Privacy Policy

Privacy Policy

How Ribbit collects, uses, shares, secures, and retains information across the app, website, support channels, and advertiser workflows.

Effective: January 30, 2026
Updated: January 30, 2026

1. Introduction

Ribbit values your privacy. This policy explains how we collect, use, disclose, store, and protect information when you access or use the Ribbit mobile application, websites, and related services.

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, do not use the Service.

2. Information We Collect

We collect information you provide, information generated through your use of the Service, and information from third parties.

2.1 Account and Profile Information

  • Unique user identifier.
  • Email address.
  • Username and display name.
  • Profile photo and bio.
  • Phone number encrypted at rest.
  • Account role such as user, moderator, advertiser, or admin.
  • Identity verification status.

2.2 Identity Verification Data

  • Government-issued ID images.
  • Selfie and facial images.
  • Encrypted Apple Wallet ID data.
  • Verification decisions and transaction IDs.
  • Hashed document identifiers for duplicate detection.
  • Identity images are transmitted directly to identity verification providers and are not stored long-term by Ribbit.

2.3 Content You Create

  • Posts.
  • Images and videos.
  • Reels and stories.
  • Comments.
  • Messages and message attachments.

2.4 Activity and Engagement Data

  • Votes.
  • Follows and followers.
  • Story views.
  • Game scores.
  • Spinwheel usage.
  • Survey participation.
  • Boost activity.
  • Point transactions.

2.5 Rewards and Cashout Data

  • Gift card email.
  • Gift card brand and amount.
  • Cashout transaction logs.
  • IP address and user agent.

2.6 Analytics and Usage Data

  • App interactions.
  • Screen views.
  • Buttons clicked.
  • Error logs.
  • Device type and operating system.
  • Approximate location derived from IP.

2.7 Support and Communications

  • Support tickets.
  • Emails to Ribbit.
  • Contact form submissions.

2.8 Website Data

  • Contact form data.
  • Newsletter signups.
  • Google Analytics usage data.
  • reCAPTCHA interaction data.

3. How We Use Information

  • Provide and operate the Service.
  • Verify identity and age.
  • Prevent fraud and abuse.
  • Enable messaging and social features.
  • Award and manage points.
  • Process gift card redemptions.
  • Provide customer support.
  • Improve features and performance.
  • Personalize user experience.
  • Send transactional notifications.
  • Enforce the Terms and Community Guidelines.
  • Comply with legal obligations.

5. How We Share Information

We may share information with service providers, where required by law, in connection with business transfers, or with your consent. Ribbit does not sell personal data.

5.1 Service Providers

  • Firebase for hosting, database, and authentication.
  • Twilio for SMS verification.
  • ID Analyzer and Apple Wallet for identity verification.
  • Tango Card for gift card fulfillment.
  • SendGrid for email.
  • Stripe or PayPal for payments.
  • Google Analytics.
  • reCAPTCHA.
  • Agora if enabled.

6. Data Retention

We retain information only as long as necessary to provide the Service and comply with legal obligations. After account deletion, most data is deleted within 30 days except where retention is legally required.

7. Data Security

  • Encryption at rest and in transit.
  • End-to-end encrypted messages.
  • Access controls.
  • Rate limiting.
  • Server-side validation.
  • Secure storage rules.
  • No system is perfectly secure.

8. Your Rights

  • Access your data.
  • Correct your data.
  • Delete your data.
  • Object to processing.
  • Restrict processing.
  • Data portability.
  • Withdraw consent.
  • Requests may be submitted to privacy@ribbit.app.

9. GDPR Rights

EU users may lodge complaints with their local Data Protection Authority.

10. California Privacy Rights

  • Know what data is collected.
  • Request deletion.
  • Opt out of sale, although Ribbit does not sell data.
  • Receive non-discriminatory treatment when exercising privacy rights.

11. Children's Privacy

Ribbit is not intended for users under 16 and does not knowingly collect data from children under 16.

12. Cookies and Tracking

We use cookies and similar technologies for authentication, analytics, and security. You may control cookies through your browser settings.

13. International Transfers

Your data may be processed in the United States and other countries. We use safeguards such as standard contractual clauses where required.

15. Changes to This Policy

We may update this Privacy Policy. Continued use of the Service means acceptance of the revised policy.

16. Contact

  • Privacy: privacy@ribbit.app
  • Legal: legal@ribbit.app
  • Website: Contact Form