Privacy Policy

RIPMe helps you record the things you want the people you trust to know when you die — from practical information and personal wishes to stories, photos, preferences and instructions.

That means you may choose to give us information that is personal, private or sensitive. We take that responsibility seriously.

This Privacy Policy explains how RIPMe (“RIPMe”, “we”, “us” or “our”) collects, holds, uses and shares personal information when you use the RIPMe app, website and related services.

We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us.

The information we collect depends on how you use RIPMe.

Account information

When you create or use a RIPMe account, we may collect:

• your name;
• email address;
• mobile number;
• account information;
• subscription status;
• login and authentication information; and
• communications you have with us.

Information you add to RIPMe

Depending on what you choose to provide, this may include:

• answers to RIPMe questions;
• funeral, memorial and end-of-life preferences;
• information about pets;
• food, drink and music preferences;
• personal stories and memories;
• letters or messages intended for other people;
• photographs, videos or other files;
• information about your digital life;
• practical and administrative information;
• information about people you nominate to perform particular roles;
• information about your Protectors; and
• other information you choose to enter or upload.

Some of this information may be sensitive or highly personal.

You control what you choose to provide.

Please do not enter passwords, PINs, complete credit card details, cryptocurrency private keys or similar security credentials into RIPMe unless we specifically provide a feature designed for that purpose.

You may provide information about other people when using RIPMe.

For example, you may nominate someone as a Protector, identify a family member or friend, nominate someone for a role or write a letter intended for another person.

This may include their name, contact details, relationship to you and information relevant to the role you have nominated them for.

Please only provide information about another person where it is reasonably necessary and appropriate for your use of RIPMe.

We may contact people you nominate where necessary to provide the service — for example, to invite someone to become a Protector.

Protectors are central to how RIPMe works.

You must have at least two Protectors. We recommend three.

You can nominate more, but every Protector you nominate must ultimately agree that you have passed away before RIPMe will release your information.

When you nominate a Protector, we may collect information including their:

• name;
• email address and contact information;
• relationship to you;
• acceptance of the Protector role;
• verification responses; and
• information about the categories you have assigned to them.

We may contact Protectors to invite them to accept the role, explain their responsibilities, participate in RIPMe's verification process and ultimately provide access to information you have authorised for them.

Being nominated as a Protector does not give someone immediate access to your RIPMe answers.

RIPMe is designed to prevent your information being released until the required verification process has been completed.

For your answers to be released:

• your RIPMe subscription must be active;
• RIPMe's required verification process must be completed;
• RIPMe will make the required attempts to contact you; and
• every one of your nominated Protectors must confirm that you have passed away.

All Protectors must agree.

RIPMe does not use majority voting for this decision.

If even one nominated Protector does not confirm your passing, the verification requirements have not been completed and your answers will not be released through the standard Protector process.

Once verification has been completed, each Protector will only receive the categories of information you have authorised them to receive.

Protector coverage only operates while your RIPMe subscription is active.

If your subscription is cancelled, expires or otherwise becomes inactive:

• your Protectors can no longer declare or confirm your passing through RIPMe;
• RIPMe's death-verification process cannot be completed; and
• your answers cannot be released to your Protectors.

We may continue storing your answers during the retention period described below, but storage does not mean your Protector coverage remains active.

If your subscription ends, RIPMe will retain your stored answers and associated account information so you have the opportunity to restart your subscription without losing your answers.

If you reactivate, your stored information remains available and your Protector coverage can resume.

During the period when your subscription is inactive, your answers remain stored but cannot be released through the Protector process.

We do not guarantee automatic deletion of inactive-subscription data at a fixed interval. If you want your account and data deleted, you can request deletion at any time (see Section 18) rather than waiting for automatic removal.

When you use RIPMe, we may automatically collect technical information including:

• device type;
• operating system;
• app version;
• IP address;
• browser information;
• log and diagnostic information;
• dates and times of access;
• interactions with RIPMe features; and
• crash and performance information.

We use this information to operate, secure, maintain and improve RIPMe.

RIPMe currently uses technology and infrastructure provided by:

• Amazon Web Services (AWS);
• MongoDB;
• Google Firebase; and
• Salesforce.

These services may support cloud infrastructure, databases, authentication, storage, application functionality, monitoring, security, notifications, customer management and other functions required to operate RIPMe.

Customer records are added to RIPMe's Salesforce CRM.

Our Salesforce customer data environment is hosted in the Sydney, Australia region.

We use Salesforce to manage customer records, communications, customer relationships, service interactions and related business processes.

RIPMe uses Amazon Web Services, MongoDB and Google Firebase as part of our application infrastructure.

Depending on the service and configuration, these platforms may host, store or process information necessary to operate RIPMe.

Information processed through these providers may be stored or processed in Australia or overseas depending on the services, regions and support arrangements being used.

RIPMe does not directly process payment card information for mobile subscriptions.

Subscriptions are purchased and managed through:

• the Apple App Store; or
• Google Play.

Apple or Google processes your payment information under its own terms and privacy practices.

RIPMe may receive information necessary to manage your subscription, including whether it is active, subscription type, transaction identifiers, renewal or expiry information and subscription status.

We do not receive or store your complete credit or debit card details for these transactions.

We may use personal information to:

• create and manage your account;
• provide RIPMe;
• store the information you choose to record;
• manage your subscription;
• manage Protectors and their permissions;
• operate the verification and information-release process;
• communicate with you and your Protectors;
• provide customer support;
• maintain RIPMe's security;
• investigate suspected misuse, fraud or security incidents;
• understand and improve how RIPMe is used;
• develop and improve features;
• comply with legal obligations; and
• protect our legal rights and those of our users.

We may use de-identified or aggregated information for analytics, research, service improvement and business planning where that information no longer reasonably identifies an individual.

We do not sell your personal information.

We may make personal information available where reasonably necessary to operate RIPMe, including to:

• Protectors you nominate, after successful verification and according to the permissions you gave them;
• Amazon Web Services;
• MongoDB;
• Google Firebase;
• Salesforce;
• Apple and Google in connection with app services and subscriptions;
• communications, security and monitoring providers;
• contractors and professional advisers; and
• regulators, law enforcement agencies, courts or other parties where required or authorised by law.

We seek to limit service-provider access to information reasonably necessary for the service they provide.

Although RIPMe's Salesforce CRM environment is hosted in Sydney, some technology providers used by RIPMe are global organisations.

Personal information may therefore be processed, accessed or disclosed outside Australia depending on the infrastructure and support services being used.

Where it is practicable to identify the countries in which overseas recipients are likely to be located, RIPMe will maintain that information as part of this policy or otherwise make it available to users.

Where Australian privacy law requires it, we take reasonable steps regarding the handling of personal information disclosed to overseas recipients.

We use technical, organisational and administrative safeguards designed to protect the information held by RIPMe.

These may include encryption, authentication, access controls, secure cloud infrastructure, monitoring and logging, and restrictions on who and what systems can access information.

No internet-connected service can guarantee absolute security.

If we become aware of a data breach, we will investigate it and take appropriate action, including notifications where required by law.

While your subscription is active, we retain information as reasonably necessary to provide RIPMe.

If your subscription becomes inactive, we retain your answers and associated account information so you can reactivate without losing your stored information. We do not currently delete this data automatically at a fixed time interval - if you want it deleted, request account deletion (see Section 18).

Some limited information may be retained longer where required or permitted by law, including for security, financial record-keeping, fraud prevention or dispute resolution.

Deleted information may remain temporarily within secure backups until those backups are overwritten through normal retention processes.

You can access and update much of your information through RIPMe.

You can also contact us to access personal information we hold about you, request corrections or ask questions about your information.

Email: info@ripme.co

We may need to verify your identity before providing access or making changes.

You may request deletion of your RIPMe account using functionality provided within the app, where available, or by contacting info@ripme.co.

Deleting your account is different from cancelling your subscription.

Cancelling starts the 12-month retention period described above.

Requesting account deletion asks RIPMe to delete your account and associated information rather than retain it for possible reactivation.

You can delete your account directly from the app:

1. Open the app
2. Go to Settings
3. Tap "Delete Your account"
4. Confirm deletion

What happens next: your account is deactivated immediately. You have 7 days to log back in if you change your mind - this automatically cancels the deletion. After 7 days, your account, profile information and Protector connections are permanently deleted.

What may be retained: payment and subscription records are retained as required for financial and legal record-keeping. A minimal record (name, contact information, deletion date) is retained for fraud-prevention purposes. Some content (photos, albums, notifications) may also be retained after account deletion.

Some information may also be retained where required or permitted by law or temporarily within secure backups.

For help with deleting your account, contact info@ripme.co.

We may send service communications necessary to operate your RIPMe account.

Where permitted, we may also send information about RIPMe products, features and services.

You can unsubscribe from marketing communications at any time. Unsubscribing from marketing does not prevent us from sending important account, security, subscription or Protector communications.

RIPMe is not intended for children to independently create and operate accounts unless we expressly make a service available for that purpose.

Users may nevertheless include information about children in family information, photographs, letters or other answers.

Users should take particular care when adding personal information about children.

If a data breach involving personal information occurs, we will investigate and respond appropriately.

Where required by the Privacy Act's Notifiable Data Breaches scheme, we will notify affected individuals and the Office of the Australian Information Commissioner.

If you believe we have not handled your personal information appropriately, contact:

info@ripme.co

Please provide enough information for us to investigate your concern.

If you are not satisfied with our response, you may be entitled to make a complaint to the Office of the Australian Information Commissioner.

We may update this Privacy Policy as RIPMe, our technology or our legal obligations change.

The “Last updated” date at the top shows the latest version.

If we make a material change to how we handle personal information, we may also notify users through the app, by email or another appropriate method.

Questions about privacy or your information can be sent to:

RIPMe

Email: info@ripme.co