Life Ribbon Privacy Policy

Last Updated: June 20, 2026 Effective Date: June 20, 2026

This Privacy Policy explains how RUPTON LLC, doing business through the Life Ribbon service ("Life Ribbon," "we," "our," or "us"), collects, uses, shares, protects, and deletes information when you use the Life Ribbon mobile app, website, web portal, admin-supported beta services, and related products.

Life Ribbon is built around private family storytelling. Recordings, transcripts, photos, videos, written entries, family relationships, and story metadata may be deeply personal. We treat that material as private user content, not advertising inventory.

1. Scope

This policy applies to:

• The Life Ribbon mobile app for Android and iOS.
• The Life Ribbon web portal at `https://liferibbon.app`.
• Account, subscription, story pack, collaboration, export, support, and admin-access services.
• AI-assisted features branded as Ribbon, including transcription, story metadata, follow-up prompts, narration, review, and production tools.
• Optional connected-service features, such as Google sign-in, Google Drive export backup, Google Photos or device picker imports, and any future cloud import/export integrations that we make available.

This policy does not apply to third-party websites, app stores, payment processors, device operating systems, or cloud accounts that you access outside Life Ribbon.

2. Information We Collect

Account and Identity Information

We may collect:

• Name, email address, password credentials handled through Supabase Auth, and account identifiers.
• Google account identifier, email, name, and avatar if you choose Continue with Google.
• Profile image or avatar if you add one.
• Account status, admin approval status for the web portal, tester status, plan tier, trial status, and subscription entitlement status.

Story, Journal, Project, and Media Content

You may provide:

• Written stories, journal entries, prompts, captions, notes, and final review edits.
• Audio recordings, video recordings, photos, imported media, and uploaded files.
• Transcripts, edited transcripts, chapter narratives, story summaries, themes, dates, people, places, and other story metadata.
• Project titles, storyteller names, relationships, intended audiences, chapter selections, story modes, question packs, and story pack selections.

This content may include sensitive personal information that you choose to preserve, such as family relationships, health experiences, beliefs, grief, childhood stories, locations, names, voices, images, or details about other people. You control what you choose to record or upload.

Family and Collaboration Information

If you use Family Circle, invitations, contributor seats, or shared projects, we may collect:

• Invitee names, email addresses, phone numbers if manually entered, role labels, relationship labels, invite status, and access permissions.
• Story requests, family-submitted questions, contributor notes, access history, and membership records.
• Records showing who owns, contributes to, narrates, reviews, or views a project.

Voice, AI, and Consent Records

For AI-powered features, we may collect:

• Recordings and transcripts used for transcription, metadata extraction, chapter narrative generation, follow-up questions, search, review, and export.
• Voice narration consent records, including the account or storyteller associated with consent, consent time, and the feature tier.
• Synthesized narration files and related metadata when a consenting storyteller uses narration features.
• AI processing errors, retry status, and provider routing metadata needed to preserve recordings and troubleshoot failures.

Life Ribbon does not use voice recordings for biometric identification. Voice features are for storytelling, playback, transcription, and user-directed narration.

Payment, Subscription, and Purchase Information

We may collect and process:

• RevenueCat customer IDs, product IDs, entitlement IDs, offering/package information, purchase status, and restore status.
• Stripe customer IDs, checkout sessions, subscription IDs, price IDs, invoice/payment status, promo codes, and billing portal events for web purchases.
• Apple App Store and Google Play purchase references received through RevenueCat or store APIs.
• Story pack purchase/unlock status, family credit status, complimentary grants, tester overrides, and admin-created access adjustments.

We do not store full payment card numbers. Card and wallet details are handled by Stripe, Apple, Google, or other payment processors.

Connected Services and Imports

If a connected-service feature is available and you choose to use it, we may process:

• Google sign-in identity data through Supabase Auth.
• User-selected Google Photos, device photos, videos, files, or document picker items.
• User-directed Google Drive export backup files or metadata needed to save a finished Life Ribbon to your Drive.
• OAuth tokens, scopes, or connection metadata needed to complete the selected action.

We do not crawl your full photo library, Drive, contacts, or cloud account in the background. Imports and exports should be user-selected or user-directed.

Support, Admin, Security, and Usage Records

We may collect:

• Support requests, emails, diagnostics you send, screenshots, issue descriptions, and account identifiers needed to help you.
• Admin notes, access approval/rejection records, tester account flags, trial or comp-grant records, and audit logs.
• Authentication events, IP address, request metadata, device/browser information, app version, timestamps, upload metadata, error logs, and service logs.
• App store, browser, hosting, or infrastructure diagnostics made available by our processors.

Life Ribbon does not currently use advertising SDKs or third-party behavioral tracking SDKs in the mobile app. If we add analytics, crash reporting, push notifications, or advertising-related technology, we will update this policy and app store privacy disclosures before using those technologies.

3. How We Use Information

We use information to:

• Create, authenticate, secure, approve, and support accounts.
• Provide mobile and web storytelling, journaling, recording, uploading, playback, review, search, chapter-building, narration, and export features.
• Preserve original recordings and user-entered text separately from transcripts, AI metadata, summaries, or generated suggestions.
• Transcribe audio/video, identify story details, suggest follow-up prompts, build chapter narratives, and improve story organization.
• Enable family invitations, contributor seats, role-based access, project collaboration, and family sharing.
• Process subscriptions, purchases, story packs, trials, promo codes, refunds, restores, and entitlements.
• Provide paid-tier features such as expanded storage, premium exports, family features, narration, and cloud export backup when available.
• Send service emails, invite emails, support replies, access approval notices, account deletion notices, and trial or billing reminders.
• Detect fraud, abuse, security incidents, unauthorized access, and policy violations.
• Maintain records needed for tax, accounting, legal compliance, dispute resolution, and business operations.

4. AI and Automated Processing

Life Ribbon uses AI-assisted tools to help preserve and organize stories. AI output may include transcripts, story titles, summaries, people/place/date suggestions, follow-up questions, chapter narratives, and narration.

Important limits:

• AI output can be incomplete, inaccurate, or emotionally off-base.
• AI does not verify genealogy, legal facts, medical facts, family history, or truthfulness.
• AI suggestions are optional and should be reviewed by the user before relying on them or sharing/exporting them.
• Original recordings, uploads, and written text remain separate from AI output.
• We do not use your story content to train Life Ribbon-owned foundation models.
• We instruct our AI and infrastructure providers to process content only to provide the requested service, subject to their terms, data processing commitments, and retention windows.

Life Ribbon does not make decisions that produce legal or similarly significant effects about you solely through automated processing. Account access, admin approvals, billing status, abuse prevention, and deletion workflows may use automated checks, but human review is available through support where required or appropriate.

5. How We Share Information

We may share information with:

• People you invite or authorize, according to project roles and permissions.
• Supabase for authentication, database, storage, Edge Functions, and security logs.
• AI/transcription providers, including OpenAI and Cloudflare AI routing or gateway infrastructure, when needed to transcribe or generate story metadata, chapter narratives, or narration features.
• Resend or email infrastructure providers for invitations, account notices, access notifications, and support messages.
• RevenueCat, Stripe, Apple, and Google for subscriptions, billing, purchase verification, entitlements, refunds, and customer portal functions.
• Google when you use Google sign-in or optional Google Drive/Photos features.
• Hosting, CDN, security, logging, build, and infrastructure providers such as Vercel, Cloudflare, Expo, app stores, and related service providers.
• Professional advisors, insurers, auditors, banks, payment processors, legal counsel, or business operations providers.
• Government, law enforcement, courts, regulators, or other parties when required by law, valid legal process, safety obligations, or to protect rights and security.
• A successor organization if Life Ribbon is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, subject to this policy or a materially equivalent notice.

We do not sell your stories, recordings, transcripts, or personal information. We do not share personal information for cross-context behavioral advertising. We do not provide your story content to advertisers.

6. Your Choices and Controls

Depending on your account and device, you can:

• Edit profile information.
• Record, upload, review, edit, export, or delete stories and media.
• Grant, limit, or revoke family access and contributor permissions.
• Choose whether to use Google sign-in or email sign-in.
• Choose whether to import from your device, file picker, Google Photos, or another available picker.
• Choose whether to export to Google Drive or another supported cloud destination if the feature is available to your paid tier.
• Turn device permissions such as camera, microphone, photos, files, and notifications on or off in your operating system.
• Cancel or manage subscriptions through the store or checkout provider that processed the purchase.
• Request access, correction, export, deletion, or restriction by contacting us.

Removing a collaborator or deleting a project does not delete copies that another authorized person already downloaded, exported, screen-recorded, backed up, or otherwise saved outside Life Ribbon.

7. Account Deletion

You can initiate account deletion in the app or web portal where available. You may also contact `privacy@liferibbon.app`.

When deletion is scheduled:

• Account access may be deactivated or limited.
• Active profile data, owned projects, story responses, media, transcripts, invitations, Family Circle records, and auth records are deleted or anonymized where legally and technically possible after the waiting period.
• Deletion is designed to complete within 30 days for active service data after the scheduled deletion date or confirmed request, subject to legal holds, security needs, billing/tax records, and processor limitations.
• Backup copies may persist until overwritten according to backup cycles.
• Billing, tax, refund, fraud-prevention, dispute, and security records may be retained as required or permitted by law.

Account deletion is permanent. Export anything you want to keep before deletion.

8. Retention

We keep information only as long as reasonably necessary for the purposes described in this policy, including providing the service, preserving user-directed archives, complying with law, resolving disputes, preventing fraud, enforcing agreements, and maintaining backups.

The detailed retention schedule is in the Life Ribbon Data Retention Policy. If this Privacy Policy conflicts with that policy, the document that provides stronger privacy protection or more specific retention detail controls for that topic.

9. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including TLS encryption in transit, provider-managed encryption at rest, authentication controls, role-based access, row-level security, private storage buckets, and limited admin access.

No service can guarantee perfect security. You are responsible for protecting your devices, email account, passwords, app store accounts, Google account, and exported files.

10. Children and Minors

Life Ribbon is intended for users age 13 and older. Children under 13 may not create accounts or use Life Ribbon directly.

Parents, guardians, or authorized adults may preserve stories about children or family members when they have the legal right and appropriate consent to do so. If you upload content about a minor, you represent that you have authority to provide it and share it through Life Ribbon.

If we learn that we collected personal information directly from a child under 13 without required parental consent, we will delete it promptly. Parents or guardians can contact `privacy@liferibbon.app`.

11. Regional Privacy Rights

California and Other U.S. State Privacy Rights

Depending on where you live and whether a particular law applies to us, you may have rights to:

• Know or access categories and specific pieces of personal information.
• Correct inaccurate personal information.
• Delete personal information.
• Obtain a portable copy of personal information.
• Opt out of sale, sharing, targeted advertising, or certain profiling.
• Limit certain uses of sensitive personal information.
• Appeal a denied privacy request.
• Be free from discrimination for exercising privacy rights.

Life Ribbon does not sell personal information and does not share personal information for cross-context behavioral advertising. If that changes, we will update this policy and provide required opt-out methods.

European Economic Area, United Kingdom, and Similar Regions

Where GDPR or similar law applies, our legal bases may include:

• Contract necessity to provide the Life Ribbon service.
• Consent for optional features, permissions, connected services, voice/narration, marketing where required, or certain sensitive content you choose to provide.
• Legitimate interests in security, fraud prevention, support, product integrity, and service improvement.
• Legal obligations for tax, accounting, compliance, or lawful requests.

You may have rights to access, correct, delete, restrict, object, port data, withdraw consent, and lodge a complaint with a supervisory authority. Withdrawing consent does not affect processing that occurred before withdrawal.

Requests

Send privacy requests to `privacy@liferibbon.app`. We may verify your identity before acting on a request. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and identity verification.

12. International Processing

Life Ribbon is operated from the United States and uses service providers that may process information in the United States and other countries. By using Life Ribbon, you understand that information may be transferred to and processed in countries with laws different from where you live. Where required, we use appropriate safeguards for international transfers.

13. Changes to This Policy

We may update this policy as Life Ribbon evolves. We will update the Last Updated date and, for material changes, provide notice through the app, website, email, or another reasonable method. Continued use after the effective date means you accept the updated policy, subject to rights that cannot be waived by law.

14. Contact

Privacy requests: `privacy@liferibbon.app`

Support: `support@liferibbon.app`

Legal notices: `legal@liferibbon.app`

RUPTON LLC

Attn: Life Ribbon Privacy

United States

Privacy Snapshot

| Question | Answer | | --- | --- | | Do we sell your stories or personal information? | No. | | Do we use story content for ads? | No. | | Do users own their recordings and stories? | Yes. | | Can users delete accounts? | Yes, in app/web where available or by privacy request. | | Can collaborators see everything? | No, only what their role permits. | | Are transcripts and AI suggestions perfect? | No, review before relying on them. | | Are cloud imports/exports automatic? | No, they are user-directed if available. | | Do children under 13 use Life Ribbon directly? | No. |

Copyright (c) 2026 RUPTON LLC. Life Ribbon(TM) and Ribbon(TM) are trademarks of RUPTON LLC. All Rights Reserved.