Privacy Policy

Last updated: July 16, 2026

My Ring Buddy helps you choose an engagement ring with confidence, and discretion is the heart of the product. This policy explains what we collect, why, and what your rights are.

Who we are

What we collect

• Account data. Your name and email address, handled by our sign-in provider (Clerk). We never see or store your password.
• Your decision data. The rings you save (listing links, photos, specs, prices), your budget and timeline answers, and notes you add. This exists so the product works for you; it is never shared or sold.
• Survey and vote replies. When you share a link, invitees answer without creating an account. A name field is optional and shown only to you.
• Payment data. Payments are processed by Stripe. Your card details go directly to Stripe; we never receive or store them. We only learn that your unlock was paid.
• Technical data. Basic logs needed to run and secure the service.

What we do NOT do

• We do not sell or share your data with jewelers, retailers, or advertisers. We are paid by you, never by sellers; that independence is the product.
• We do not run advertising or tracking cookies. The only cookies are the essential ones that keep you signed in.
• We do not notify or contact your partner. Surprise mode exists to keep your plans private.

Who processes data for us

We use a small set of processors, each bound by their own data-processing terms: Clerk (sign-in), Convex (application database), Stripe (payments), Vercel (hosting), and Firecrawl (fetching the public listing pages you paste, on your behalf). Ring price benchmarking runs against our own database and involves no personal data.

Legal basis and retention

We process your data to perform our contract with you (Art. 6(1)(b) GDPR) and for our legitimate interest in securing and improving the service (Art. 6(1)(f)). We keep your data while your account exists. Delete your account, or ask us to, and your decision data is erased.

Your rights

Under the GDPR you can ask for access, correction, erasure, restriction, or a portable copy of your data, and you can object to processing. Write to the contact address above. You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.

Changes

If this policy changes materially, we will note it here with a new date. Continued use after a change means you accept the updated policy.