Privacy Policy

Last updated: October 10, 2026

1. Information We Collect

When you create an account, make a booking, or use community features on Ruppell's website and related services (the "Service"), we collect:

We also collect information you provide in support communications or as an Operator, including business contact details, listing content, and licensing and insurance documentation.

2. How We Use Information

We use the information we collect to: create and maintain your account; process and confirm bookings; administer Operator onboarding and payouts; respond to inquiries; display and operate Community features; send booking confirmations and service communications; personalize activity recommendations; improve and secure the Service; and comply with legal obligations.

Where the EU or UK GDPR applies, we rely on contract performance for processing necessary to provide the accounts, bookings, Community features, and related service communications you request. We rely on consent for optional analytics as described in Section 3. We rely on our legitimate interests in responding to inquiries, managing Operator relationships, improving and securing the Service, preventing fraud, personalizing activity recommendations, and protecting legal rights, where the processing is necessary and those interests are not overridden by your interests or fundamental rights and freedoms. This does not replace consent where required by law. We also process information as necessary to comply with applicable EU, EU Member State, or UK legal obligations.

3. Cookies & Session Storage

This Service uses secure browser storage to keep you signed in between visits and to remember your choices (such as favorites and your cookie choice). You can sign out at any time; signing out clears your local session token.

Analytics cookies are off unless you say yes. We use Google Analytics to understand how the Service is used, but only after you tap Accept on the cookie notice. If you tap Decline, Google Analytics is not loaded and any Google Analytics cookies already on your device are removed. You can change your choice at any time with the Cookie settings link at the bottom of every page.

We do not currently respond to browser "Do Not Track" signals, as no common industry standard exists for interpreting them. Where applicable, we do honor the Global Privacy Control opt-out signal — see Section 9 (California Residents).

4. User-Generated Community Content

Content you post in the Community section — stories, tips, photos, and events — is visible to other registered Ruppell users. Your display name is shown alongside your posts. Do not post personally sensitive information (such as home address, phone number, or financial details) in public community posts. Ruppell stores uploaded community photos in secure cloud storage (Supabase Storage). Other users may copy or share your posts; deleting content from the Service does not remove copies held by others.

5. Third-Party Service Providers & Other Disclosures

We share information with the following providers solely to operate the Service:

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

We may also disclose information as reasonably necessary to comply with law or valid legal process, prevent fraud, protect rights and safety, or resolve disputes. We may disclose information in connection with a proposed or completed merger, financing, or transfer of our business, subject to appropriate confidentiality protections and applicable law.

6. Data Retention

Account and booking data is retained while your account is active and as reasonably necessary for the purposes described in this Policy. Community content is retained until you delete it or request account deletion. We may retain information as required or permitted by law for tax, accounting, fraud prevention, dispute resolution, or legal claims; retained information remains subject to this Policy. Deleted information may remain in restricted backups until overwritten in the ordinary course, subject to applicable law. You may request deletion of your account and associated data by emailing privacy@getruppell.com. We will process deletion requests within 30 days, subject to applicable legal exceptions and any shorter deadline or permitted extension under applicable law.

7. Your Rights

Depending on your jurisdiction and whether the relevant law applies to our processing (including under the CCPA for California residents and GDPR for EU/UK residents), you may have rights to access, correct, delete, or port your personal information, and to opt out of certain data processing. To exercise these rights, contact us at privacy@getruppell.com. Where applicable, you may also object to or restrict processing, withdraw consent without affecting prior lawful processing, appeal a denied request, or complain to the relevant privacy regulator. We may verify your identity and an authorized agent's authority where permitted by law; we will not discriminate against you for exercising protected privacy rights.

8. International Users & Data Transfers

Ruppell is based in the United States and primarily lists adventure activities located in and around New York City. If you access or use the Service from outside the United States — including from the European Economic Area, the United Kingdom, or elsewhere — your information will be transferred to, stored, and processed in the United States, which may not have data protection laws equivalent to those of your home jurisdiction. By using the Service, you understand and consent to this transfer, storage, and processing. If the EU or UK GDPR applies to our processing of your information, you may contact us at privacy@getruppell.com with questions or requests, including about international transfer safeguards; we will appoint a representative in the EU and/or UK if required by applicable law.

9. California Residents (CCPA)

We do not sell personal information or share it for cross-context behavioral advertising. California residents whose information is subject to the CCPA may request to know what personal information we have collected and how it is used, request deletion or correction, obtain a portable copy, or opt out of any future sale or sharing for cross-context behavioral advertising by contacting privacy@getruppell.com. Where applicable, you may also limit the use and disclosure of sensitive personal information by contacting us. We honor legally required opt-out preference signals, including Global Privacy Control, where applicable.

10. Children's Privacy

This Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such information, we will delete it promptly. Where New York's Child Data Protection Act applies to users aged 13–17, we obtain their informed consent before processing their personal data unless the processing is strictly necessary for a purpose permitted by that law. For users under 18 linked to a parent or guardian's account, any booking and associated charge additionally requires the guardian's review and approval before it is confirmed.

11. Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including encrypted transmission (HTTPS/TLS) and secure credential storage. Your password is hashed and is never stored in plain text. No method of transmission or storage is 100% secure; use a strong, unique password for your account.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or an in-app notice; the "Last updated" date above reflects the most recent revision. Where required by law, we will obtain consent before materially changing how we use or disclose previously collected information.

13. Contact

Privacy questions and requests: privacy@getruppell.com

Ruppell is operated by Premier Ruppell Holdings LLC, 144 E. 44th St. Suite 106 #1009, New York, NY 10017 · (888) 460-2282.