Tribily LLC · Effective date: 4 November 2026 · Last updated: 4 November 2026
1. Who We Are and Scope
Tribily LLC (“Tribily,” “we,” “us”) provides the Tribily mobile apps for iOS and Android, the website tribily.com, administrator dashboards, and related services (the “Services”). This Policy applies to personal information we process through the Services. It does not cover third-party services you connect to Tribily (such as Apple, Google, or Stripe), which have their own privacy policies.
Our role. Tribily is the controller of the account, usage, and security information we collect. Each Group also decides how it uses the member information it can see in Tribily (for example, deciding dues or reviewing a loan request); for those decisions the Group is independently responsible under applicable law. Questions about a specific Group’s practices should go to that Group’s administrators—we are happy to help.
2. Information We Collect
2.1 Information you provide
| Category | Examples |
|---|---|
| Account details | Name, email address, phone number, password (stored only in hashed form), country, preferred language, and (when multi-currency display is available) your preferred currency. |
| Profile | Profile photo, graduation year or membership details, and optional details you choose to add, such as profession, business or service listing, city, and social links. |
| Group registration and verification | Group name, type, country, and the base currency set from that country; documents submitted to verify the Group (constitution, bylaws, registration certificate); information about officers, which may include government ID details if requested for verification. |
| Financial and ledger records | Dues billed to you, payments and contributions, campaign donations, balances, payment status, whether you have set up a payment method and automatic payments for dues, whether you chose to make a donation anonymously, receipts you upload, and (when available) loan requests, approved amounts, repayment schedules, and the reason you give for a loan. |
| Payment information | Card and bank details are entered directly with our payment provider (Stripe). We receive limited details such as card brand, last four digits, expiry month and year, payment status, and payout status—not full card or bank account numbers. |
| Campaign content | Campaign titles, descriptions, goals, photos, and beneficiary information entered by Group Admins. |
| Chats and discussions (when available) | Messages, replies, reactions and photos you post in your Group’s main chat, campaign chats and discussion boards. | |
| Communications | Invitations sent through the Services, the notifications we send you and whether you have read them in the app, support requests, feedback, survey responses, and reports of abuse. |
2.2 Information collected automatically
| Category | Examples |
|---|---|
| Device and app data | Device model, operating system, app version, language, time zone, and unique app-install identifiers. |
| Log and security data | IP address, sign-in times, failed sign-in attempts, actions taken in administrator tools, and audit-trail records of every financial change. |
| Diagnostics | Crash reports, performance data, and error logs used to fix problems. |
| Usage data | Screens viewed and features used within the Services, used in aggregate to improve Tribily. We do not use this for advertising. |
| Approximate location | Country or region derived from your IP address or account settings, used to show the right currency, payment methods, and legal terms. We do not collect precise GPS location. |
| Push notification token | A token from Apple or Google that lets us send you notifications if you allow them. |
2.3 Information from others
- Sign-in providers. If you use Sign in with Apple or Google, we receive your name and email address (or Apple’s private relay email if you choose “Hide My Email”).
- Group Admins. When a Group Admin invites you, they give us your name and email address or phone number, and may record payments you make outside the app (for example, cash or bank transfer).
- Payment providers. Stripe (and, in future, other providers such as Paystack) tells us whether payments succeeded, refunds and disputes, and whether a Group’s payout account has passed verification.
2.4 Device permissions
The app asks for permission before accessing these device features, and you can change your choice at any time in your device settings:
- Notifications – reminders about dues, payments, campaigns, and Group updates.
- Camera and photos – only when you choose to add a profile photo, upload a receipt, or attach a verification document.
- Face ID / Touch ID or device passcode (if offered) – to unlock the app. Biometric checks happen entirely on your device; Tribily never receives your biometric data.
3. How We Use Information
| Purpose | What it involves | Legal basis (EEA/UK) |
|---|---|---|
| Provide the Services | Create accounts, run Groups, generate monthly dues, process payments through our provider, display ledgers and campaign progress, administer loans when available. | Performance of our contract with you |
| Verify Groups and prevent fraud | Notify Tribily’s Super Admins by email when a new Group is registered (including the registrant’s name and contact details), review Group registrations and documents, approve, reject, suspend or remove Groups, detect suspicious activity, prevent abuse, enforce our Terms. | Legitimate interests; legal obligation |
| Security and integrity | Authenticate users, keep audit trails of financial changes, secure systems, investigate incidents. | Legitimate interests; legal obligation |
| Communications | Send notifications in the app, as push notifications and by email: receipts, statements, reminders, security alerts and service notices; new campaigns and payments in your Group; failed payments with a “Pay Now” link; requests to set up payment when your Group goes live; subscription changes; and, for Group owners, approval or rejection of their Group and the end of their free trial. Respond to support requests. | Contract; legitimate interests |
| Currency display | Set each Group’s base currency from its country. When available, show amounts in your preferred currency using reference exchange rates, while recording payments in the Group’s base currency. | Contract |
| Group and campaign chats (when available) | Host the main group chat, campaign chats and discussion boards, filter spam and scams, and review reported messages to keep them safe. Chats are encrypted in transit and at rest but are not end-to-end encrypted, so reported messages can be reviewed. | Contract; legitimate interests | |
| Group subscriptions | Manage free trials (including keeping a record that a person has used their one free trial), subscriptions, grace periods and view-only status, and tell Group Admins which members have not yet set up payment. | Contract |
| Run and monitor the platform | Keep a tamper-resistant record of important actions (who did what, and when), and monitor whether payments, notifications and background tasks are working so problems can be fixed. | Legitimate interests; legal obligation |
| Improve Tribily | Analyze aggregated usage and diagnostics to fix bugs and design better features. | Legitimate interests |
| Marketing (optional) | Send product news to Group Admins and prospects. You can unsubscribe at any time. | Consent or legitimate interests |
| Legal compliance | Meet tax, accounting, anti-money-laundering, sanctions, and law-enforcement obligations; establish or defend legal claims. | Legal obligation; legitimate interests |
We do not use your personal information to make decisions that produce legal or similarly significant effects about you based solely on automated processing. Group Admins—not algorithms—approve Groups’ loans and campaigns.
4. What Other Members of Your Group Can See
Transparency is the heart of Tribily. Inside each Group:
| Information | Visible to |
|---|---|
| Your name, photo, and the profile details you choose to show | Members and admins of the Groups you belong to |
| Dues billed to you, your payments, contributions, and balance | Members and admins of that Group |
| Your donations to a welfare or fundraising campaign | Members and admins of that Group |
| Donations you make anonymously | Your name: Group Admins only. Other members see “Anonymous member” with the amount and date. (Dues payments always show your name.) |
| Whether you have set up payment for dues | Group Admins of that Group |
| Notifications that you made a payment or created a campaign | Members of that Group (shown as “Anonymous member” for anonymous donations). Members can mute these alerts in the app. |
| Messages you post in the main group chat (when available) | Members and admins of that Group | |
| Messages you post in a campaign’s chat or discussion board (when available) | The members and admins who can see that campaign | |
| Account statements exported by Group Admins | The members the admin shares them with. Statements show what members can already see in the app; anonymous donations appear as “Anonymous member” |
| Loan status and outstanding balance (when available) | As configured by the Group; at minimum, Group Admins |
| The reason given in a loan application | Group Admins only |
| Verification documents and officer ID details | Tribily’s authorized Super Admins only, never members |
| Payment card or bank details | No one at Tribily or your Group—held by the payment provider |
Members of other Groups cannot see any of your information. Each Group’s data is isolated at the database level. Tribily’s Super Admins (a small number of authorized Tribily staff) can view a Group’s members, the dues and fundraising totals it has collected, its campaigns, subscription status and history, and can search for a user to see which Groups they belong to. They use this access only to review and approve Groups, support Groups and users, manage subscriptions, keep the platform secure, prevent fraud and meet legal obligations. Their access is limited to authorized staff and every important action they take is recorded in an audit log that cannot be quietly changed.
5. How We Share Information
We share personal information only as described below. We do not sell personal information and do not share it for cross-context behavioral advertising.
- With your Group(s) – as described in Section 4.
- Payment providers – Stripe processes payments, verifies Groups that receive funds, and prevents fraud under its own privacy policy. We may add other licensed providers (such as Paystack) for regional payment methods.
- Service providers – companies that host our infrastructure and databases, store files, send email, SMS, and push notifications (including Apple Push Notification service and Firebase Cloud Messaging), provide crash reporting, and support customer service. They may use information only to provide services to us, under contracts requiring confidentiality and security.
- Sign-in providers – Apple or Google, to authenticate you when you choose them.
- Legal and safety – to comply with law, legal process, or valid government requests; to enforce our Terms; or to protect the rights, property, or safety of Tribily, our users, or others, including to prevent fraud and money laundering.
- Business transfers – in connection with a merger, financing, acquisition, or sale of assets, subject to this Policy’s protections.
- With your consent – in any other case, only with your permission.
Account statements. Group Admins can download statements of the Group’s ledger and share them with members. Once a statement leaves the app, its further sharing is the Group’s responsibility and outside Tribily’s control.
We may share aggregated or de-identified information that cannot reasonably be used to identify you.
6. No Tracking or Advertising
The Tribily app does not show ads and does not “track” you as defined by Apple’s App Tracking Transparency framework: we do not link information from the app with information from other companies’ apps or websites for advertising, and we do not share it with data brokers. Because we do not track, the app does not ask for tracking permission.
Our website, tribily.com, uses essential cookies to work and may use privacy-friendly analytics to measure visits. Where required, we will ask for your consent before setting non-essential cookies, and you can change your preferences at any time.
7. How Long We Keep Information
| Information | Retention period |
|---|---|
| Account and profile | While your account is active. Deleted within 30 days after you delete your account, except as noted below. |
| Group ledger and transaction records | For the life of the Group and then generally 7 years, to meet accounting, tax, audit, and anti-fraud requirements. After you delete your account, entries attributed to you are shown to the Group as “Former member” where possible. |
| Group verification documents | While the Group is active and up to 5 years after closure, or as required by law. |
| Audit and security logs | Up to 7 years for financial-change logs; up to 12 months for routine access logs. |
| Group chat, campaign chats and discussion posts | While the Group is active, unless you or a Group Admin deletes them sooner; removed within 30 days after the Group is closed. Messages reported for review may be kept for up to 12 months. | |
| Free-trial record | Kept while your account exists so the one-trial-per-person rule can be applied. After you delete your account we keep only a one-way coded version of your email address and phone number (which cannot be turned back into them) so a new account cannot claim a second free trial. |
| Support communications | Up to 3 years after the issue is closed. |
| Diagnostics and crash data | Up to 12 months. |
| Backups | Deleted data is removed from rolling backups within 90 days. |
We may keep information longer if required by law, to resolve disputes, or to enforce our agreements. When information is no longer needed, we delete or de-identify it.
8. Deleting Your Account
9. How We Protect Information
- Encryption in transit (HTTPS/TLS) and at rest (AES-256).
- Strict tenant isolation with database row-level security, so each Group’s records are accessible only to its own members.
- Role-based access controls for members, Group Admins, and Tribily staff, with least-privilege access and logging.
- Immutable audit trails for every change to financial records.
- Payment data handled by PCI DSS–compliant providers; Tribily never stores full card numbers.
- Secure document storage for verification files, with restricted access.
No system is 100% secure. If we learn of a security incident affecting your personal information, we will notify you and authorities as required by law. Please use a strong, unique password and keep your device secure.
10. Your Privacy Rights
Wherever you live, you can use the app to view and update your profile, control notifications, and delete your account. Depending on where you live, you may also have the right to:
- access the personal information we hold about you and receive a copy in a portable format;
- correct inaccurate information (ledger corrections are made through your Group Admin so the Group’s audit trail stays intact);
- delete your information, subject to the legal retention described above;
- object to or restrict certain processing, including processing based on legitimate interests;
- withdraw consent where we rely on it, without affecting earlier processing;
- opt out of the sale or sharing of personal information or targeted advertising (we do neither) and limit the use of sensitive personal information (we use it only to provide the Services); and
- lodge a complaint with your local data-protection authority.
To exercise your rights, email info@tribily.com with the subject “Privacy Request.” We will verify your identity (usually by confirming control of your account email) and respond within the time required by law—generally within 30 days (45 days in some U.S. states). You may use an authorized agent where the law allows. If we deny your request, you can appeal by replying to our decision; we will respond to appeals as required by law. We will not discriminate against you for exercising your rights.
Additional information for U.S. state residents
In the past 12 months we collected the following categories of personal information, for the business purposes described in Section 3, and disclosed them to the recipients described in Section 5: identifiers (name, email, phone, IP address, device IDs); customer records and financial information (payment status, partial card details, ledger records); characteristics you choose to share in your profile; commercial information (subscriptions and transactions); internet or network activity (in-app usage, logs); approximate geolocation; audio-visual information (photos and documents you upload); professional information (profession or business listing you add); and, for Group verification, government identification details (sensitive personal information). We do not sell or “share” personal information as those terms are defined under California law, and we have no actual knowledge of selling or sharing information of consumers under 16.
11. International Data Transfers
Tribily is based in the United States and serves Groups worldwide. Your information may be processed in the United States and other countries where we or our service providers operate, which may have different data-protection laws. When we transfer personal information from the EEA, UK, or Switzerland, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK Addendum, or rely on an adequacy decision.
12. Children’s Privacy
Tribily is intended for adults aged 18 and over. We do not knowingly collect personal information from children under 18 (or under 13 for purposes of the U.S. Children’s Online Privacy Protection Act). If you believe a child has provided us information, contact info@tribily.com and we will delete it.
13. Links and Third-Party Services
The Services may link to or integrate third-party sites and services, such as member business listings, Stripe checkout, or Apple and Google sign-in. Their privacy practices are governed by their own policies, and we encourage you to read them.
14. Changes to This Policy
We may update this Policy as Tribily grows—for example, when we launch community loans, regional payment methods, or the member business directory. We will post the updated Policy at tribily.com/privacy and in the app, update the “Last Updated” date, and notify you in the app or by email of material changes before they take effect.
15. Contact Us
If you have questions or requests about this Policy or your information, contact us:
Company: Tribily LLC Address: 21000 Southbank St., Suite 106 #1235, Sterling, VA 20165-7227, United States Email: info@tribily.com Phone: +1 (571) 412-3885