Privacy Policy

Ribbn (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and how we protect it when you use the Ribbn mobile application (“App”). By using Ribbn, you agree to the practices described in this policy.

1. Information We Collect

Information You Provide

• Account information: name, email address, and password
• Profile information: your cancer diagnosis, treatment status, and support preferences you choose to share
• Communications: messages, community posts, and feedback you submit through the App
• Event participation: RSVPs and attendance information for local events

Information Collected Automatically

• Device information: device type, operating system, and app version
• Usage data: features you interact with and time spent in the App
• Log data: crash reports and diagnostic information

We do not sell your personal information.

2. How We Use Your Information

We use the information we collect to:

• Match you with peers who share similar cancer experiences or support needs
• Surface relevant community spaces and local events
• Improve the App and develop new features
• Send you important updates about Ribbn (you can opt out of non-essential communications)
• Comply with legal obligations

3. How We Share Your Information

We do not sell or rent your personal information to third parties. We may share information in the following limited circumstances:

• With other users: only the profile information you choose to make visible
• With Ribbn’s moderators: when content or an account is reported, as described in Section 5
• With service providers: trusted vendors who help us operate the App (e.g., cloud hosting, analytics), under strict confidentiality agreements
• With partner organizations: only with your explicit consent, and only in aggregate or anonymized form unless you specifically opt in to being connected
• If required by law: in response to a valid legal request or to protect the rights and safety of our users

4. Consumer Health Data

This section is our consumer health data privacy policy. It explains how we handle information about your health, including under laws such as Washington’s My Health My Data Act. We ask for your consent before we collect it.

What we collect

• Your cancer type, and whether to show it exactly or only as a category
• Your treatment status (for example, newly diagnosed, in treatment, or survivor)
• If you join as a supporter, the cancer types you support
• Any health information you choose to include in your bio, posts, comments, or messages

Where it comes from and why we use it

You give it to us directly. We use it to show it on your profile as you choose, to suggest people and communities with similar experiences, and to keep Ribbn safe (for example, when reviewing reported content).

Who it is shared with

• Other Ribbn members: your cancer type (or only its category, if you choose) and treatment status as shown on your profile. Your birthday is never shown to others, only your age.
• Ribbn’s moderators: if something you posted or sent is reported, the people who review it can see it, including any health information in it (see Section 5).
• Service providers that run Ribbn for us: cloud hosting and our database; push notification delivery, which can include the text of messages you receive in the notification preview; and error monitoring, with health fields removed. They may use it only to provide their service to us.
• If required by law, as described in Section 3.

We don’t sell your health data.

Your choices and rights

You can change or remove your cancer information at any time in Edit Profile, or delete your account in Settings, which deletes it. You may also ask us to confirm what health data we hold, give you a copy, delete it, or stop collecting it, by emailing info@joinribbn.org. We respond within 45 days. If we decline your request, you can appeal by replying to our response, and we will answer the appeal within 45 days.

5. Reports and Moderation

You can report posts, comments, messages, and profiles from inside the App. Reports are reviewed by the Ribbn team and by trusted community members who volunteer as moderators. Every moderator agrees to keep what they see confidential and to use it only to review reports, and we can remove a moderator’s access at any time.

What moderators can see

• The reported content, including a copy of it as it was when it was reported
• The reported person’s name, username, and profile, and previous reports and actions on their account
• The reason given for the report

Only the Ribbn team can see who made a report. Private messages are seen only if someone in the conversation reports them, and then only by the Ribbn team. Moderators never see your email address, birthday, or diagnosis date.

What can happen

Reported content may be hidden or removed, and an account may receive a warning, be suspended for a period of time, or be banned. Warnings and decisions come from the Ribbn team, not from a named moderator. If someone reports that a person may be at risk of harming themselves, the Ribbn team is alerted immediately. We may share information with emergency services if we believe someone’s life is in danger. To ask us to review a decision, emailsupport@joinribbn.org.

How long we keep reports

We keep reports and a record of every moderation action for as long as we need them to keep Ribbn safe and to handle requests to review a decision. If you delete your account, the reports you made are deleted, and records of action on your account are no longer linked to it.

6. Data Retention

We retain your information for as long as your account is active. You can request deletion of your account and associated data at any time by contacting us at info@joinribbn.org. We will process deletion requests within 30 days.

7. Security

We use industry-standard security practices to protect your information, including encrypted data transmission and secure cloud infrastructure. No system is completely secure, and we cannot guarantee absolute security, but we take reasonable steps to protect your data.

8. Children’s Privacy

Ribbn is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us at info@joinribbn.org and we will promptly delete it.

9. Your Rights

Depending on your location, you may have rights regarding your personal information, including the right to access, correct, or delete your data. To exercise these rights, contact us at info@joinribbn.org.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or by email. Continued use of the App after changes take effect constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

Ribbn  |  info@joinribbn.org  |  joinribbn.org