Privacy Policy

Rituala, Inc. provides personalized hair-care guidance, product discovery, routines, and a progress journal. This policy explains what information we collect, why we use it, and the choices you have.

1. Information we collect

• Account details: Your name, email, account identifier, and sign-in information. Clerk and your chosen Apple or Google sign-in provider handle authentication.
• Hair profile: Hair characteristics, goals, preferences, routine history, and any scalp concerns or sensitivity you choose to provide. Some of this is health-related information.
• Optional profile context: Age range and location information you enter. We convert a ZIP code into a three-digit prefix and climate/water information for personalization. The app does not request precise GPS location.
• Your content: Journal photos, check-ins, notes, product choices, saved conversations, feedback, and support messages. Photos are for tracking and comparing progress, not automated photo diagnosis.
• Purchases: Subscription products, transaction identifiers, entitlement status, and purchase/restore activity. Apple and RevenueCat handle iOS purchases; Stripe handles web checkout. We do not receive your full payment-card details from an App Store purchase.
• Activity and diagnostics: Screens and features used, searches, navigation, care activity, technical identifiers, device/browser details, IP addresses, and error/performance information. Some logs or analytics are associated with your account.
• Notifications: Notification preferences and a device push token if you enable push notifications.

We receive account information from authentication providers and subscription information from payment providers. We do not purchase personal information from data brokers.

2. How we use information

• Provide your profile, product picks, routine, journal, and saved content.
• Generate personalized educational guidance when you enable AI features.
• Process subscriptions, restore access, and prevent fraud or abuse.
• Send requested reminders, service messages, and support responses.
• Understand feature use, diagnose failures, and improve the experience.
• Send promotional communications according to your communication choices; you can unsubscribe.
• Meet legal obligations and resolve disputes.

Rituala does not use your personal profiles, photos, or conversations to train its own AI models. We do not sell or license your personal information to data brokers or advertising networks. We do not use your hair profiles, photos, or conversations for advertising, retargeting, or lookalike audiences. Optional website ad measurement is described in section 4 below.

3. Service providers and AI

We share information needed to operate the service with providers of authentication (Clerk, Apple, and Google), hosting and storage (including Vercel and Cloudflare), payments (Apple, RevenueCat, and Stripe), product analytics and diagnostics (PostHog), push notifications and app updates (Expo), and support and communications (including Intercom and email providers). Web referral attribution may use Rewardful to credit a referring partner. Shop links open Amazon with our Amazon Associates tag; we do not send your hair profile or account details to Amazon, and Amazon's own privacy practices apply on its site. These functions are distinct from cross-company advertising.

Optional AI features

With your explicit permission, we send Google Gemini the information relevant to your request, which can include hair/scalp profile details, goals, preferences, routine and product context, and messages or check-in text. Google processes this information under its Gemini API terms. AI guidance is educational and can be inaccurate; it is not a medical diagnosis. Progress photos are not sent for automated photo analysis.

You can decline AI sharing or withdraw permission in Privacy Settings. Declining leaves non-AI features available. Withdrawal stops new AI requests; it does not recall information already processed. Contact us if you also want saved content or provider-held data reviewed for deletion. AI features require confirmation that you are at least 18.

Research, aggregate-data sharing, and partner-offer preferences are separate, optional choices. They do not enable advertising reuse or grant AI permission. We may disclose information when legally required, to protect users and the service, or as part of a business transfer subject to applicable protections.

4. Cookies and analytics

The website uses cookies or similar storage for sign-in, preferences, product analytics, and referral attribution. The mobile app uses analytics identifiers and local storage for similar service purposes. We do not load Google Ads or Pinterest advertising tags. Browser settings can limit cookies, although blocking essential storage can affect sign-in and other features.

Optional ChatGPT ad measurement

If you allow it on this browser, we load OpenAI's measurement pixel to help us understand whether our ChatGPT ads lead to visits and new paid subscriptions. Our event payloads contain only the event type; we do not attach your name, email, hair profile, photos, conversations, plan, purchase amount, or transaction identifier. We request that these events be excluded from future user-level personalization.

The pixel uses an ad attribution identifier and browser reference, the website origin, and event timestamps. Its first-party cookies, __oppref and __obref, have requested lifetimes of 30 days and 365 days, respectively; browser restrictions or clearing cookies can shorten these periods. Turning measurement off stops new events and tells the pixel to remove these cookies. This choice is separate from partner offers and AI permission and applies to this browser.

5. Your choices and rights

• Edit your profile and notification preferences in the app.
• Manage AI and optional sharing permissions in Privacy Settings.
• Unsubscribe from promotional email using its unsubscribe link.
• Request access, correction, export, or deletion by contacting support@tryrituala.com.
• Request account deletion in Settings. Deletion and canceling a store subscription are separate: manage your Apple subscription in your App Store account.

Depending on where you live, you may also have rights to object to or restrict processing, withdraw consent, limit uses of sensitive information, receive a portable copy, or complain to a supervisory authority. California residents may request information about collection and disclosure and exercise their rights without discrimination. We do not sell personal information or share it for cross-context behavioral advertising.

We verify requests to protect your information and respond within applicable legal deadlines. Processing may be based on providing the service, your consent, legitimate interests such as security and improvement, or legal duties, depending on the purpose and applicable law.

6. Security and retention

We use authentication, access controls, and encrypted connections to protect information. No system can guarantee absolute security. We retain account information and saved content while needed to provide the service, and use logs and diagnostics for operations, security, and troubleshooting.

Account deletion is a process: access is blocked, authentication is revoked, and uploaded photos and account records are queued for cleanup. If a provider is unavailable, cleanup is retried rather than reported as complete. Limited records may remain where needed for billing, legal obligations, fraud prevention, or handling the deletion request. Provider backups and operational records may follow separate retention schedules. Contact us about a pending request or information retained by a service provider.

7. International processing

Rituala is based in the United States. Our providers may process information in the United States and other countries. Where applicable, transfers require appropriate safeguards under data-protection law. Contact us for information about the safeguards relevant to your request.

8. Age requirements

Rituala is intended for adults aged 18 and over. We do not offer a service for children or a parental-consent program. If you believe a child has provided personal information, contact us so we can investigate and arrange deletion.

9. Links and policy changes

Retailers and other linked services have their own privacy practices. We may update this policy and will post the revised date here. Material changes will be communicated through an appropriate service notice; where new permission is needed, we will ask before applying the change.

10. Contact us

Rituala, Inc.
support@tryrituala.com