Privacy Policy.

Effective date: 1 July 2026  ·  Last updated: 1 July 2026  ·  Version 3.1

This Privacy Policy explains how BlueBlue Ltd, trading as Dripply, collects, uses, shares, and protects your personal data when you use the Dripply mobile application and related services ("Dripply", "we", "us", "our"). It applies to all users of the Dripply app on iOS and Android.

Dripply is a quiet local app for remembering the cafés, places, and small moments you'd otherwise forget. We do not currently track your device location, build advertising profiles, or sell your data. This policy explains exactly what we collect, why, and how that may evolve over time.

1. Who we are

BlueBlue Ltd is a private limited company registered in England and Wales (company number 17244246). Our registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

For any privacy-related questions, requests, or complaints, contact us at hello@dripply.co.uk. We are the data controller for personal data processed through the Dripply app.

2. What personal data we collect

2.1 Account data

When you create a Dripply account, we collect:

2.2 My Time saves

My Time is your quick, private way of marking a place. When you make a My Time save, we collect:

My Time saves are private to your account. They are used for your Ring, your timeline, your recent places list, and your personal rhythm/stats. They are not shown in the city feed.

2.3 Full Moments

Full Moments are public posts within Dripply. When you post a Full Moment, we collect and store:

Full Moments are published to the relevant city feed and may appear on your profile depending on your profile visibility settings.

2.4 What we do not currently collect

Today, we want to be clear about what stays off our systems:

If we ever introduce optional features that involve device location (for example, an opt-in check to confirm you're near the place you're saving), we will update this Privacy Policy in advance, explain the purpose clearly, and ask for your consent before any such feature is activated. Any location feature would remain optional and under your control.

2.5 Technical data

For app stability and security, we automatically collect:

2.6 Payment data

If you subscribe to Dripply Plus, the payment itself is processed by Apple (App Store) or Google (Google Play). We do not see or store your payment card details. RevenueCat Inc. helps us verify your subscription status and provides us with a pseudonymous subscription identifier.

3. How we use your data

We use the data described above to:

We do not use your data for behavioural advertising or sale to third parties. We do not train AI models on your content.

4. Legal basis for processing (UK & EU GDPR)

We rely on the following lawful bases under Article 6 of the UK GDPR and EU GDPR:

5. Who we share data with

We share limited personal data with carefully chosen processors who help us run Dripply. They act under written contracts and may only process your data on our instructions.

We do not sell, rent, or trade your personal data with advertisers, data brokers, or any third parties for marketing purposes.

6. Marketing and update emails

Marketing or update emails are optional and only sent if you consent - for example when you sign up for Dripply Launch updates, app update notifications, or city vote updates on our website. You can unsubscribe at any time using the link in any such email or by contacting hello@dripply.co.uk.

7. Deep links and link sharing

When you share a Full Moment from Dripply, we generate a link hosted on our own domain (dripply.co.uk via Netlify). On iOS this works as a Universal Link, on Android as an App Link, using the standard app_links package for Flutter. If the recipient has Dripply installed, the link opens the app directly. If not, they're redirected to our website.

We do not use a third-party deep linking provider. The redirect files are static, hosted on Netlify, and contain no tracking or analytics. Netlify, as our website host, may log basic technical access information (IP address, browser type) for security and standard hosting purposes - see our Cookie Policy for details.

8. Public vs private content

My Time saves are private to your account. They are used for your Ring, timeline, recent places, and personal rhythm/stats, and they are not shown in the city feed.

Full Moments are public within Dripply by default. When you post a Full Moment, your username, profile photo if added, place name, caption, photo, mood/drink type, and timestamp may be visible to other users browsing the relevant city feed.

Your profile visibility setting controls whether other users can view your profile page. It does not turn My Time saves public, and it does not necessarily remove Full Moments from the city feed unless the app specifically offers that option.

You can delete any of your own moments at any time. Once deleted, they are removed from feeds, your timeline, and our database (some backups may persist for up to 30 days for disaster recovery).

9. Children

Dripply is not intended for users under the age of 16. We do not knowingly collect personal data from anyone under 16. If we become aware that someone under 16 has created an account, we will delete it.

10. Your rights

Under UK GDPR and EU GDPR, you have the right to:

To exercise any of these rights, email hello@dripply.co.uk. We will respond within 30 days. You can also delete your account directly from the app's Settings → Delete Account (we offer a 30-day grace period during which you can cancel the deletion).

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we've mishandled your data.

11. How long we keep your data

12. International transfers

Some of our service providers (including Google LLC, RevenueCat Inc., Resend Inc., and Netlify Inc.) are based in the United States, which means your personal data may be transferred outside the United Kingdom and European Economic Area.

Where this happens, we rely on appropriate safeguards including the UK International Data Transfer Addendum and Standard Contractual Clauses approved by the European Commission, ensuring your data receives the same level of protection as it would within the UK or EU.

13. Security

We use industry-standard security measures including encryption in transit (TLS), encryption at rest, Firebase Security Rules, and access controls. No system is 100% secure, but we work hard to protect your data and to act quickly if anything goes wrong.

14. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes - including any introduction of new features that affect data collection (such as optional location verification) - we will notify you in the app or by email at least 14 days before the changes take effect. The 'Last updated' date at the top of this document indicates the most recent version.

15. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, contact us:

BlueBlue Ltd (trading as Dripply)
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: hello@dripply.co.uk