Privacy Policy
Effective May 2026.
Ritualy is built to keep your information on your device. This policy explains what that means in practice.
What Ritualy collects
Nothing. Ritualy has no account system and no login. We do not ask for your name, email, or any personal information.
Where your data lives
Every routine, step, and run you create is stored on your iPhone, using Apple's on-device database (SwiftData).
With Ritualy Premium, that same data also syncs across your devices through your own private iCloud account (Apple's CloudKit). It is stored in your iCloud (governed by Apple's privacy policy), not on our servers. We never receive it and cannot read the contents of your private iCloud database, and your data is never shared between different people's iCloud accounts.
Analytics
To understand how Ritualy is used and improve it, the app sends a small number of anonymous events to TelemetryDeck, a privacy-respecting analytics service based in Germany. TelemetryDeck uses a one-way, double-hashed identifier per session, so there is no way to identify you, link sessions back to you, or track you across other apps or websites. The full list of what is sent: the app version, iOS version, device model, country (inferred from IP, which is then discarded), the name of the event being recorded (for example, routine started), and aggregate counts of any diagnostic events Apple's MetricKit delivers (e.g. "two app hangs occurred in the last 24h"). No personal information, no IP addresses stored, no advertising IDs, no contact data, no content of your routines or runs.
You can turn analytics off at any time in Ritualy: Settings → Privacy & About → Share anonymous analytics. With analytics off, the app makes no network calls to TelemetryDeck; the SDK is not even initialised on launch. The change takes effect on the next app launch.
Crash & performance diagnostics
To detect crashes and performance regressions, the app sends crash reports and selected diagnostic data (e.g. app hangs, unusually slow launches) to Sentry, hosted on Sentry's EU region (Frankfurt) so the data never leaves the European Union. A crash report contains: the type of crash and where in the code it happened, the app version, iOS version, and device model. Sentry also receives the diagnostic reports Apple's MetricKit framework delivers to the app (hang reports, disk-write exception reports, and CPU exception reports), so we have full context (not just bucketed counts) when investigating a regression. No personal information is sent: no email, no name, no IP address stored by Sentry (their EU endpoint strips it at ingest), no account identifier, and no content of your routines or runs. Sentry retains diagnostic data according to the retention settings we configure for the Ritualy project at Sentry.
You can turn crash diagnostics off at any time in Ritualy: Settings → Privacy & About → Send crash reports. Turning the toggle off shuts the Sentry SDK down immediately and it stays off on every subsequent launch until you turn it back on.
Tracking
Ritualy does not track you. It contains no advertising and no cross-app or cross-site tracking. Neither the analytics nor the crash diagnostics described above meet Apple's definition of tracking, which is why Ritualy does not present the App Tracking Transparency prompt.
Notifications
Ritualy can schedule local reminders on your device. These are created and delivered entirely on your iPhone; no notification data is sent to us.
Subscriptions
Ritualy Premium is an auto-renewing subscription sold through Apple's App Store. Apple processes the purchase and handles billing; we never receive your payment details. Apple's own privacy policy governs that transaction.
Payment processing
To verify your purchase and grant access to Ritualy Premium across reinstalls and devices, the app uses RevenueCat as a sub-processor. RevenueCat receives the App Store receipt for every purchase you make, the resulting entitlement state (which plan, when it renews), and a pseudonymous device identifier, a random UUID generated on first launch and stored in your device's Keychain. RevenueCat never receives your Apple ID, your email, your name, your payment details, or anything about your routines.
This processing is essential to operate Premium: it is how the app knows you are subscribed, and it is the only mechanism that lets your subscription follow you to a new device. There is no opt-out for this processing. Turning it off would mean you could not subscribe at all. RevenueCat's commitments as a processor are set out in their Data Processing Addendum.
If you receive Ritualy Premium through Family Sharing, RevenueCat sees the family-shared entitlement and the same pseudonymous device identifier. The organizer of your Family Sharing group manages the subscription itself. Ritualy cannot start, modify, or cancel a family-shared subscription on your behalf.
Children
Ritualy is suitable for all ages. Because it collects no personal information, this is true regardless of the user's age.
Changes
If this policy changes, the updated version will be posted here with a new effective date.
Contact
Questions about privacy? Email support@getritualy.app.