Privacy Policy

Last Updated: October 2026

Introduction

Rinse Repeat Labs (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website rinserepeatlabs.com (the “Site”) or engage our software development services.

Please read this policy carefully. By accessing or using our Site or services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Information We Collect

Information You Provide Directly

We collect information you voluntarily provide when you:

  • Submit inquiries or consultation requests: Name, email address, phone number, and details about your project or software idea
  • Apply to become a tester: Name, contact information, country and timezone, device information, optionally the email address tied to your Apple ID (for TestFlight), availability, and testing experience
  • Sign in to the tester portal: If you’re in our tester pool, the email address you sign in with, which we use to send you a one-time sign-in link
  • Join a paid test round: When you accept an invitation to a paid round, your payment method and payment handle (for example a PayPal or Venmo account, or a cryptocurrency wallet address). We do not ask for payment details at signup
  • Make payments: Payment is processed securely through Stripe. We do not store credit card numbers or financial account information on our servers
  • Communicate with us: Any information you include in emails or other communications

Information Collected Automatically

When you visit our Site, we may automatically collect:

  • Log Data: IP address, browser type and version, operating system, referring URLs, pages viewed, time and date of visits, and time spent on pages
  • Device Information: Device type, screen resolution, and device identifiers
  • Tester portal sign-in: When you ask for a sign-in link, we use your IP address to limit repeated requests. We store it only in hashed (scrambled) form and delete it within a day
  • Cookies and Similar Technologies: See “Cookies and Tracking Technologies” section below

Cookies and Tracking Technologies

We use only what the Site needs to work:

  • Essential storage and cookies: Required for the Site to function properly (e.g., remembering your theme preference, or keeping you signed in to the tester portal)

We don’t use analytics or advertising cookies, and no analytics or tracking script runs on this Site. Cloudflare and GitHub still receive the request information described under “Log Data” above, as any website host does.

The tester portal uses only its sign-in cookie, which expires after 30 days or when you sign out. You can control cookies through your browser settings. Note that disabling certain cookies may affect Site functionality.

How We Use Your Information

We use the information we collect to:

  • Respond to inquiries and provide requested services
  • Process consultation requests and create development proposals
  • Communicate with you about projects, services, and updates
  • Coordinate testing activities with registered testers
  • Process payments and maintain transaction records
  • Improve and optimize our Site and services
  • Detect, prevent, and address technical issues or security threats
  • Comply with legal obligations and enforce our terms

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We use third-party services to help operate our business:

  • Stripe: Payment processing (Privacy Policy)
  • Formspree: Form submission handling (Privacy Policy)
  • Apple TestFlight: If you’re invited to test an iOS app, we share your Apple ID email with Apple so it can send the invitation (Privacy Policy)
  • Cloudflare: Security and delivery for our Site, email for our rinserepeatlabs.com addresses, and hosting for the tester portal. If you’re in our tester pool, your name, email address, tester status and the test rounds you’re invited to are stored with Cloudflare so you can sign in and see them (Privacy Policy)
  • GitHub Pages: Website hosting (Privacy Statement)

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Criteria used to determine retention periods include:

  • The duration of our relationship with you
  • Legal obligations requiring data retention
  • Statute of limitations for potential legal claims
  • Guidelines issued by relevant data protection authorities

Tester applications: Applications are kept in our tester pool, on systems we operate ourselves. Once we add you to the pool, your name, email address, tester status and test-round invitations are also stored with Cloudflare for the tester portal, and removed from there as soon as you leave the pool. If you haven’t been invited to a test round within 12 months of applying, we delete your application. You can ask us to remove you from the pool at any time. We keep payment records for paid test rounds as long as tax and accounting law requires.

Data Security

We implement industry-standard security measures to protect your personal information, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure third-party payment processing
  • Regular security assessments
  • Access controls limiting who can view personal data

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

General Rights

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data, subject to certain exceptions
  • Portability: Request your data in a structured, machine-readable format
  • Objection: Object to processing of your personal data in certain circumstances

For California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

  • Right to know what personal information is collected, used, and shared
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your privacy rights

For EU/UK Residents (GDPR)

If you are in the European Economic Area or United Kingdom, you have rights under the General Data Protection Regulation, including those listed above. Our legal basis for processing includes consent, contract performance, and legitimate interests.

To exercise any of these rights, please contact us using the information below.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. We take appropriate safeguards to ensure your information remains protected.

Children’s Privacy

Our Site and services are not directed to children under 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly. If you believe we have collected information from a child, please contact us.

Our Site may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last Updated” date. Your continued use of the Site after changes constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our data practices, please contact us:

Email: [email protected]

We will respond to your request within a reasonable timeframe and in accordance with applicable law.