Privacy

Last updated August 7, 2026. Written in plain English on purpose — if anything here is unclear, email us and we’ll explain it. Ribbit (“we,” “us”) is an ACT-practice service operated by an independent developer in the United States.

What we store

Your account: email address, first name, and — if you sign up with a password — a password stored hashed (we can’t read it). If you sign in with Google instead, we receive your name and email from Google; we never see your Google password.
Your confirmation that you’re 13 or older — a checkbox at sign-up. We do not collect your full birth date.
Your study setup: your test date (if you set one), whether you opted into the Science section, and your timezone (so reminders land at a sane local hour).
Your practice performance: which questions you saw, your answers, timing, and the mastery estimates the engine builds from them. This is the product — it’s how your next session gets chosen.
Optional contact details you choose to add: a mobile number and SMS consent (only if you enter them, stored with the exact wording you agreed to and a timestamp), and a parent’s email for the weekly summary (only if you turn it on, after your first week).
Basic technical logs: ordinary server logs, and — for people who take the diagnostic before making an account — a scrambled (hashed) form of the visitor’s IP address, used only to limit abuse of the free diagnostic and deleted automatically within about two days. We can’t read the address back from it, and we don’t tie it to an advertising profile.

That’s the list. We don’t collect your location, your contacts, your school records, or anything from other apps.

How the AI coach uses your data

Ribbit’s written coaching — the read on your diagnostic, the daily note on your plan, the plan overview — is generated by a third-party AI provider. To write it, we send that provider a small, specific slice of your data:

What we send: your first name and performance signals — your estimated score range, which skills are weak or strong, streak and recent-practice counts, your test date, and today’s planned work.
What we never send: your email, your birth year, your phone number, a parent’s email, or your password.

The provider is Google (the Gemini API) or Anthropic (the Claude API), depending on how the app is configured. They act as our service providers — processing that data only to return the coaching text to us — and we don’t sell it or let them use it to advertise to you. If AI coaching is turned off, none of this leaves the app: Ribbit falls back to a written note it composes itself, and nothing is sent to any AI provider.

Who else your data goes to

We use a small set of vendors to run Ribbit. Each one only gets what it needs to do its job, and each acts on our behalf:

Vercel — hosting, and cookieless, aggregate page-visit analytics. The analytics never see your answers, your scores, or anything the engine knows about you.
Neon — the managed Postgres database your account and practice data live in.
Resend — sends our emails (verification, reset, reminders, the parent digest).
Google — “Continue with Google” sign-in (if you use it) and, per the section above, the Gemini AI coach.
Stripe — payment processing for subscriptions. Stripe collects and holds the card details directly; we never see or store your full card number. We receive the fact that a subscription started, its status and its renewal date, so the app knows whether your account is active.
Twilio — text messages, only if you provide a number and consent to SMS.

We do not sell your personal information, we don’t run ads, and we don’t share your data with advertisers or data brokers. We may disclose information if the law requires it, or to protect the safety and rights of users and the service.

Emails and texts we send

Account emails (verification, password resets); an optional daily practice reminder that’s on by default and off in one tap in Settings; and an optional weekly parent digest that only exists once you switch it on. Texts are sent only if you add a number and check the SMS consent box, and you can reply STOP to end them. No marketing blasts.

Cookies and how you stay logged in

When you log in we set a secure session cookie so you stay signed in across visits — that’s what “remember me” is. It’s essential to the app, not an ad tracker. Our analytics are cookieless. We don’t use third-party advertising or cross-site tracking cookies.

How long we keep it

Your account and practice data stay while your account is open, so the engine keeps working for you. Ask us to delete, and it’s gone within 30 days (see below). The hashed pre-account diagnostic IP is deleted automatically within about two days. Some records — like SMS consent — we keep as long as the law asks us to.

Students under 13

Ribbit is for students 13 and older and is not directed to children under 13. Creating an account requires confirming you’re 13 or older. If we learn an account belongs to a child under 13, we delete the account and its data. If you’re a parent and believe a child under 13 gave us information, email support@ribbitedu.com and we’ll remove it.

If you’re a student between 13 and 18

You’re welcome here, and we keep what we collect deliberately small. We’d encourage you to look through this policy with a parent or guardian. The parent digest is entirely optional and only turns on when you add an address and confirm you have that person’s okay.

Your rights

Wherever you live, you can ask us to show you the data we hold, correct it, or delete it — just email from your account address. Depending on where you live (for example California, or the EU/UK), you may also have the right to a copy of your data in a portable form, to object to or restrict certain processing, and to not be discriminated against for exercising these rights. We don’t sell personal information, so there’s nothing to opt out of there. We’ll respond within the time the law allows.

How we protect it

Passwords are stored hashed, traffic is encrypted in transit, and access to the database is limited. No system is perfectly secure, so we can’t promise it can never be breached — but we design to collect little, and to keep what we do collect tightly scoped.

Where your data is handled

Ribbit is operated from the United States, and our vendors process data in the United States. If you use Ribbit from outside the US, you’re asking us to handle your information here.

Deleting your data

Email support@ribbitedu.com from your account address and ask. We’ll delete your account and all practice data within 30 days and confirm when it’s done. No retention tricks, no exit survey.

Beta honesty note

Ribbit is in beta. Score predictions are estimates built from your practice accuracy — they are not guarantees, and real test conditions vary. We show ranges, label the data they rest on, and never promise a score.

Changes to this policy

If this policy changes in a way that matters, we’ll email you before the change takes effect — not after — and update the date at the top.

Contact

Questions about privacy? Email support@ribbitedu.com. We read every one.

ACT® is a registered trademark of ACT Education Corp., which is not affiliated with this product and does not endorse it.

What we store

Your account: email address, first name, and — if you sign up with a password — a password stored hashed (we can’t read it). If you sign in with Google instead, we receive your name and email from Google; we never see your Google password.

Your confirmation that you’re 13 or older — a checkbox at sign-up. We do not collect your full birth date.

Your study setup: your test date (if you set one), whether you opted into the Science section, and your timezone (so reminders land at a sane local hour).

Your practice performance: which questions you saw, your answers, timing, and the mastery estimates the engine builds from them. This is the product — it’s how your next session gets chosen.

Optional contact details you choose to add: a mobile number and SMS consent (only if you enter them, stored with the exact wording you agreed to and a timestamp), and a parent’s email for the weekly summary (only if you turn it on, after your first week).

Basic technical logs: ordinary server logs, and — for people who take the diagnostic before making an account — a scrambled (hashed) form of the visitor’s IP address, used only to limit abuse of the free diagnostic and deleted automatically within about two days. We can’t read the address back from it, and we don’t tie it to an advertising profile.

That’s the list. We don’t collect your location, your contacts, your school records, or anything from other apps.

How the AI coach uses your data

What we send: your first name and performance signals — your estimated score range, which skills are weak or strong, streak and recent-practice counts, your test date, and today’s planned work.

What we never send: your email, your birth year, your phone number, a parent’s email, or your password.

Who else your data goes to

We use a small set of vendors to run Ribbit. Each one only gets what it needs to do its job, and each acts on our behalf:

Vercel — hosting, and cookieless, aggregate page-visit analytics. The analytics never see your answers, your scores, or anything the engine knows about you.

Neon — the managed Postgres database your account and practice data live in.

Resend — sends our emails (verification, reset, reminders, the parent digest).

Google — “Continue with Google” sign-in (if you use it) and, per the section above, the Gemini AI coach.

Stripe — payment processing for subscriptions. Stripe collects and holds the card details directly; we never see or store your full card number. We receive the fact that a subscription started, its status and its renewal date, so the app knows whether your account is active.

Twilio — text messages, only if you provide a number and consent to SMS.

Emails and texts we send

How long we keep it

Students under 13

Your rights