Privacy Policy

Your privacy matters deeply to us. This policy explains exactly what data Ritualio collects, how it is used, and the choices you have. We collect only what is necessary to deliver the app experience, and we never sell your data.

1. Who We Are

Ritualio is developed and operated by the Ritualio team. If you have any questions about this policy, you can reach us at contact@ritualio.io.

2. Information We Collect

We collect the following categories of information when you use Ritualio:

• Account information – your email address and password (stored securely via Supabase Auth).
• Ritual activity – records of rituals you complete, including timestamps, duration, and any reflection text you choose to write.
• Journal entries – notes you create within the app, which are stored privately in your account.
• Usage data – anonymous analytics events (e.g., screens visited, features used) to help us improve the app. No personally identifiable information is attached to these events.
• Device information – operating system version and device type, collected automatically by our infrastructure providers for diagnostics and security.

We do not collect location data, contacts, photos, microphone audio, or any data unrelated to your mindfulness practice.

3. How We Use Your Information

• To provide and personalise the app experience (ritual recommendations, garden progress, streak tracking).
• To store your journal entries and reflections securely so they are available across your devices.
• To send you transactional emails related to your account (e.g., password reset). We do not send marketing emails without your explicit consent.
• To analyse aggregate usage patterns and improve app features.

4. Data Storage and Security

All user data is stored in a Supabase PostgreSQL database hosted on secure AWS infrastructure. Data is encrypted in transit (TLS) and at rest. Row-Level Security (RLS) policies ensure that each user can only access their own data.

We follow industry-standard security practices, including hashed passwords (never stored in plain text) and regular security reviews.

5. Third-Party Services

Ritualio uses the following third-party services, each governed by their own privacy policies:

• Supabase – database, authentication, and file storage (supabase.com/privacy).
• Vercel – web hosting and content delivery (vercel.com/legal/privacy-policy).
• Apple App Store / Google Play – app distribution. Their platforms may collect device identifiers and analytics as described in their own policies.

We do not share your personal data with advertisers or data brokers.

6. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access – request a copy of the data we hold about you.
• Correction – ask us to correct inaccurate data.
• Deletion – request that we delete your account and all associated data. You can do this by emailing us or using the "Delete Account" option in the app (Settings → Profile).
• Portability – request an export of your journal entries and ritual history in a machine-readable format.
• Opt-out of analytics – disable anonymous usage tracking in the app settings.

To exercise any of these rights, email contact@ritualio.io. We will respond within 30 days.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data (email, journal entries, ritual records) is permanently deleted within 30 days. Aggregated, anonymised analytics data may be retained indefinitely as it cannot be linked back to you.

8. Children's Privacy

Ritualio is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you within the app or by email. Continued use of Ritualio after changes take effect constitutes your acceptance of the revised policy.

10. Contact Us