Ribbit - Privacy Policy

Privacy Policy

Effective Date: January 1, 2026

Ribbit (“Ribbit,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your information when you access or use the Ribbit website, applications, and services (collectively, the “Services”).

By using Ribbit, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of information as described below. If you do not agree, please do not use the Services.

1. Eligibility & Children’s Privacy

Ribbit is intended solely for individuals who are at least 13 years old. The Services are not designed for, directed at, or knowingly made available to children under the age of 13.
Ribbit does not knowingly collect, solicit, or store personal information from children under the age of 13, including names, email addresses, messages, uploaded content, or any other data that could be used to identify a child.
If we become aware, through user reports, automated systems, or other means, that a user is under the age of 13, we will take prompt action to restrict access, terminate the account, and delete or anonymize any associated personal information, except where retention is required by law.
We may request age verification or parental consent where required or where there is reason to believe an account may belong to a user under the age of 13. Failure to provide satisfactory verification may result in account suspension or termination.
Parents or legal guardians who believe that a child under the age of 13 has provided personal information to Ribbit may contact us to request review, access, or deletion of such information in accordance with applicable law.

If you believe that a child under the age of 13 has provided us with personal information, created an account, or is otherwise using the Services without appropriate authorization, please contact us immediately. Upon receiving a credible report, we will investigate and take appropriate action, which may include disabling access, deleting data, and preventing future registration.

Nothing in this section is intended to create an obligation for Ribbit to monitor the age of users proactively. Users are responsible for providing accurate age information during registration, and Ribbit relies on user representations when determining eligibility.

2. Information We Collect

2.1 Information You Provide Directly

Account Information. Information you provide when creating or updating an account, including your username, email address, display name, profile photo, biography, preferences, and other optional profile details.
Authentication & Security Information. Information necessary to authenticate your account, such as encrypted passwords, login tokens, and security-related metadata. Ribbit does not store passwords in plain text.
User-Generated Content. Any content you submit, post, upload, transmit, or otherwise make available through the Services, including text posts, comments, messages, images, media, reactions, and associated metadata.
Communications. Messages you send or receive through the platform, including private messages, public comments, replies, and interactions with other users.
Support & Moderation Communications. Information you provide when contacting customer support, submitting reports, appeals, feedback, or communicating with moderators, including the content of those communications and any attachments.
Feedback & Submissions. Suggestions, bug reports, surveys, feature requests, or other feedback you voluntarily submit to Ribbit, whether through forms, email, or in-app tools.
Optional Information. Any additional information you choose to provide, such as links, social profiles, preferences, or customization settings. Providing such information is entirely optional unless otherwise stated.
Consent & Acknowledgments. Records of your acceptance of the Terms, Privacy Policy, and other agreements, including timestamps and IP addresses associated with such consent where required by law.

2.2 Content You Upload

When you upload images, videos, or other media to Ribbit, that content is processed, stored, and delivered using trusted third-party media hosting and content delivery services, such as Cloudinary, which act as service providers and data processors on our behalf. These services are used to securely store, optimize, resize, transform, and deliver media content efficiently across devices and networks.

Media uploaded to Ribbit may be publicly visible, accessible, or shared with other users depending on how you choose to use the Services, your privacy settings, and the context in which the content is posted. You acknowledge that content you choose to make public may be viewed, copied, shared, or redistributed by other users or third parties, and Ribbit cannot control how such content is used once it is made publicly available.

By uploading media, you represent and warrant that you own or have the necessary rights, licenses, consents, and permissions to upload, store, and share such content through the Services, and that doing so does not violate any applicable laws or third-party rights.

Ribbit does not claim ownership of your uploaded media. However, by uploading content, you grant Ribbit and its service providers a limited license to process, host, store, reproduce, and transmit such media solely as necessary to operate, maintain, secure, and improve the Services. This license terminates in accordance with our content retention practices when the content is removed, except where continued retention is required for legal, security, or backup purposes.

While Ribbit takes reasonable measures to work with reputable third-party providers, we do not control the internal operations of such services and are not responsible for their independent privacy practices or security measures. We encourage you to review the privacy policies of any third-party services involved in media processing.

2.3 Information Collected Automatically

When you access or use Ribbit, certain information is collected automatically through standard technologies and server logs. This information helps us operate, secure, analyze, and improve the Services and understand how users interact with the platform.

IP Address. Used to help identify your general geographic location, detect suspicious activity, prevent fraud or abuse, enforce rate limits, and comply with legal obligations.
Device Information. Including device type, manufacturer, model, and unique device identifiers (where applicable), which help us optimize performance and compatibility across devices.
Browser Information. Such as browser type, version, language settings, and configuration, which assists in debugging issues and improving user experience.
Operating System. Including operating system type and version, which helps ensure the Services function correctly across different platforms.
Usage Data. Information about how you interact with the Services, such as pages viewed, features used, content viewed or interacted with, buttons clicked, scroll behavior, and navigation paths.
Log Data. Including dates and times of access, session duration, error logs, crash reports, and diagnostic data used to monitor reliability and resolve technical issues.
Referral and Source Information. Including referring URLs, links, or sources that directed you to Ribbit, which helps us understand traffic patterns and improve outreach.
Approximate Location Data. Derived from your IP address (such as city, region, or country) for security, compliance, analytics, and localization purposes.

This automatically collected information does not typically include direct identifiers such as your real name or precise location. We use this data in aggregate and individual forms to maintain the security of the Services, detect abuse or unauthorized access, analyze trends, improve functionality, and comply with applicable laws and regulations.

Where required by law, we obtain consent for certain types of automated data collection, and you may have the ability to limit or control such collection through your browser or device settings. However, disabling certain technologies may impact the availability or functionality of the Services.

3. How We Use Your Information

Ribbit uses the information we collect for a variety of legitimate business and operational purposes necessary to provide, maintain, protect, and improve the Services. Depending on the context, information may be used individually or in aggregated and anonymized forms.

Provide, Operate, and Maintain the Services. To enable core functionality of Ribbit, including account access, authentication, content delivery, messaging, notifications, media hosting, and community interactions.
Create and Manage User Accounts. To register users, verify identities where required, manage account settings, process account changes, and support account recovery or security actions.
Enable User-Generated Content and Social Features. To allow posting, commenting, messaging, reacting, following, reporting content, and participating in community features consistent with user preferences and settings.
Store, Process, and Deliver Media. To host, process, optimize, and distribute uploaded images and other media using third-party infrastructure, ensuring performance, reliability, and accessibility across devices.
Communicate With Users. To send service-related messages, security alerts, administrative notices, policy updates, feature announcements, and respond to support requests or inquiries.
Moderation, Safety, and Enforcement. To monitor activity, detect violations of our Terms, investigate reports, prevent fraud, spam, abuse, harassment, and enforce platform rules and community standards.
Security and Integrity. To protect Ribbit, our users, and third parties from unauthorized access, data breaches, account compromise, malicious activity, or misuse of the Services.
Service Improvement and Development. To analyze usage patterns, diagnose technical issues, conduct research, develop new features, optimize performance, and enhance usability and accessibility.
Analytics and Insights. To generate aggregated statistics and insights about user behavior, trends, and engagement in order to better understand how the Services are used and improve decision-making.
Legal and Regulatory Compliance. To comply with applicable laws, regulations, court orders, lawful requests, and to protect our legal rights and interests.
Business Operations. To support internal operations such as auditing, troubleshooting, recordkeeping, risk assessment, and business continuity.

Where required by applicable law, Ribbit processes personal information based on appropriate legal grounds, which may include user consent, performance of a contract, compliance with legal obligations, and our legitimate interests in operating a safe and reliable platform.

4. Third-Party Services & Media Hosting

Ribbit relies on trusted third-party service providers to support and operate core aspects of the Services. These providers help us deliver functionality efficiently, securely, and at scale, and may process limited personal information on our behalf strictly in accordance with our instructions and applicable data protection laws.

Images, videos, and other media uploaded to Ribbit are processed, optimized, stored, and delivered through third-party media hosting and content delivery services such as Cloudinary. These providers act as data processors on Ribbit’s behalf and process user content only as necessary to enable media storage, transformation, and delivery across devices and networks. They do not claim ownership of user content and are contractually restricted from using such content for their own purposes.

In addition to media hosting, Ribbit may use third-party providers for services such as:

Cloud infrastructure and application hosting
Email delivery and transactional communications
Security monitoring, abuse prevention, and fraud detection
Performance monitoring, error tracking, and diagnostics
Analytics and usage measurement to improve the Services

These service providers are granted access only to the information reasonably necessary to perform their functions and are obligated to protect such information through appropriate confidentiality, security, and data protection measures. Ribbit does not permit third-party service providers to use personal information for their own marketing, advertising, or unrelated purposes.

Ribbit does not sell personal information to third parties. Any sharing of information with third-party providers is conducted for legitimate business purposes such as operating, maintaining, securing, and improving the Services, or as otherwise described in this Privacy Policy.

Some third-party providers may be located in jurisdictions outside your country of residence. Where applicable, Ribbit takes reasonable steps to ensure that appropriate safeguards are in place to protect personal information transferred across borders, in compliance with applicable laws.

While we carefully select and review our service providers, Ribbit is not responsible for the independent privacy practices of third parties. We encourage users to review the privacy policies of any third-party services that may be linked to or integrated with the Services.

5. Cookies & Similar Technologies

Ribbit uses cookies and similar tracking technologies to support the operation, security, and functionality of the Services. Cookies are small text files stored on your device that allow the Services to recognize your browser, maintain sessions, and remember certain information between visits.

We use cookies and related technologies for a variety of purposes, including to:

Authenticate users and maintain secure login sessions
Remember user preferences and settings
Enable core features and functionality of the Services
Enhance performance, stability, and reliability
Detect and prevent fraud, abuse, and unauthorized access
Analyze usage patterns to improve user experience

Cookies used by Ribbit may be classified as session cookies, which are deleted when you close your browser, or persistent cookies, which remain on your device for a defined period or until you delete them. Some cookies may be set directly by Ribbit, while others may be set by trusted third-party service providers acting on our behalf.

You have the ability to control or disable cookies through your browser or device settings. Please note that restricting or disabling cookies may limit your ability to access certain features of the Services, interfere with login functionality, or reduce overall performance and usability.

Ribbit does not use cookies to sell personal information or to track users across unrelated websites for advertising purposes. Where required by applicable law, Ribbit will obtain appropriate consent before using non-essential cookies and will provide additional controls or disclosures.

By continuing to use the Services without adjusting your cookie settings, you consent to the use of cookies and similar technologies as described in this Privacy Policy.

6. How We Share Information

Ribbit does not sell personal information. We share information only in limited circumstances and solely for legitimate business, legal, or safety-related purposes as described below.

We may share personal information in the following situations:

Service Providers and Processors. We may share information with trusted third-party service providers who perform services on our behalf, such as cloud hosting, media processing, email delivery, analytics, security monitoring, and customer support. These providers are authorized to access personal information only as necessary to perform their functions and are contractually obligated to protect such information and use it solely in accordance with our instructions and applicable data protection laws.
Legal Compliance and Lawful Requests. We may disclose information if required to do so by law, regulation, legal process, court order, subpoena, or lawful request from government or regulatory authorities. We may also disclose information when we believe in good faith that such disclosure is necessary to comply with legal obligations or to protect our legal rights.
Protection of Rights, Safety, and Security. We may share information when we believe it is reasonably necessary to investigate, prevent, or take action regarding suspected illegal activity, fraud, abuse, violations of our Terms or policies, threats to personal safety, or harm to Ribbit, our users, or the public.
Business Transfers. In the event of a merger, acquisition, reorganization, bankruptcy, financing, sale of assets, or similar corporate transaction, personal information may be transferred as part of that transaction. Any such transfer will remain subject to this Privacy Policy and applicable law.

Where practicable and legally permitted, Ribbit may attempt to notify users of requests for their personal information or challenge such requests before disclosure. However, Ribbit may be prohibited by law from providing such notice in certain circumstances.

Ribbit does not share personal information for third-party advertising purposes and does not permit service providers to use personal information for their own marketing or unrelated commercial purposes.

We may also share aggregated or de-identified information that cannot reasonably be used to identify an individual. Such information may be used for analytics, research, reporting, or service improvement and is not considered personal information.

7. Data Retention

Ribbit retains personal information only for as long as reasonably necessary to provide, operate, and maintain the Services, fulfill the purposes described in this Privacy Policy, comply with applicable legal and regulatory obligations, resolve disputes, and enforce our agreements and policies.

The length of time we retain personal information depends on the nature of the data, the purposes for which it was collected, and applicable legal requirements. For example, account information may be retained for the duration of your account’s existence, while certain logs, security records, or transaction-related data may be retained for longer periods as required for compliance, fraud prevention, auditing, or security purposes.

When you delete specific content or request deletion of your account, we take reasonable and commercially appropriate steps to delete or anonymize associated personal information within a reasonable period of time. However, some information may be retained temporarily or indefinitely where required or permitted by law, including for legal compliance, dispute resolution, enforcement of our Terms, protection of the rights and safety of Ribbit and its users, or maintenance of system backups and archives.

Deleted or deactivated content may persist in backup systems, logs, or archives for a limited period of time and may not be immediately removed from all storage locations. Such retained information is securely stored, access-restricted, and used only for lawful and legitimate purposes.

In some cases, Ribbit may retain de-identified or aggregated information that can no longer be used to identify an individual. This information may be retained indefinitely and used for analytics, research, reporting, service improvement, and other lawful business purposes.

Ribbit does not guarantee the immediate or permanent deletion of all data upon account termination and encourages users to maintain their own copies or backups of any content they wish to retain.

8. Data Security

Ribbit takes the security of personal information seriously and implements reasonable and appropriate administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

These safeguards may include, but are not limited to, access controls, encryption where appropriate, secure authentication practices, monitoring and logging, internal security policies, employee training, and the use of reputable third-party service providers with established security standards. Access to personal information is restricted to authorized personnel who require such access for legitimate business purposes.

Despite our efforts, no method of transmission over the internet or method of electronic storage is completely secure. As a result, Ribbit cannot and does not guarantee the absolute security of any information transmitted to or stored on the Services. You acknowledge and agree that you provide personal information at your own risk.

In the event of a security incident or data breach that affects personal information, Ribbit will take reasonable steps to investigate, mitigate, and remediate the incident in accordance with applicable law. Where legally required, we may provide notice to affected users and relevant authorities.

You are responsible for maintaining the security of your own account credentials and for taking reasonable steps to protect your devices, networks, and access information. Ribbit will not be responsible for unauthorized access resulting from your failure to safeguard your login information or personal devices.

9. Your Rights & Choices

Depending on your location and applicable data protection laws, you may have certain rights and choices regarding your personal information. These rights are not absolute and may be subject to limitations, exceptions, or legal requirements.

Your rights may include, but are not limited to, the following:

Right of Access. You may have the right to request confirmation of whether we process your personal information and to obtain a copy of the personal information we hold about you, subject to applicable law.
Right to Correction. You may request that we correct or update inaccurate, incomplete, or outdated personal information associated with your account.
Right to Deletion. You may request the deletion of certain personal information, subject to legal, regulatory, security, and operational requirements that may require us to retain some data.
Right to Restrict Processing. You may have the right to request that we limit or restrict the processing of your personal information in certain circumstances, such as while a request is being reviewed.
Right to Object. You may have the right to object to certain types of processing, including processing based on legitimate interests, where permitted by law.
Right to Data Portability. Where required by applicable law, you may have the right to request a copy of certain personal information in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent. Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise any of these rights, you may contact us using the contact information provided below. We may require verification of your identity before processing your request in order to protect your privacy and security.

We will respond to verified requests within the timeframes required by applicable law. In some cases, we may deny or limit a request where permitted or required by law, such as where fulfilling the request would impair the rights of others, interfere with legal obligations, or compromise the security or integrity of the Services.

If you believe that your rights have been violated, you may have the right to lodge a complaint with a data protection authority or other regulatory body in your jurisdiction.

10. International Data Transfers

Ribbit operates on a global basis, and as a result, your personal information may be transferred to, processed in, and stored on servers or systems located outside your country, state, or province of residence. These jurisdictions may have data protection laws that differ from those in your location.

By accessing or using the Services, you acknowledge and consent to the transfer, processing, and storage of your personal information in jurisdictions outside your place of residence, including in countries where Ribbit or its service providers operate. Such transfers are conducted for the purposes described in this Privacy Policy, including service delivery, security, analytics, and operational support.

Where required by applicable law, Ribbit implements appropriate safeguards to protect personal information transferred internationally. These safeguards may include contractual protections, data processing agreements, standard contractual clauses, or other lawful transfer mechanisms designed to ensure an adequate level of data protection.

Ribbit takes reasonable steps to ensure that service providers processing personal information on its behalf do so in a manner consistent with this Privacy Policy and applicable data protection laws. However, you acknowledge that international data transfers may involve risks inherent to cross-border data processing.

If you do not consent to the transfer of your personal information outside your jurisdiction, you should not use the Services.

11. No Professional Advice

All content made available through Ribbit, including posts, messages, comments, media, and any other user-generated or platform-provided material, is provided solely for informational, entertainment, and social purposes. Such content is not intended to, and does not, constitute legal, medical, financial, investment, health, or other professional advice of any kind.

Ribbit does not endorse, verify, or guarantee the accuracy, completeness, reliability, or usefulness of any content made available through the Services. You should not rely on any information obtained through Ribbit as a substitute for professional advice from a qualified professional who is familiar with your individual circumstances.

Any decisions or actions you take based on content obtained through the Services are taken at your own risk. Ribbit expressly disclaims all liability for any loss, harm, injury, or damage arising from or related to your reliance on any information or content made available through the Services.

12. Third-Party Links

The Services may contain links to, integrations with, advertisements for, or references to third-party websites, applications, services, or resources that are not owned or controlled by Ribbit. These links are provided solely for your convenience and do not constitute an endorsement, sponsorship, or approval by Ribbit of any third-party content, products, or services.

Ribbit has no control over, and assumes no responsibility for, the content, availability, accuracy, security, or privacy practices of any third-party websites or services. Your interactions with third parties, including the submission of personal information or the purchase of goods or services, are solely between you and the applicable third party and are governed by that party’s own terms and privacy policies.

You acknowledge and agree that Ribbit shall not be responsible or liable, directly or indirectly, for any damage, loss, or harm caused or alleged to be caused by or in connection with your use of or reliance on any third-party content, goods, services, or resources available through the Services.

Ribbit encourages you to review the terms of use and privacy policies of any third-party website or service before engaging with or providing information to such third parties. Access to third-party links is at your own risk.

13. Data Retention & Potential Losses

Ribbit does not guarantee that any content, messages, media, or other data submitted, stored, or made available through the Services will be retained for any specific period of time or preserved indefinitely. You acknowledge and agree that content may be lost, deleted, corrupted, or become inaccessible due to system limitations, technical failures, maintenance activities, policy enforcement, account actions, or circumstances beyond Ribbit’s control.

You are solely responsible for creating and maintaining your own backups or copies of any content, information, or data that you wish to retain. Ribbit is not responsible for any loss of content, data, or information, whether arising from account termination, content removal, service interruption, system errors, security incidents, or changes to the Services.

Ribbit reserves the right, at its sole discretion, to delete, modify, restrict access to, or remove any content or data at any time, with or without notice, including for purposes of maintenance, system optimization, compliance with legal obligations, enforcement of policies, or protection of the platform and its users.

Deleted or modified content may persist temporarily in backups, logs, or archival systems and may not be immediately or permanently removed from all storage locations. Ribbit makes no representations or warranties regarding the recoverability of any deleted or altered content.

By using the Services, you acknowledge and accept the inherent risks associated with digital storage and online platforms, including the potential for data loss, and agree that Ribbit shall not be liable for any loss or damage resulting from such events.

14. Legal Disclosures

Ribbit may disclose personal information or other data where required or permitted to do so by applicable law, regulation, legal process, subpoena, court order, governmental request, or law enforcement authority.

We may also disclose information where we believe, in good faith, that such disclosure is necessary or appropriate to:

Comply with legal obligations or lawful requests
Enforce or apply our Terms, policies, or agreements
Investigate, prevent, or address suspected or actual illegal activity, fraud, abuse, security incidents, or violations of our policies
Protect the rights, property, safety, or security of Ribbit, our users, third parties, or the public
Respond to emergencies or imminent threats of harm

Where legally permitted, Ribbit may attempt to notify affected users prior to disclosing personal information in response to legal requests. However, Ribbit reserves the right to delay or withhold such notice where prohibited by law, court order, or where notification would be impractical, ineffective, or pose a risk to individuals or the Services.

Ribbit may also disclose aggregated, anonymized, or de-identified information that does not reasonably identify an individual for lawful business, research, reporting, or compliance purposes.

Nothing in this Privacy Policy limits Ribbit’s ability to cooperate with lawful requests or to take actions necessary to protect the integrity, security, and lawful operation of the Services.

15. Changes to This Privacy Policy

Ribbit reserves the right, in its sole discretion, to modify, update, or replace this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, business operations, or the Services we provide.

When we make changes to this Privacy Policy, we will revise the effective date at the top of the policy and may, where reasonably practicable, provide additional notice through the Services, such as via a website banner, in-app notification, or other communication. The method and timing of notice may vary depending on the nature of the changes and applicable legal requirements.

Your continued access to or use of the Services after any changes to this Privacy Policy become effective constitutes your acknowledgment and acceptance of the updated policy. If you do not agree to the revised Privacy Policy, you must discontinue use of the Services and, where applicable, close your account.

It is your responsibility to review this Privacy Policy periodically to stay informed of any updates or changes. Ribbit’s failure to enforce any provision of this Privacy Policy shall not be construed as a waiver of that provision or of Ribbit’s right to enforce it in the future.

16. Business Transfers

Ribbit may transfer, assign, or disclose personal information and other data in connection with, or in contemplation of, a merger, acquisition, reorganization, consolidation, bankruptcy, liquidation, dissolution, financing, restructuring, or sale of all or a portion of its assets or business.

Such transfers may occur as part of due diligence or as a completed transaction and may involve the transfer of user accounts, content, and associated data to a successor entity or third party. Any recipient of such information will be required to handle personal information in a manner consistent with this Privacy Policy and applicable data protection laws.

Ribbit will take reasonable steps to ensure that appropriate safeguards are in place to protect personal information during and after any business transfer. However, you acknowledge that such transfers may be necessary for business continuity and that your information may become subject to the privacy practices of a successor entity.

Nothing in this Privacy Policy restricts Ribbit’s ability to transfer non-personal, aggregated, or de-identified information in connection with business transactions or for other lawful purposes.

17. Contact Information

If you have questions or concerns about this Privacy Policy or your personal information, please contact us at:

Email: support@ribbitchat.com

By using Ribbit, you acknowledge that you have read and understood this Privacy Policy.

If you do not agree to these Terms and/or our Privacy Policy, please discontinue use of Ribbit. Thank you for being part of our community.