Privacy Policy for Rippl

Last Updated: December 2024

Introduction

Rippl (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services that connect student ambassadors with businesses for promotional opportunities.

Information We Collect

Personal Information

• Account Information: Email address, password, profile type (ambassador or business)
• Profile Information: Display name, bio, profile photos
• Contact Information: Email address (required for account creation and verification)

Ambassador-Specific Information

• Demographics: Gender, student status (undergraduate/graduate/alumni), age
• Academic Information: University affiliation, field of study/major, languages spoken
• Interests: Personal interests and hobbies
• Social Media: Instagram, TikTok, YouTube, and LinkedIn handles
• University Verification: Email domain verification to ensure official school email addresses

Business-Specific Information

• Business Details: Business name, industry, business address
• Brand Information: Logo, website URL, brand colors, profile pictures
• Verification Status: Business verification status

Communication Data

• Messages: All chat messages between ambassadors and businesses
• Notifications: Push notifications, email notifications, in-app notifications
• Application Data: Responses to business applications, resume uploads

Technical Information

• Device Information: Device type, operating system, app version
• Usage Analytics: App usage patterns, feature interactions, performance data
• Location Data: University location data (for matching purposes)
• Push Notification Tokens: OneSignal device tokens for notification delivery

Automatically Collected Information

• Log Data: IP addresses, access times, pages viewed, app crashes
• Real-time Data: Chat message delivery status, read receipts

How We Use Your Information

Core Service Functions

• Account Management: Creating and maintaining user accounts
• Profile Matching: Connecting ambassadors with relevant business opportunities
• Communication: Facilitating messaging between users
• Verification: Ensuring authentic student and business accounts

Service Improvement

• Analytics: Understanding app usage to improve user experience
• Performance Monitoring: Identifying and fixing technical issues
• Feature Development: Developing new features based on user behavior

Communication

• Notifications: Sending relevant updates about opportunities, messages, and account activity
• Email Communications: Account verification, password resets, service updates

Legal and Security

• Compliance: Meeting legal obligations and regulatory requirements
• Security: Protecting against fraud, abuse, and security threats
• Dispute Resolution: Resolving user disputes and support issues

Information Sharing and Disclosure

With Other Users

• Ambassador Profiles: Basic profile information visible to businesses
• Business Profiles: Business information visible to ambassadors
• Chat Messages: Direct messages between matched users
• Application Responses: Application content shared with relevant businesses

With Service Providers

• Supabase: Database and authentication services
• OneSignal: Push notification services
• Kingfisher: Image loading and caching
• Cloud Storage: Media file storage and delivery

Legal Requirements

• Law Enforcement: When required by law or legal process
• Safety: To protect user safety or prevent harm
• Terms Violations: To enforce our Terms of Service

Your Rights and Choices

Access and Control

• Profile Management: Update or delete profile information
• Communication Preferences: Control notification settings
• Account Deletion: Request deletion of your account

Privacy Settings

• Profile Visibility: Control who can see your profile information
• Notification Controls: Manage push and email notification preferences
• Data Analytics: Opt out of analytics data collection

Data Security

Security Measures

• Encryption: Data encrypted in transit and at rest
• Authentication: Secure login and session management
• Access Controls: Limited access to personal data

International Data Transfers

Data Location

• Primary Storage: United States
• Backup Storage: Multiple geographic locations for redundancy

Children's Privacy

Age Requirements

• Minimum Age: Users must be 13 years or older
• Student Verification: University email verification for student accounts

Third-Party Services

Integrated Services

• Social Media Platforms: Instagram, TikTok, YouTube, LinkedIn
• Analytics Services: Usage analytics and performance monitoring

Third-Party Policies

• External Links: Links to third-party websites and services
• Independent Services: Third-party services have their own privacy policies

Changes to This Policy

Policy Updates

• Notification: Users notified of material changes
• Continued Use: Continued use constitutes acceptance of changes

Contact Information

Privacy Inquiries

For privacy-related inquiries, data deletion requests, opt-out requests, or other service-based requests, please contact us at:

Email: apprippl@gmail.com

California Privacy Rights (CCPA)

California Residents

• Disclosure Rights: Right to know what personal information is collected
• Deletion Rights: Right to request deletion of personal information
• Opt-Out Rights: Right to opt out of data sales (we do not sell personal data)
• Non-Discrimination: Right to equal service regardless of privacy choices

European Privacy Rights (GDPR)

EU Residents

• Legal Basis: Processing based on consent, contract, or legitimate interests
• Supervisory Authority: Right to lodge complaints with data protection authorities