Privacy Policy
How Ribbon handles what you share with it. Last updated November 2, 2026.
Ribbon is a gift app for families and close friends. It only works because people trust it with surprises, so we collect as little as we can, never sell it, and never use it for ads.
What you give us
- Your account. When you sign in with Apple, Apple gives us your name and an email address, which may be a private relay address that Apple forwards.
- Your profile. Your name, photo, birthday, sizes and the colour and cover you pick.
- People you look after. Profiles you make for children or parents who don’t have their own account: their name, photo, birthday, sizes and wishes. They have no account and we collect nothing from them directly.
- Wishes and gifts. What you add to a list or as an idea: titles, links, prices, photos and notes. When you hold or buy a gift we keep that, plus anything you add about it, such as what you paid, when it arrives and the store’s order details.
- Circles and events. The circles you make or join, who’s in them, and the events you plan: names, dates, times and places.
- Chats. Messages, photos and reactions you post, and which chats you’ve read.
- Secret Santa. Who’s playing, who shouldn’t draw whom, and the draw itself.
- Safety. People you block and anything you report.
- Notifications. Your reminder and chat settings and your device’s push token, so we can send the notifications you asked for.
- Support. If you write to us, your name, email and message.
What we don’t collect
No advertising identifiers, no tracking across other apps or websites, no analytics profiles, and no location. Ribbon doesn’t read your contacts or calendar. Our hosting providers keep short-lived technical logs (such as IP addresses and request times) to keep the service running and secure.
Links you add
When you add a link to a product, our server visits that page once to fill in its title, price and photo. The store sees a visit from our server, not from you.
Who sees what
What you share in a circle is seen by the people in that circle. The person a gift is for never sees who is holding or buying it, what it cost, or the chats about their gifts. Secret Santa matches are seen only by the giver. We don’t look at your content except to keep Ribbon running, to answer you when you write to us, or to review something that was reported.
Who helps us run Ribbon
We share data only with the services Ribbon runs on, only for that purpose, and never sell it.
- Supabase stores Ribbon’s data and photos and handles sign-in, in the United States.
- Apple provides Sign in with Apple and delivers notifications to your iPhone.
- Expo passes notifications from our server to Apple.
- Cloudflare hosts this website and the invite pages.
- Resend delivers messages sent from our support page.
We may also disclose information if the law requires it, or to protect someone’s safety.
How long we keep it
We keep your information while you have an account. When you delete your account (Settings, then Delete account), we erase your profile, your lists, the people you look after, the gifts you’re holding or bought, your messages and the photos you uploaded. Circles you started carry on for the people still in them. Copies in our providers’ logs and backups expire on their own schedule, within 30 days.
Children
Ribbon accounts are for people 13 and older. Children can appear in Ribbon only as profiles that a parent or family member makes and manages for them. If you believe a child under 13 has an account, contact us and we’ll delete it.
Your choices
You can change or remove anything you’ve added at any time, turn notifications off in Settings, and delete your account in the app. You can also ask us for a copy of your information, or to correct or delete it, through the support page. Depending on where you live, you may have further rights under laws such as the GDPR or California’s privacy law; we honour them for everyone.
Security
Data travels encrypted, and the database itself enforces who can see each row, so a mistake in the app can’t show a surprise to the person it’s for. No system is perfect, so tell us if you find a problem.
Changes
If this policy changes in a way that matters, we’ll say so in the app before it takes effect.
Contact
Write to us through the support page.