501(c)(3) nonprofit·RYI programs are always free to families·Orlando, Florida
ContactNeed help?
Rebuild YourselfInc.
VolunteerDonate
Legal

Privacy Policy

This policy outlines how Rebuild Yourself Inc. collects, uses, and safeguards personal information.

Rebuild Yourself Inc. Privacy Policy

Effective / last updated: July 16, 2026

Rebuild Yourself Inc. ("RYI," "we," "us," or "our") explains below how we collect, use, share, and safeguard personal information when you interact with our website, programs, events, forms, and communications.

1. Information We Collect

1.1 Information You Provide Directly

Website forms currently collect the fields listed below (as implemented in the site code):

  • Contact / inquiry forms: name, email address, role (for example, teen, caregiver, or volunteer), message, and marketing/privacy consent when required by the form.
  • Program interest forms: participant or contact name, email, optional notes/preferences, and optional guardian email.
  • Volunteer applications: name, email, preferred role, and optional motivation/availability notes.
  • Testimonials and story submissions: name, persona/role, email, story text, and optional flags (anonymous / under 18). Image or video uploads are not collected through the current website story form.
  • Newsletter signups: email address.
  • Resource suggestions: resource name, optional URL, and optional notes.
  • Event registration: when you register through Eventbrite or similar external event pages, those platforms collect information under their own policies.
  • Donations: when you give through our Donorbox-powered donation flow, Donorbox (and its payment processors) collect donation amount and the billing/contact details needed to process your gift. RYI does not process card payments directly on this website.

1.2 App interest list (adults only — Convex)

Our /app interest form is for adults (18+) only. If you are under 18, ask a parent or guardian to submit it.

When an adult submits the app interest form, we store the following in our dedicated Convex website backend (separate from the mobile app) so we can send app launch and beta communications:

  • adult email address
  • adult relationship / audience selection (parent or guardian, family member, educator, or other caring adult 18+)
  • optional TestFlight / beta interest flag
  • required marketing consent
  • acquisition source (where on the site the form was submitted)

This form does not request minor names or minor contact details, health details, mood/journal/chat content, or location.

1.3 Information Collected Automatically

  • Usage data: when analytics are enabled after consent, tools such as Google Analytics 4 and (if configured) Meta Pixel may receive standard device/browser and interaction data (for example, pages viewed and event names used by the site).
  • Dedicated website Convex app-funnel analytics: after you grant analytics consent, and only when Convex and app-launch analytics are configured/enabled, the website may send limited app-funnel events to our dedicated Convex website backend. Those events include only an allowlisted event name (app_page_view, app_interest_submit, app_beta_interest, or app_store_click), the current app launch state, and—when required for the event—an acquisition source. That Convex analytics payload does not include minor personal information, mood/journal/chat content, or other free-form content.
  • Cookies and similar technologies: functional cookies, consent records, and optional analytics/marketing technologies described in our Cookie Policy. Analytics scripts load only after you grant analytics consent through our cookie consent flow.

1.4 Information from Third Parties

Depending on how you interact with us, third parties may share limited confirmations or engagement data with us, including:

  • Donorbox for donation processing confirmations and related donor communications they send on their platform
  • Eventbrite for public event listings and registration activity you initiate there
  • Email delivery providers used for operational notifications (currently Resend, when configured)
  • Social platforms when you engage with RYI content on those platforms

2. How We Use Information

  • Respond to inquiries and operate website forms and program interest workflows.
  • Maintain the adult app-interest list and send related launch/beta emails when consent is given.
  • Measure limited app-launch funnel activity (page views, interest submits, beta interest, and store clicks) through consent-gated Convex analytics when configured, using only the allowlisted fields described in Section 1.3.
  • Process and acknowledge donations through Donorbox.
  • Communicate updates, newsletters, event information, and impact reports (with unsubscribe / opt-out options where provided).
  • Coordinate program scheduling, reminders, and follow-up support.
  • Maintain records needed for operations, nonprofit reporting, and legal obligations.
  • Produce aggregated or anonymized statistics for stakeholders and grant reporting where appropriate.
  • Protect our community and comply with applicable law.

3. Legal Basis for Processing (Where Applicable)

Where a “legal basis” concept applies (for example, for some non-U.S. visitors), we generally rely on:

  • Consent: when you opt in to communications, submit the app interest form, provide testimonials, or otherwise agree to a specific use.
  • Contractual necessity / requested services: when delivering programs or processing donations or form requests you initiate.
  • Legitimate interests: supporting operational communications, security, and program improvement in ways that respect your rights.
  • Legal obligations: maintaining financial records, honoring opt-out/deletion requests where required, and meeting other applicable requirements.

These descriptions are operational explanations, not a determination that any particular statute applies to you.

4. Sharing of Information

We share information with service providers that help us run the website, only as needed for those services:

  • Supabase: stores submissions from existing website forms (contact, volunteer, program interest, stories, newsletter, and resource suggestions).
  • Convex: stores adult app-interest list records described in Section 1.2, and—after analytics consent and only when configured/enabled—limited consent-gated app-funnel analytics events described in Section 1.3.
  • Donorbox: processes online donations.
  • Resend: may send internal staff notifications about form submissions when configured.
  • Eventbrite: event discovery and ticketing when you use Eventbrite links.
  • Analytics providers: Google Analytics 4 and, if configured, Meta Pixel — loaded only after analytics consent.
  • Hosting and infrastructure providers that serve the website.

We do not sell personal information. We do not knowingly share website data for targeted advertising directed at children.

We may also share information:

  • With program partners (for example, hospitals, schools, or community organizations), we may share only the teen/family program-coordination details needed for the requested program—participant or contact name, participant/guardian contact details, selected program, and notes/preferences submitted for that program—and only with explicit participant or parent/guardian consent, or when RYI has documented that the specific information is necessary to deliver or coordinate the particular program/service the person requested.
  • For legal and safety reasons when required by law or to protect the rights, safety, and security of participants, staff, or the public.
  • With your consent for publishing stories, testimonials, or photos.

Vendor handling is subject to each vendor’s terms and policies. This page does not assert specific confidentiality or subprocessor terms from website code.

5. Data Retention

We retain personal information only as long as needed for the purposes described above, including program operations, donor/financial recordkeeping, and legal obligations, or until you successfully request deletion where we can honor that request.

Exact retention schedules are maintained operationally and are not hard-coded in the website. Contact us if you want to know how a specific record type is handled.

6. Your Rights and Choices

  • Access and update: request a copy of personal data or corrections by emailing privacy@rebuildyourself.org or using the contact details below.
  • Delete: request deletion of personal data, subject to legal retention requirements (for example, donation records that must be kept for tax purposes).
  • Opt out of communications: use unsubscribe links where provided, or contact us directly. App-interest marketing requires consent at submission; you may withdraw that consent later.
  • Cookie preferences: when the consent banner is shown, you can Accept analytics or choose Remind me later. You can also reopen, change, or turn off analytics consent on the Cookie Policy page (/cookies). Stored consent can also be reset by clearing this website’s site data in your browser settings.
  • Testimonial consent: withdraw consent for future use; materials already published or distributed offline may not be fully retractable.

We honor applicable rights under U.S. federal and Florida state laws to the extent they apply. If you are located in another jurisdiction, you may have additional rights under local law.

7. Security

We rely on HTTPS for website traffic and on access controls and security features provided by our hosting and data vendors (including Supabase, Convex, and Donorbox). No system is completely secure; please share only information that is necessary for your request.

This policy does not claim specific unaudited controls (for example, continuous audit logging or scheduled penetration testing) beyond what is evidenced by the current website implementation and standard vendor platforms.

8. Children’s Privacy

RYI programs support minors with parental or guardian involvement. Website program and contact forms may collect information about teens or families when a parent, guardian, or other adult submits it, or when a participant provides contact details for program coordination.

The app interest form is adults-only and is designed not to collect minor contact details, health details, mood/journal/chat content, or location (see Section 1.2).

We do not knowingly collect personal information from children under 13 through the website. If you believe a child provided information inappropriately, contact us and we will review and delete data where appropriate.

9. International Data Transfers

Our services are operated in the United States. If you access the site from outside the U.S., your information may be transferred to and processed in the U.S. by us and our vendors.

10. Changes to This Policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. We will post the effective / last-updated date at the top and, when material changes occur, provide additional notice via email or our website when practical.

11. Contact Us

For privacy questions, requests, or concerns, contact:

  • Email: privacy@rebuildyourself.org
  • Organization: Rebuild Yourself Inc.
  • Mailing Address: Rebuild Yourself Inc., 11954 Narcoossee Road, Suite 297, Orlando, FL 32832
  • Phone: (321) 448-4400

If we cannot resolve your concern, you may contact the Federal Trade Commission or your local data protection authority.

🦋 Donate