←

Privacy Policy

Effective date: April 2026

Ritual ("we," "us," or "our") is operated by Christelle and Willem Bekker (ABN 20 917 156 101). This Privacy Policy explains how we collect, use, store, and share information when you use the Ritual mobile application and associated services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect the following types of information:

Account and family information: When you set up a family on Ritual, we collect family member names (including children's names), a family PIN used for authentication, and profile preferences. Family accounts are created and managed by a parent or guardian.

Habit and usage data: We collect information about the habits you create, track, and complete, including habit names, categories, schedules, completion timestamps, streaks, and points. This data is core to the Service's functionality.

Device information: We may collect device identifiers, operating system version, app version, and device type to support the Service's operation and troubleshoot issues.

Push notification tokens: If you enable push notifications, we collect device tokens provided by Apple Push Notification Service (APNs) to deliver reminders.

NFC tile data: If you use Ritual NFC tiles, we store the unique identifier (UID) of each tile and its association with a habit. No personal data is stored on the physical tile itself — tiles contain only a URL that opens the app.

Subscription and payment information: If you subscribe to a paid plan, payment is processed by Apple through the App Store. We do not collect, process, or store your credit card details or payment information. We receive confirmation of your subscription status from Apple.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Enable habit tracking, progress reporting, and family coordination features
• Send push notifications and reminders you have opted into
• Associate NFC tiles with habits within your family account
• Manage your subscription and provide customer support
• Monitor and analyse usage patterns in aggregated form to improve the Service
• Comply with legal obligations

3. Children's Privacy

Ritual is a family-oriented app. Children's accounts are not independent — they are created, managed, and supervised by a parent or guardian. Children do not sign up directly, provide personal information independently, or have unsupervised access to account settings.

We collect children's first names and their habit completion data solely for the purpose of providing the family habit tracking service. This data is entered and controlled by the parent or guardian. If you are a parent or guardian and wish to review, modify, or delete your child's data, please contact us.

4. How We Store and Protect Your Data

Your data is stored securely using Supabase, a hosted database platform, with row-level security policies that ensure each family's data is isolated and accessible only to authenticated members of that family. Data is encrypted in transit using TLS and at rest within Supabase's infrastructure.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell your personal information to third parties.

We may share your information in the following circumstances:

Service providers: We use third-party services to operate the app, including Supabase (database and authentication), Vercel (hosting), Apple (push notifications and subscription management), and Capgo (app updates). These providers process data on our behalf and are bound by their own privacy and security commitments.

Aggregated and de-identified data: We may share or sell aggregated, anonymised, and de-identified data that cannot reasonably be used to identify any individual. This may include statistical data about habit trends, usage patterns, completion rates, and demographic insights (for example, the most common habits tracked by Australian families). This data may be shared for research, analytics, or commercial purposes.

Business transfers: If Ritual is sold, merged, acquired, or undergoes a change of ownership, your information may be transferred to the new owner as part of that transaction. The new owner would be bound by the commitments made in this Privacy Policy, or you would be notified of any material changes.

Legal requirements: We may disclose your information if required by law, regulation, legal process, or government request, or to protect the rights, safety, or property of Ritual, our users, or others.

6. Your Rights and Choices

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of push notifications at any time through your device settings
• Withdraw from the Service at any time by deleting your account

To exercise any of these rights, contact us using the details below. We will respond to requests within a reasonable timeframe in accordance with applicable law.

7. Account Deletion

You may request deletion of your family account and all associated data at any time by contacting us. Upon receiving a verified deletion request, we will delete your personal information within 30 days, except where we are required to retain certain data for legal, accounting, or regulatory purposes. Aggregated, de-identified data that has already been generated will not be affected by deletion requests.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you cancel your subscription, we will retain your account data for a reasonable period (up to 90 days) in case you wish to resubscribe, after which it will be deleted unless retention is required by law. You may request earlier deletion at any time.

9. Third-Party Links and Services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app or on our website, and by updating the effective date above. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us