Privacy Policy

Who we are

Ritua is a local-first habit tracker for iOS and Android, operated by Soham Sarkar, an individual (“we”, “us”). Ritua is the product name. Supercollective is a portfolio brand only and not a separate legal entity. This Privacy Policy explains what information the app does and does not handle, and it applies to the Ritua mobile app and this website, getritua.com.

If anything here is unclear, email us at support@getritua.com. We would rather answer a question than have you guess.

Local-first by design

Ritua has no account system and no Ritua server. There is nothing to sign up for and nothing to log in to. Everything you track (your rituals, your check-ins, your notes) is stored in a database on your device and never sent to us.

Because there is no cloud copy, we cannot read your habits, sell them, analyse them, or lose them in a breach. The trade-off is the honest one: your data lives with you. Premium includes manual backup tools if you want to keep a copy elsewhere (see Exporting, importing, and sharing).

Email updates from this website

If you choose to join the email list on getritua.com, we collect the email address you provide and the page and campaign information attached to that submission. This is separate from the Ritua app: joining the list does not create an app account, enable cloud sync, or send us anything about your rituals.

We use the address to manage the Ritua list and send occasional product or launch updates. If you signed up for the free habit course, we also send you that sequence of five lessons, one a day, after which it stops on its own. The emails are sent through Cloudflare Email Sending.

The form uses Cloudflare Turnstile to reduce abuse, and the submission is stored in a private database operated through Cloudflare Workers and D1. Every email we send carries a one-click unsubscribe link, which stops the course and withdraws your marketing consent in the same action. You can also withdraw consent or ask us to delete your address at any time by emailing support@getritua.com.

What stays on your device

The following is stored locally in the app’s on-device database and, unless you choose to export or share it, never leaves your phone or tablet:

• Your rituals: names, descriptions, icons, colours, categories, and reminder settings.
• Your daily check-ins, completion counts, and streak history.
• Any free-text notes you attach to an entry.
• App preferences such as theme (light or dark) and language.
• Whether you have unlocked Premium: a simple on/off flag cached on the device.

We do not have a copy of any of this. When we say “we never see it”, we mean it literally: there is no channel for it to reach us.

What we don’t collect

To be concrete, the Ritua app does not collect, request, or transmit any of the following:

• Your name, email address, phone number, or any account credentials; there is no app account.
• Crash or diagnostic telemetry sent to us.
• Advertising identifiers (such as Apple’s IDFA or Google’s Advertising ID). Ritua shows no ads and does not track you across apps or websites.
• Your location, contacts, photos, camera, microphone, calendar, or health data from other apps.

Ritua does not track you across apps or websites.

Anonymous usage statistics

To understand whether Ritua’s onboarding, trial, and purchase flow work, the app can send a small allowlisted set of anonymous product events to PostHog in the United States. This is enabled by default and can be switched off at any time in Settings → General → Privacy.

Those events use a random installation ID, not your name, email address, advertising ID, or an account. They cover actions such as finishing onboarding, creating a ritual, viewing a paywall, and completing a purchase. They never include ritual names, categories, notes, log dates, streaks, reminder times, backup contents, prices, or exact counts. We disable IP-based location enrichment and do not use session replay, autocapture, surveys, feature flags, or cross-device identity stitching.

Turning the setting off stops new events immediately and discards any queued analytics events. It does not change how Ritua works.

Purchases and subscriptions

Ritua offers an optional one-time Premium purchase and optional yearly and monthly subscriptions. When you choose to buy, the transaction is handled by the Apple App Store or Google Play, with subscription state managed through RevenueCat, our purchase-management provider.

Ritua never sees or stores your payment-card details. We do not send RevenueCat your name or email. Ritua identifies your purchase using an anonymous, randomly generated ID tied to your app installation, not to you personally.

To process a purchase and keep Premium in sync across your own devices, these providers necessarily handle standard billing information: the purchase and receipt, the anonymous identifier, and coarse device and store metadata (device model, operating system, country, and IP address). That processing is governed by their own privacy policies, linked in Third-party services. If you never make a purchase, no payment network requests are made. Anonymous usage statistics may still be sent if you have left that separate setting enabled.

Reminders and notifications

Reminders in Ritua are local notifications scheduled by your device. When you set a reminder for a ritual, your phone’s operating system delivers it at the chosen time. There is no push server, and no push token is ever created or sent anywhere.

Ritua asks for notification permission only when you first add or edit a reminder, never at launch, and never for marketing. If you decline, the rest of the app works exactly the same.

Exporting, importing, and sharing

Premium includes full-history export from Settings as a JSON or CSV file, plus backup import from Ritua and supported habit apps. You select the file yourself, and imports are read and processed entirely on your device.

An export leaves your device only when you choose a destination for it through your system’s share sheet, for example saving it to Files, or sending it to yourself. At that point the file goes wherever you send it and is governed by that destination’s terms, not ours. The same is true of the shareable progress images Ritua can generate: they are created on your device and shared only if you send them.

Third-party services

Ritua relies on a small, deliberate set of third parties, and only for the purposes described above. We encourage you to review their privacy practices:

• Apple App Store: app distribution and payment processing on iOS. Apple’s Privacy Policy.
• Google Play: app distribution and payment processing on Android. Google’s Privacy Policy.
• RevenueCat: subscription and purchase management (using an anonymous ID). RevenueCat’s Privacy Policy.
• PostHog: anonymous, allowlisted product analytics, controlled by the Privacy setting in the app. PostHog’s Privacy Policy.
• Cloudflare: website hosting, Turnstile abuse prevention, and private storage for optional website email submissions. Cloudflare’s Privacy Policy.

That is the complete list. Ritua embeds no advertising, social, or other tracking services.

Keeping and deleting your data

Because your data lives on your device, you are in direct control of how long it is kept and when it is removed:

• Delete an individual ritual or entry inside the app to remove it and its history.
• Uninstall Ritua to delete the entire on-device database. Once the app is removed, that data is gone from the device; we hold no copy to restore it from. If you have Premium and want to keep the history, export a backup before uninstalling.

For purchase records held by Apple, Google, or RevenueCat, retention and deletion follow their policies; you can manage your subscription and request data directly from them.

If you join website email updates, we keep your address while it is useful for that list and remove it when you ask us to delete it or withdraw consent.

Your privacy rights

Depending on where you live, privacy laws such as the GDPR (Europe / UK) and the CCPA/CPRA (California) give you rights to access, correct, delete, or port your personal data, and to object to certain processing.

For the mobile app, these rights are unusually simple to exercise: because we hold no habit data or app profile on any server, there is nothing for us to retrieve, correct, or erase. You already have full, direct access to that data on your device. If you joined website email updates, email us to access, correct, or delete that address, or to withdraw consent. We do not sell or “share” personal information. For any data processed by our payment providers, you can exercise your rights with them directly.

Children’s privacy

Ritua is intended for a general audience and is not directed to children under 13 (or the minimum age of digital consent in your country). We do not knowingly collect personal information from children through the app or website. If you believe a child has joined the website email list, contact us and we will delete the address.

Security

Your Ritua data is protected by your device’s own security: its passcode or biometrics, and the operating system’s sandboxing that keeps one app’s data separate from another’s. We recommend setting a device passcode and enabling encrypted device backups.

Because none of your habit data sits on a Ritua server, there is no central database of habits for an attacker to breach. Website email addresses are kept separately with access limited to operating the list. The most important safeguard for the app is the one you control: keep your device secure, and keep your own backups somewhere you trust.

Changes to this policy

If we update this policy, we will revise the “Last updated” date above and post the new version here. For material changes, we will make a reasonable effort to flag them (for example, in the app). Because Ritua’s privacy model is structural rather than a promise we could quietly change, substantive changes should be rare.

Contact us

Questions, concerns, or requests about privacy? Email support@getritua.com and a real person will reply. This policy is also available any time at getritua.com/privacy-policy, linked from the app’s onboarding and Settings.