Privacy Policy
Last Updated: August 30, 2026
Introduction
This policy covers Habit Twins, formerly Rituallly or Ritually ("the App"). It explains what we collect, where it is stored, and how you can delete it. The App is not a local-only product. Using it requires an account, and your data syncs to our servers.
Information We Collect
Account information
You create an account to use the App. We collect:
- Email address
- Username
- Display name or full name
Sign-in uses an email one-time code (OTP). Some accounts, including App Store review accounts, may sign in with a password.
App data you create
- Rituals
- Completions
- Friend relationships
- Profile information
Push notification tokens
If you enable notifications, we store an Expo push token so we can send friend and habit notifications you turn on.
Subscription entitlement
If you buy Habit Twins Pro (monthly or yearly), Apple processes the purchase. We store your subscription status (Pro and expiry) on your user profile so Pro features unlock in the App.
How We Use Your Information
We use this information to:
- Create and maintain your account
- Sync rituals, completions, friends, and profile across devices
- Send the friend and habit notifications you enable
- Unlock Habit Twins Pro features when your subscription is active
Data Storage and Security
Rituals, completions, friend relationships, profile data, and Expo push tokens sync to our backend (Supabase / cloud). A copy is also cached on your device so the App can work offline.
Uninstalling the App removes the local cache. It does not delete your account or server data. Use account deletion in Settings for that.
We use standard protections for data in transit and at rest on our backend.
In-App Purchases
Habit Twins Pro monthly and yearly subscriptions are processed by Apple. We do not receive your full payment card details. We store subscription entitlement status (Pro / expiry) on your user profile so the App can unlock Pro features.
On the older Rituallly App Store listing, the same subscription may appear as Ritually Pro.
Push Notifications
We store your Expo push token to send friend and habit related notifications that you enable. You can control notification permissions in iOS Settings.
Data Sharing and Disclosure
We do not sell personal information. We share data only when needed to run the App or when the law requires it:
- With you and people you connect with. Friends you add can see the shared rituals and related activity the App is built to show them.
- Service providers that host the App. Our cloud backend (Supabase) stores account and app data. Expo delivers push notifications. Apple processes in-app purchases.
- Legal requirements. When required by law or to protect our legal rights.
Your Rights and Choices
You can:
- View and update profile information in the App
- Control notification permissions in iOS Settings
- Delete your account in Settings. That deletes the account and associated app data from our servers: rituals, completions, friends, profile, and push tokens.
You can also email cj@rituallly.com to ask what data we hold or to request deletion.
Children's Privacy
The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child, contact us and we will delete it.
Data Retention
We keep your account and app data while your account exists, or as required by law. To delete it, use account deletion in Settings. That removes the account and associated app data (rituals, completions, friends, profile, push tokens) from our servers.
International Data Transfers
Your data is stored on our cloud backend and may be processed in the United States or other countries where our providers operate. By using the App, you understand your data may be transferred to those locations.
Changes to This Privacy Policy
We may update this privacy policy from time to time. When we do, we will post the new policy on this page and update the Last Updated date. Review this page when you want the current version.
Contact Us
Questions about this policy or our data practices:
Email: cj@rituallly.com
California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:
- The right to know what personal information is collected
- The right to know whether personal information is sold or disclosed
- The right to opt-out of the sale of personal information
- The right to deletion of personal information
- The right to non-discrimination for exercising your rights
We do not sell your personal information.
European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing