1. Introduction
Ribbit values your privacy. This policy explains how we collect, use, disclose, store, and protect information when you access or use the Ribbit mobile application, websites, and related services.
By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, do not use the Service.
2. Information We Collect
We collect information you provide, information generated through your use of the Service, and information from third parties.
2.1 Account and Profile Information
- Unique user identifier.
- Email address.
- Username and display name.
- Profile photo and bio.
- Phone number encrypted at rest.
- Account role such as user, moderator, advertiser, or admin.
- Identity verification status.
2.2 Identity Verification Data
- Government-issued ID images.
- Selfie and facial images.
- Encrypted Apple Wallet ID data.
- Verification decisions and transaction IDs.
- Hashed document identifiers for duplicate detection.
- Identity images are transmitted directly to identity verification providers and are not stored long-term by Ribbit.
2.3 Content You Create
- Posts.
- Images and videos.
- Reels and stories.
- Comments.
- Messages and message attachments.
2.4 Activity and Engagement Data
- Votes.
- Follows and followers.
- Story views.
- Game scores.
- Spinwheel usage.
- Survey participation.
- Boost activity.
- Point transactions.
2.5 Rewards and Cashout Data
- Gift card email.
- Gift card brand and amount.
- Cashout transaction logs.
- IP address and user agent.
2.6 Analytics and Usage Data
- App interactions.
- Screen views.
- Buttons clicked.
- Error logs.
- Device type and operating system.
- Approximate location derived from IP.
2.7 Support and Communications
- Support tickets.
- Emails to Ribbit.
- Contact form submissions.
2.8 Website Data
- Contact form data.
- Newsletter signups.
- Google Analytics usage data.
- reCAPTCHA interaction data.
3. How We Use Information
- Provide and operate the Service.
- Verify identity and age.
- Prevent fraud and abuse.
- Enable messaging and social features.
- Award and manage points.
- Process gift card redemptions.
- Provide customer support.
- Improve features and performance.
- Personalize user experience.
- Send transactional notifications.
- Enforce the Terms and Community Guidelines.
- Comply with legal obligations.
4. Legal Bases for Processing
- Performance of a contract.
- Consent.
- Legitimate interests.
- Legal obligations.
5.1 Service Providers
- Firebase for hosting, database, and authentication.
- Twilio for SMS verification.
- ID Analyzer and Apple Wallet for identity verification.
- Tango Card for gift card fulfillment.
- SendGrid for email.
- Stripe or PayPal for payments.
- Google Analytics.
- reCAPTCHA.
- Agora if enabled.
6. Data Retention
We retain information only as long as necessary to provide the Service and comply with legal obligations. After account deletion, most data is deleted within 30 days except where retention is legally required.
7. Data Security
- Encryption at rest and in transit.
- End-to-end encrypted messages.
- Access controls.
- Rate limiting.
- Server-side validation.
- Secure storage rules.
- No system is perfectly secure.
8. Your Rights
- Access your data.
- Correct your data.
- Delete your data.
- Object to processing.
- Restrict processing.
- Data portability.
- Withdraw consent.
- Requests may be submitted to privacy@ribbit.app.
9. GDPR Rights
EU users may lodge complaints with their local Data Protection Authority.
10. California Privacy Rights
- Know what data is collected.
- Request deletion.
- Opt out of sale, although Ribbit does not sell data.
- Receive non-discriminatory treatment when exercising privacy rights.
11. Children's Privacy
Ribbit is not intended for users under 16 and does not knowingly collect data from children under 16.
13. International Transfers
Your data may be processed in the United States and other countries. We use safeguards such as standard contractual clauses where required.
14. Third-Party Links
Ribbit is not responsible for third-party privacy practices.
15. Changes to This Policy
We may update this Privacy Policy. Continued use of the Service means acceptance of the revised policy.
16. Contact
- Privacy: privacy@ribbit.app
- Legal: legal@ribbit.app
- Website: Contact Form
