This Privacy Policy explains how Ishaan Dimri, a sole trader (ABN 89 966 012 969) collects, uses, discloses and protects your personal information. In this Policy, 'I', 'me' and 'my' refer to Ishaan Dimri (the operator of Ritual). I am committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
It applies to the Ritual mobile app, the website ritual-app.com.au, and related services (the Services). By using the Services you agree to this Policy.
1. The information I collect
The kinds of personal information I collect depend on how you use the Services. They may include:
Information you give me
- Account details — your name or display name, email address, and password (passwords are stored only in hashed form by my authentication provider, never in plain text by me).
- Partner link — the partner code you enter, and the link between your account and your partner's.
- Couple content — the conversations you have with the AI and your partner, daily-thread answers, ritual check-ins, “life event” moments (a label, date, and a mood you choose), your reunion countdown (“Our Horizon”) label and date, private notes, your chosen theme colour, and your chosen character/avatar.
- Photos — any images you attach to moments or events (see clause 5).
- Subscription details — if you buy a paid plan, your purchase and subscription status (see clause 6). Payment itself is handled by the app stores; I do not receive your full card details.
- Communications — messages you send me at support@ritual-app.com.au.
Information collected automatically
- Approximate location — if you grant permission, your coarse device location, timezone and city, used for the distance and “Two Clocks” presence features (see clause 4).
- Push notification token — a device token used to deliver notifications (see clause 7).
- Usage and device data — basic app and usage events, device type, and technical logs needed to operate and secure the Services.
Information from your partner
- When you link with a partner, content they choose to share (their check-ins, moments, daily-thread answers, approximate location/city and local time) becomes visible to you, and yours to them. Only link with a partner who consents to this.
I try to collect only what I need to run the Services. Please do not enter sensitive information (such as health, financial, or identity details) that is not necessary to use Ritual.
2. Types of information — personal and sensitive
The Privacy Act distinguishes Personal Information (information about an identified or reasonably identifiable individual) from Sensitive Information (a subset that includes health information and information about your relationships, beliefs, or similar).
Some content you choose to share — for example, feelings, relationship details, or what you work through in a conversation — may be sensitive information. I collect it only with your consent, which you provide by choosing to enter it, and I use it solely to provide the Services to you and your linked partner. I do not use it for any secondary purpose except one directly related to that primary purpose, or as required or authorised by law.
3. How I use your information
I use your personal information to:
- create and manage your account and partner link;
- provide the core features (rituals, daily thread, conversations, the shared “thread” of beads, the reunion countdown, and the distance/presence widgets);
- generate AI-assisted responses (which requires sending conversation text and certain setup answers to my AI provider — see clause 9);
- run an automated safety check on messages to surface crisis-support resources where appropriate;
- send you notifications you've enabled (see clause 7);
- manage paid subscriptions and entitlements (see clause 6);
- maintain security, prevent fraud and misuse, and debug problems;
- respond to your support requests; and
- comply with my legal obligations.
I do not sell your personal information, I do not use your private conversation content for advertising, and I do not permit my AI provider to use your content to train its models (see clause 9).
4. Location and presence features
Some features — the partner distance widget and the “Two Clocks” presence display — use approximate location.
- Location is collected only with your permission, which you can grant or decline when prompted and change at any time in your device settings.
- Before any location leaves your device it is rounded to roughly a 1 km grid. I do not collect or store precise GPS coordinates.
- I also derive your timezone and a city name (via your device's geocoder) from that approximate location.
- Your approximate location, city and local time are shared with your linked partner so their widget can show the distance between you and your local time of day. To show current weather, your rounded coordinates are sent to my weather provider (see clause 9).
- If you decline location permission, these features simply stay empty; the rest of the app works normally.
5. Photos and media
If you attach a photo to a moment or event, the app asks for permission to access your photo library or camera. Photos you add are uploaded to my storage provider (Supabase Storage) and shared with your linked partner as part of your shared content. Only add images you have the right to share.
6. Subscriptions and payments
Ritual may offer paid subscriptions for premium features. If you purchase one:
- Payment is processed by the app store you use (Google Play or the Apple App Store) under their terms. I do not receive or store your full payment-card details.
- I receive and store your subscription status (for example, whether your account is on a free or premium plan and when it renews or lapses) so I can unlock the right features.
- Renewals, cancellations, free trials and refunds are governed by your app store's policies and my Terms of Service. Manage or cancel a subscription in your app store account settings.
7. Push notifications
If you enable notifications, I register a push token for your device with Google Firebase Cloud Messaging (FCM) and use it to send reminders and partner activity alerts (for example, “your partner started a conversation”). You can turn notifications off at any time in your device settings; doing so stops these messages.
8. When I disclose your information
I disclose personal information only:
- to service providers who help me run the Services (see clause 9), under confidentiality obligations;
- where you direct me to — for example, sharing content with your linked partner;
- if required or authorised by law, or to protect the safety, rights or property of any person; or
- in connection with a sale or transfer of the business, in which case I will require the recipient to honour this Policy.
9. Service providers and AI processing
I rely on the following key providers:
- Supabase — database, authentication, file storage and hosting of your account and content (hosted in India).
- Anthropic — AI processing. To generate responses, summaries and ritual recommendations, the relevant conversation text, conversation-session summaries and your onboarding setup answers are sent to Anthropic's API. I do not permit your content to be used to train third-party models, and I configure the integration to process content only to return a response to you.
- Google Firebase Cloud Messaging — delivery of push notifications (processes your device push token).
- Open-Meteo — weather for the distance/presence widgets. Your rounded coordinates are sent to retrieve local conditions; no account or identifier is attached.
- Google Play / Apple App Store — distribution and payment processing for paid features (I do not receive your full payment-card details).
Some providers process or store data outside Australia (see clause 10).
10. Overseas disclosure
My providers may store or process data on servers located outside Australia, including:
- India — where my database and storage provider (Supabase) hosts your account and content;
- the United States — Anthropic (AI processing) and Google (push notifications); and
- the European Union — Open-Meteo (weather).
Where I disclose personal information overseas, I take reasonable steps to ensure it is handled consistently with the APPs.
11. Data security
I take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, including:
- encryption in transit between the app and my providers;
- access controls on my systems, on a need-to-know basis;
- row-level security in my database, so that a couple can only access their own data;
- multi-factor authentication on administrative accounts where available; and
- routine review of access and prompt revocation when no longer needed.
No method of transmission or storage is completely secure, and I cannot guarantee absolute security. If a data breach occurs that is likely to result in serious harm, I will comply with the Notifiable Data Breaches scheme and notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required.
12. Data retention and deletion
I keep your personal information for as long as your account is active or as needed to provide the Services and meet my legal obligations.
You can delete your account and associated personal data from within the app, or by emailing support@ritual-app.com.au. A public deletion-request page is available at our-ritual.netlify.app/delete-account.html. After deletion, residual copies may remain in secure backups for up to 30 days before they are overwritten. Content you shared with a linked partner may remain visible to them.
13. Your rights — access and correction
Under the Privacy Act (Australian Privacy Principles 12 and 13) you may:
- access the personal information I hold about you;
- ask me to correct information that is inaccurate, out of date or incomplete; and
- withdraw consent or delete your account (clause 12).
To make a request, email support@ritual-app.com.au. I will respond within a reasonable time (I aim for 30 days) and may need to verify your identity first. I will not charge for access except where permitted by law, and if I decline a request I will explain why.
14. Children
The Services are intended for people aged 16 and over and are not directed at children under 16. If I become aware that I have collected personal information from a child under 16 without appropriate consent, I will delete it.
15. Cookies and analytics
The website may use essential cookies needed to operate. The mobile app does not currently use third-party analytics or advertising SDKs. I aim to keep any future analytics privacy-preserving, and I will update this Policy — and seek consent where required — if I introduce non-essential cookies or tracking.
16. Complaints
If you have a privacy concern, contact me first at support@ritual-app.com.au so I can try to resolve it. I will acknowledge your complaint within a reasonable time, investigate, and aim to respond within 30 days. If you are not satisfied with my response, you may complain to the Office of the Australian Information Commissioner (OAIC):
- Website: oaic.gov.au
- Phone: 1300 363 992
17. Changes to this Policy
I may update this Policy from time to time. I will post the updated version with a new “Last updated” date and, for material changes, take reasonable steps to notify you (for example, in-app or by email).
18. Contact me
Ritual — Ishaan Dimri (sole trader), ABN 89 966 012 969
Contact address: 44 Ashley Street, West Footscray VIC 3012, Australia
Privacy contact: support@ritual-app.com.au