Data

To create and manage your account — legal basis: performance of a contract
To provide the RIP. app and all its features — legal basis: performance of a contract
To verify your age and obtain parental consent where required — legal basis: legal obligation
To process in-app purchases — legal basis: performance of a contract
To send you service communications — legal basis: performance of a contract
To send you email notifications (duel challenges, leaderboard updates) where you have provided your email address — legal basis: your explicit consent
To send you marketing communications — legal basis: your explicit consent only
To help you find friends who already use RIP, using your phone number and (with your permission) your contacts — legal basis: your consent
To verify your phone number by SMS, where that feature is enabled — legal basis: performance of a contract
To improve the app through anonymised analytics — legal basis: our legitimate interests
To comply with legal and regulatory obligations — legal basis: legal obligation

4. How Long We Keep Your Data

Account data: retained for the duration of your account, plus 12 months following deletion
Phone number (hashed): retained while saved on your account; deleted when you remove it or delete your account. SMS verification codes are deleted on use or within minutes. We never retain your raw phone number.
Email address and email consent record: retained for as long as you keep your email address saved, plus 12 months following removal. If you remove your email address, we delete it promptly. The consent record (date and time consent was given) is retained for 12 months after removal for compliance purposes.
Transaction records: 7 years, as required by applicable financial regulations
Analytics data: 24 months, after which it is anonymised or deleted
Marketing consent records: retained until you withdraw consent, plus 12 months
Parental consent records: retained for the duration of the child's account, plus 12 months

5. Who We Share Your Data With

We do not sell your personal data to any third party, ever.

Apple Inc. and Google LLC — for in-app purchase processing and app distribution
Analytics providers — for app performance monitoring and improvement
Email service providers — for transactional and notification communications where you have provided your email address
SMS provider — to send a one-time verification code, only if you choose to add and verify a phone number
Law enforcement or regulators — only where required by law

6. International Data Transfers

As RIP. is available worldwide, some of your data may be transferred to countries outside the United Kingdom. Where this occurs we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the ICO.

7. Your Rights

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to request correction of inaccurate or incomplete data
Right to erasure — to request deletion of your personal data
Right to restriction — to request that we limit how we process your data
Right to data portability — to receive your data in a machine-readable format
Right to object — to object to processing based on our legitimate interests
Right to withdraw consent — at any time, where processing is based on consent. To withdraw email consent, simply remove your email address in Profile → Settings, or contact us at [email protected].

You also have the right to complain to the ICO at ico.org.uk or by calling 0303 123 1113.

8. Cookies and Tracking

rip.club uses cookies for essential functionality. With your consent, we also use analytics cookies. We do not use advertising or tracking cookies. Analytics are disabled by default for users under 16.

9. Data Security

We implement appropriate technical and organisational measures including TLS encryption, encrypted storage, access controls, and regular security reviews. In the event of a data breach we will notify the ICO within 72 hours and affected users without undue delay.

10. Children's Data

RIP. is available to users aged 13 and over. Users aged 13 to 15 require verifiable parental consent before their account is activated. The optional email address and phone number features are not available to users under 16, and under-16s are never asked for a phone number or to connect their contacts. For full details please read our Children's Privacy Notice.

11. Changes to This Policy

We will notify you of material changes at least 14 days before they take effect. The current version will always be available at rip.club/privacy.