Security Practices

Last updated: 25 August 2026 · Safeguards and incident response

1. What This Covers

This page summarises how Ribbonside protects personal information and health information. The Privacy Policy explains what information we collect, use, disclose, and delete. The Health Data Statement lists the health data categories handled by the app.

2. Safeguards

• Core health records, documents, photos, notes, doctor questions, appointments, medications, and symptoms are stored in an encrypted local vault on your device.
• Limited online account, consent, support, security, subscription, and AI usage-limit records are stored in Supabase in Australia - Sydney (AWS ap-southeast-2).
• Data is encrypted in transit. Local vault data is encrypted on device in native builds, and online records are protected by Supabase security controls.
• Supabase Row Level Security restricts online account data to the signed-in user and authorised service/admin access where needed for support, billing, legal, security, or abuse-prevention purposes.
• The app requires a PIN, with optional biometric or device unlock where supported by your device settings.
• Admin and support access is limited to support, security, billing, legal, or abuse-prevention needs.

3. Support Access

Support tickets may include account details, app diagnostics, and any details you choose to send us. Do not send Medicare numbers, medical record numbers, full reports, or highly identifying health details unless they are genuinely needed for the support issue. Support access is used only to investigate tickets, security issues, billing or account problems, suspected misuse, or legal obligations.

4. User Controls

• Open Account, then Privacy & Your Data. Export Data (JSON) is available to every signed-in Ribbonside account. Share Records PDF is available with an active Ribbonside subscription. Save exports securely outside your phone. Current exports cannot be imported back into Ribbonside.
• Erase the local health vault on this device from the Account screen.
• Request correction of inaccurate information by contacting support.
• Delete your account and have Ribbonside-controlled online account records removed or de-identified where reasonably possible, subject to limited legal, security, billing, dispute, backup, audit, or service-integrity retention needs.
• Revoke Apple Health access in iPhone settings at any time.
• Delete photos, documents, reports, notes, questions, and other local app items you no longer want to keep.

5. Data Breach Response

Ribbonside maintains an internal data breach response plan. If we suspect an eligible data breach, we will contain the incident, preserve evidence, assess the risk, and take reasonable and expeditious steps to complete the assessment within 30 calendar days. If a breach is likely to cause serious harm, we will notify affected users and the OAIC as soon as practicable, including what happened, what information was involved, and recommended steps. If direct contact is not practicable, we may publish a notice on this website and take reasonable steps to publicise it.

6. Vulnerability Or Privacy Issue Reporting

If you believe you have found a privacy or security issue, email support@ribbonside.com.au with "Security report" in the subject and enough detail for us to investigate. Administrative security notices may also be sent to admin@ribbonside.com.au. Please do not access, copy, change, delete, or disclose anyone else's information while reporting an issue.

7. Limits And Reporting

No app, device, or online service can guarantee perfect security. A stolen, unlocked, jailbroken, rooted, or compromised device may still expose local records. If you suspect a privacy or security issue involving Ribbonside, contact support@ribbonside.com.au.

Terms of Use

Effective date: March 2026 · Last updated: 25 August 2026 · Governing law: New South Wales, Australia

1. Agreement

By using Ribbonside you agree to these Terms. Governed by the laws of New South Wales, Australia.

2. What Ribbonside Is

Ribbonside is a private organiser for the practical side of breast cancer. It helps you record, store, organise, export, and remember information you choose to add.

3. Not Medical Advice

4. No Emergency Use

Ribbonside is a private organiser, not an emergency or medical support service. It is not monitored 24/7 and must not be used in an emergency. If you need urgent help in Australia, call Triple Zero (000), or contact your care team, hospital, pharmacist, or another qualified health professional about treatment concerns, medication questions, or clinical decisions.

5. Eligibility

You must be 18 or older to use Ribbonside.

6. Your Responsibilities

• Keep your device, app PIN, Apple ID on iPhone or Google account on Android, and backups secure.
• Enter information carefully and check it before relying on it for reminders, records, or conversations with your care team.
• Do not share your app PIN, Apple ID access, Google account access, or device access with anyone you do not trust.
• Do not use Ribbonside to upload unlawful, abusive, misleading, or third-party information you do not have permission to store.
• Use exports carefully, because exported files may no longer be protected by the app's local vault.

7. Subscriptions

• Ribbonside subscription: pricing is shown in the app and store listing before purchase. Apple App Store or Google Play will show the final price and any eligible offer before purchase confirmation.
• What does this mean?: Your Ribbonside subscription includes up to 3 What does this mean? explanations per day, capped at 10 explanations per month. These limits help keep AI costs controlled and the feature available for genuine plain-English support.
• Subscriptions and in-app purchases are billed and managed through Apple App Store or Google Play, depending on where you subscribe.
• Subscriptions auto-renew unless cancelled through the relevant store at least 24 hours before the renewal date.
• Plan features, limits, and prices may change over time. Apple App Store or Google Play will show the final price, renewal period, any eligible offer, and cancellation options before purchase confirmation or where the store requires notice. Existing subscriptions are managed through the subscription terms of the store where you subscribed.

8. Your Data

You retain full ownership of all data, photos and content you provide. Ribbonside does not claim ownership of your health data. In this launch version, core records and uploaded files are stored in the local vault on your device, while limited online account, consent, support, subscription, legal/security, and AI usage-limit records are stored online as described in the Privacy Policy.

You give Ribbonside a limited permission to process your content only as needed to provide the app, keep local records available on your device, create exports you request, provide support, operate subscriptions and security controls, and process optional What does this mean? text you choose to send.

9. Service Availability, Local Storage, And Backups

Ribbonside may change, pause, update, or discontinue features from time to time. We aim to keep the service reliable, but no app or online service is guaranteed to be uninterrupted or error-free. Core records are stored locally on your device, and Ribbonside does not currently provide automatic backup or restore. Signing in again restores account and subscription access, not the local health vault. Current PDF and JSON exports cannot be imported back into Ribbonside.

10. Australian Consumer Law Guarantees

11. Limitation of Liability

Subject to your non-excludable ACL rights, Ribbonside is not liable for health outcomes, treatment decisions, missed appointments, medication errors, data loss caused by local device loss or deletion, or loss or damage arising from use of the app beyond the remedies required by law.

12. Termination

12.1 Cancellation by You

You may cancel your subscription at any time through Apple App Store or Google Play, depending on where you subscribed. To stop the next renewal, cancel at least 24 hours before the renewal date. Upon cancellation, your subscription will remain active until the end of your current billing period unless the relevant store or applicable law provides otherwise. Refund requests should be made through the store where you subscribed. Nothing in these Terms limits your Australian Consumer Law rights.

12.2 Suspension or Termination by Ribbonside

We reserve the right to suspend or terminate your account if you have violated these Terms, your use poses a security risk, your account has been inactive for an extended period, or continued provision is no longer commercially viable. Where reasonable, we will give notice and an opportunity to export available data before termination.

12.3 Effect of Termination

Upon termination, your right to access the Service will cease immediately. Online account records will be handled in accordance with our Privacy Policy and removed or de-identified where reasonably possible, unless limited records must be retained for legal, security, billing, dispute, backup, audit, or service-integrity reasons. Local vault records remain on your device until you erase the vault, delete the app, or remove them yourself. Account deletion does not automatically cancel an Apple App Store or Google Play subscription.

13. Intellectual Property

Ribbonside was designed and built by Diesel Advocacy Pty Ltd.

Ribbonside's original code, copy, screen content, images, documents and brand materials are protected to the extent provided by Australian law. The general idea of a cancer organiser is not claimed as protected.

14. Governing Law

Governed by NSW law. Disputes subject to NSW courts. Consumer complaints: NSW Fair Trading 13 32 20 · ACCC 1300 302 502.

15. Changes to Terms

We may update these Terms from time to time. We will notify you of any changes by posting the revised version on this website. Any changes take effect on the date posted. Continued use after the effective date constitutes acceptance.

16. Contact

support@ribbonside.com.au

Refund Policy

Effective date: March 2026 · Last updated: 23 August 2026

1. Paid Subscription

Ribbonside is available through a paid subscription. Before you confirm purchase, Apple App Store or Google Play will show the price, renewal period, billing terms, and cancellation options for the store where you subscribe.

2. How To Cancel

On iPhone: Settings - Apple ID - Subscriptions - Ribbonside - Cancel Subscription.

On Android: open Google Play - Payments and subscriptions - Subscriptions - Ribbonside - Cancel subscription.

Cancellation usually takes effect at the end of the current billing period. To stop the next renewal, cancel at least 24 hours before the renewal date. You retain subscription access until that date unless the relevant store or applicable law provides otherwise. Uninstalling the app or deleting your Ribbonside account does not automatically cancel your subscription.

3. Refund Requests

Refund requests for in-app purchases should be made through the store where you subscribed. Apple refund requests are handled through Apple App Store. Google Play refund requests are handled through Google Play. Refund decisions and processing times are handled by the relevant store.

4. Australian Consumer Law Rights

5. Contact

support@ribbonside.com.au

Medical Disclaimer

Last updated: 23 August 2026 · Displayed at first launch · Users must acknowledge before proceeding

1. What Ribbonside Is

Ribbonside is a personal organiser and general information tool. All content — including AI-generated explanations, medication information, cancer type descriptions, diagnosis fields, symptom tags, and Daily check-ins — is provided for general informational and personal organisation purposes only.

2. You Must Always

• Consult a registered medical practitioner, oncologist, or qualified healthcare professional before making any health or treatment decision
• Not disregard, delay, or discontinue professional medical advice because of anything in Ribbonside
• Not use Ribbonside in a medical emergency — call Triple Zero (000) immediately
• Tell your oncologist and pharmacist everything you are taking, including supplements tracked in Ribbonside

3. AI-Generated Content

What does this mean? provides general educational explanations generated by AI. These are not personalised to your medical situation, not reviewed by medical professionals, and may not reflect current Australian clinical guidelines. Always discuss your specific case with your oncologist.

4. Emergency

Diesel Advocacy Pty Ltd accepts no liability for health outcomes arising from use of or reliance upon Ribbonside.

Health Data Statement

Last updated: 25 August 2026 · Every category of health data we handle, where it is stored, and how you can delete or erase it - in plain English

What We Collect and Why

Health Data (Apple Health / HealthKit)

Ribbonside may request access to Apple Health data on iPhone, including steps, exercise minutes, resting heart rate, and workout information. This data is read from your device only and is not transmitted to our servers. You may revoke this access at any time through iPhone Health settings. Ribbonside does not use health data for any purpose other than displaying it to you within the app.

• Read-only. Ribbonside never writes to Apple Health.
• No backend transmission. Apple Health values are not sent to our servers, to Supabase, to Anthropic, or to any third party.
• Foreground only. We do not run background queries against Apple Health.
• Not used for advertising or research. The data is shown only inside the app, to you.
• Revocable any time. Use iPhone Settings - Privacy & Security - Health - Ribbonside.

Exports And Separate Copies

Ribbonside does not currently provide automatic backup or restore. Open Account, then Privacy & Your Data. Export Data (JSON) is available to every signed-in Ribbonside account and includes raw records and available photo and document attachment data, subject to safety and size limits. Share Records PDF is a readable summary available with an active Ribbonside subscription. Photo and document files are listed but are not embedded in the PDF. Save exported health information somewhere private and secure outside your phone. Neither format can currently be imported back into Ribbonside.

What We Never Do

• Never sell your health data
• Never use your data for advertising
• Never share with pharmaceutical companies, insurers, employers, or government agencies (except where legally required)
• Never use your photos, notes, or questions to train AI models
• Never access your notes except where you choose to send content to support, use an optional feature, or where access is required for legal, security, or safety reasons

Deletion

Regulatory Position & ACL Statement

Last updated: 23 July 2026 · Conservative launch wording · Australian Consumer Law

1. TGA Position

Ribbonside is intended as a personal organiser and general information tool. It is not registered as a medical device with the TGA. It is not designed for diagnosis, treatment, monitoring, prediction, prognosis, or care decisions. This position should be read as launch-facing product wording, not legal or regulatory advice.

2. How Ribbonside Is Positioned

• It does not diagnose any medical condition
• It does not recommend specific treatments or medications for a user's individual condition
• It does not interpret clinical data to make individualised clinical decisions
• What does this mean? explains general terms and short questions typed by the user — it does not assess individual patients

3. TGA Advertising Compliance

Ribbonside marketing should stay in conservative personal-organiser language such as "track", "log", "record", "store", "organise", and "remind". It must not claim to diagnose, treat, monitor, prevent, cure, improve, or manage a disease or treatment pathway, and it must not make therapeutic benefit claims.

4. Australian Consumer Law Guarantees

5. Contact

support@ribbonside.com.au

6. Annual Review

This compliance position statement is reviewed annually. Last reviewed: July 2026.

Accessibility Statement

Last updated: 23 July 2026 · Accessibility and support

1. Our Aim

Ribbonside aims to be usable by people navigating breast cancer treatment and recovery, including people who may be tired, stressed, visually strained, or using assistive technologies.

2. Current Approach

We aim to use clear language, readable contrast, predictable navigation, scalable text where supported by the platform, and plain support pathways. We aim to align with WCAG 2.2 AA where practical, while continuing to test and improve the app and website over time. This statement is not a claim of full certification.

3. Feedback

If any part of the app or website is difficult to use, email support@ribbonside.com.au with the device, browser, assistive technology if relevant, and the issue you encountered. We aim to respond within two business days.