Privacy Policy

The short version

Ritual uses the information needed to run your account, keep your habits in sync, power Focus, and let you connect with friends. We do not sell your data or show third-party ads. With your permission through Apple’s tracking prompt, we use AppsFlyer to measure which marketing campaigns bring people to Ritual and lead to subscriptions.

What Ritual collects

When you create and use an account, we process your email address, account ID, and sign-in information. Your profile may include your name, birthday, photo, and status.

To make the product work, we store the habits you create, their schedules and folders, reminder settings, completion history, streaks, Focus settings, and the progress calculated from this activity.

If you use social features, we process friend searches, requests, invitations, connections, sharing choices, and the progress you choose to share. If you contact us, we receive your message and any information you include in it.

Security information

Ritual uses Apple App Attest and limited technical signals to protect sign-in and account creation from abuse. These may include attestation keys and counters and hashed versions of an email address, installation identifier, and IP address. We use them for security and rate limiting, never for advertising.

Diagnostics and product analytics

Ritual uses Sentry to detect crashes, errors, and performance problems, and Amplitude to understand limited product events such as completing onboarding, creating or completing a habit, starting Focus, or opening a Discover article. We associate these events with an internal account identifier so we can measure whether the app works reliably. We do not send habit names, your email address, profile photo, Screen Time selections, screenshots, session replays, or request bodies to these services. Amplitude also processes your IP address to estimate your country for product analytics. We disable city, region, and DMA collection in the Amplitude SDK and do not request GPS location for this purpose. These services support diagnostics and product analytics, separately from the advertising measurement described below.

Advertising measurement and your permission

Ritual uses AppsFlyer for advertising attribution: understanding which campaigns lead to installs, app use, and purchases. Ritual starts AppsFlyer attribution and sends app events only after you allow tracking through Apple’s App Tracking Transparency prompt. This measurement can link activity in Ritual with advertising interactions across other companies’ apps and websites.

AppsFlyer may process your advertising identifier (IDFA), an AppsFlyer installation identifier, IP address, device and app information, and events such as app sessions, completing onboarding, and viewing the subscription screen. We do not include habit content, your email address, profile photo, or Screen Time selections in the app events we send to AppsFlyer.

With tracking permission, Ritual also supplies your AppsFlyer identifier to RevenueCat, which manages subscription access. Our RevenueCat integration can send purchase and subscription events to AppsFlyer, including your internal account identifier, product identifier, event time, and purchase amount and currency. This lets us measure subscriptions and renewals associated with marketing campaigns, including events that occur when the app is closed.

You can decline tracking and continue using Ritual. You can change your choice in iPhone Settings → Privacy & Security → Tracking. When Ritual next becomes active and detects that permission has been withdrawn, it stops AppsFlyer tracking in the app and clears the AppsFlyer identifier supplied to RevenueCat. This does not cancel your subscription or disable the diagnostics and product analytics described above.

Separately from personal tracking, Ritual uses Apple’s SKAdNetwork to measure eligible advertising installs, including when you decline tracking or have not made a choice. Apple sends privacy-preserving install postbacks to the advertising network and copies to AppsFlyer for aggregate reporting. This install-only measurement does not send your advertising identifier, account identifier, or in-app events through the AppsFlyer SDK when tracking is not authorized.

What stays on your device

Some preferences and notification schedules are stored on your iPhone. Apps selected for Focus are handled through Apple’s Family Controls and Managed Settings frameworks. Apple gives Ritual opaque selections rather than a readable list of your installed apps. We use those selections only to apply the Focus rules you set.

How we use information

• Run your account and keep your profile, habits, progress, and Focus settings in sync.
• Schedule reminders, calculate streaks, and show the product’s insights.
• Find and connect friends, manage invitations, and share progress when both people allow it.
• Protect Ritual from fraud and abuse, fix problems, and respond when you ask for help.
• Send essential emails, such as sign-in and account-deletion messages.
• Send a welcome email and occasional product emails about Ritual, which you can unsubscribe from at any time.

Who helps us run Ritual

Supabase provides authentication, database, file storage, and server functions. Sentry provides crash, error, and performance diagnostics. Amplitude provides limited product analytics. AppsFlyer provides advertising attribution when you permit tracking and receives Apple’s privacy-preserving SKAdNetwork postbacks for aggregate install reporting. RevenueCat manages subscription access and supports the purchase-event integration described above. Cloudflare hosts Ritual’s public web pages. Resend delivers Ritual email. Apple provides Sign in with Apple, App Attest, notifications, App Store purchases, and Screen Time frameworks. These providers may process information only to deliver their services and must protect it to the same standard described here.

We may also disclose information when the law requires it or when reasonably necessary to protect a person, Ritual, or our legal rights.

Friends and visibility

Ritual does not make your habits public. Friends see only the profile and progress made available by the social features you use. Progress sharing is controlled per friendship and can be turned off. Removing a friend ends that connection.

How long we keep information

We keep account information while your account is active. Short-lived security records may remain for as long as they are needed to prevent abuse, resolve disputes, or meet legal obligations. Support messages may be retained so we can follow up and understand recurring issues.

Your choices

You can edit your profile, remove your photo, manage friends and progress sharing, change notifications, revoke Screen Time access in iOS Settings, or unsubscribe from product emails using the link in any such email. Unsubscribing does not stop essential account emails. To delete your account and associated server data, open Ritual → Settings → Profile → Delete account. You can also ask to access, correct, or delete your information by emailing us.

Deleting Ritual from your iPhone does not by itself delete your account. Account deletion does not cancel an App Store subscription; subscriptions are managed through your Apple ID settings.

Children

Ritual is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child has created an account, contact us and we will review and remove it.

Changes

If Ritual or its data practices change, we will update this policy and its effective date. For a material change, we will provide a clearer notice when appropriate.

Contact

For a privacy question or request, email hello@joinritual.co.