Privacy Policy — Ring Sizer
Ring Sizer is developed and published by BasisOrigin OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia, registry code 16187503 (“we”, “us”). We are the data controller for any personal data described in this policy. Contact: [email protected].
1. Summary
- The app has no account, no login and no cloud sync. Your calibration, saved ring sizes and settings are stored only on your device.
- The app does not use the camera and never requests camera permission. It does not read your contacts, location or files.
- The app shows advertising (Google AdMob). In the European Economic Area, the United Kingdom and Switzerland you are asked for consent before any personalised ad is shown.
- The app sends crash reports (Firebase Crashlytics) and anonymous usage events (Aptabase) so we can fix bugs and improve measurement accuracy. These do not identify you.
- Purchases (“Remove Ads”) are processed by Google Play. We never see your payment details.
2. Data stored on your device only
The following data is created by the app and kept in the app's private storage on your device. It is not transmitted to us:
- Screen calibration (pixel‑to‑millimetre factors you obtain by placing a bank card on the screen). The app does not photograph, scan or read anything from the card; it only uses the card's standard physical size as a ruler.
- Saved ring sizes and the labels you give them (e.g. “Me”, “Mom”).
- Settings such as theme and preferred size system.
- Whether you have purchased “Remove Ads”.
Uninstalling the app deletes all of this data. You can also clear it from your device's app settings.
3. Data processed by third‑party services
3.1 Advertising — Google AdMob
The free version shows one interstitial ad after a measurement result, at most once per session. Ads are served by Google AdMob (Google Ireland Ltd for EEA users / Google LLC). To serve and measure ads, Google may process your device's advertising ID, IP address, approximate location derived from the IP address, device type and operating system, and app usage related to ads.
If you are in the EEA, UK or Switzerland, the app shows a consent dialog (Google User Messaging Platform) before the first ad. You can decline personalised ads, in which case only non‑personalised ads are shown. You can change your choice at any time in the app's settings (“Privacy options”). Google's handling of this data is described in Google's advertising policy and the Google Privacy Policy.
Purchasing “Remove Ads” disables the AdMob SDK's ad requests entirely.
3.2 Crash reporting — Firebase Crashlytics
If the app crashes, a crash report is sent to Firebase Crashlytics (Google). It contains the stack trace, device model, OS version, app version, free memory and a random installation identifier generated by Crashlytics. It does not contain your name, email, advertising ID or the content of your measurements. We use crash reports solely to find and fix bugs. Reports are retained by Google for 90 days. See Firebase privacy information.
3.3 Anonymous usage analytics — Aptabase
The app sends anonymous events to Aptabase (hosted in the European Union) to understand how the app is used, for example: “calibration completed”, “ring measured”, “chart opened”, “ad shown”. Events include the app version, OS version, device model, country derived from IP address (the IP address itself is not stored), and, for calibration events, the numeric difference between the device's reported pixel density and the calibrated value. Aptabase does not use cookies, advertising IDs or any persistent device identifier; a random session identifier is kept only for the duration of a session. This data cannot be linked to you. See the Aptabase Privacy Policy.
3.4 In‑app purchase — Google Play Billing
The one‑time purchase “Remove Ads” is handled by Google Play. Google processes your payment and sends the app only a confirmation that the purchase is owned by your Google account. We do not receive your name, card number or billing address. Google's processing is governed by the Google Privacy Policy and the Google Play Terms of Service.
3.5 In‑app review prompt
After a successful measurement the app may show the standard Google Play rating dialog. This dialog is provided by Google Play and we receive no personal data from it.
4. Legal bases (GDPR)
| Purpose | Data | Legal basis |
|---|---|---|
| Providing the app's functions | Local data (section 2) | Performance of a contract (Art. 6(1)(b)); data never leaves the device |
| Personalised advertising | Advertising ID, IP address, ad interactions | Consent (Art. 6(1)(a)), collected through the consent dialog |
| Non‑personalised advertising | IP address, coarse device data | Legitimate interest in funding a free app (Art. 6(1)(f)) |
| Crash reporting | Crash data, device/OS/app version | Legitimate interest in app stability (Art. 6(1)(f)) |
| Anonymous analytics | Aggregated, non‑identifying events | Legitimate interest in improving the app (Art. 6(1)(f)); the data is not personal data |
| Purchases | Purchase token | Performance of a contract (Art. 6(1)(b)) |
5. Data sharing and transfers
We do not sell personal data and do not share it with anyone other than the service providers named above, who process it on their own terms as described. Google and Aptabase may process data outside the EEA; such transfers rely on the EU Standard Contractual Clauses or an adequacy decision (EU–US Data Privacy Framework for Google LLC).
6. Retention
Local data: until you delete it or uninstall the app. Crash reports: 90 days at Google. Anonymous analytics: retained in aggregate form; raw events are kept by Aptabase for up to 12 months. Advertising data: per Google's retention policies.
7. Children
Ring Sizer is not directed to children under 16 and we do not knowingly collect personal data from children. The app is marked in Google Play as intended for adults, and ad requests are not tagged for child‑directed treatment.
8. Your rights
Under the GDPR and similar laws you may have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, to withdraw consent, and to data portability. Because the app stores your data only on your device and the data we receive is anonymous or pseudonymous, in most cases you can exercise these rights directly: delete the app's data or uninstall the app, and change your ad consent in the app's settings or in Android's “Ads” settings. For anything else, contact [email protected]. You also have the right to lodge a complaint with your local supervisory authority; ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).
9. Security
Data on your device is kept in the app's private storage, which other apps cannot read on a non‑rooted device. All network traffic from the app uses TLS encryption.
10. Changes to this policy
We may update this policy when the app or the services it uses change. The effective date at the top will be updated and material changes will be announced in the app. The current version is always available at basisorigin.com/ring-sizer/privacy/.
11. Contact
BasisOrigin OÜ · Sepapaja tn 6, 15551 Tallinn, Estonia · [email protected]