Ritual · Legal

Privacy Policy

Last updated: September 2026

No account required

Ritual does not require you to create an account or sign in with any service. You can use the app immediately after download without providing any personal information.

Data stored on your device

All habits, streaks, completion history, schedules, and settings are stored locally on your iPhone using SwiftData. We never receive, access, or transmit this data to any server.

• Habit names and descriptions
• Completion history, streak counts, and schedules
• App preferences and settings
• Widget and reminder configuration

iCloud sync (optional)

If you enable iCloud sync in Settings, your habits are backed up and synced across your own Apple devices via Apple's CloudKit infrastructure. This sync is entirely private to your Apple ID — it goes from your device to Apple's servers to your other devices. ExploringIdeas has no access to your iCloud data at any point.

iCloud sync is disabled by default. You opt in if you want it.

Analytics and crash reporting — the honest disclosure

Ritual uses Google Firebase Analytics and Firebase Crashlytics to understand whether the app works and which features are actually used. Here is exactly what that means:

• Usage events — anonymous events with fixed, pre-declared names such as "a habit was created", "a habit was completed", "the heatmap was viewed", "a reminder was set", "a streak milestone was reached", "an export was triggered", "the paywall was shown", "a purchase completed". Where an event carries a value at all, it is a number, such as a streak length.
• Crash reports — if the app crashes, a report containing the stack trace, your device model and your iOS version is sent so we can fix the bug. Diagnostic breadcrumbs record which screen you were on and the error code of a failed operation — never what was on the screen.

These events never include your habit names, descriptions, notes, completion dates, or anything that identifies you personally. Keeping habit content out of analytics is not a promise we make casually: it is enforced in the codebase by an automated test suite that fails the build if a habit name can reach an analytics, breadcrumb, or crash-reporting call.

Collection is switched off in our own development and simulator builds and on in the App Store build you install. Firebase data is processed by Google on our behalf and is governed by Google's Firebase privacy documentation. We never sell your data.

Separately, Apple provides all App Store developers with standard privacy-safe aggregate metrics — impressions, downloads, and retention cohorts. Those contain no personally identifiable information and we cannot connect them to an individual.

Purchases

Ritual Pro — a one-time lifetime unlock, or a monthly or yearly subscription — is processed by Apple through the App Store using StoreKit 2, with RevenueCat managing purchase and entitlement status. We never see your card number, Apple ID, or billing details; Apple handles billing, receipts, and refunds. RevenueCat receives an app-generated anonymous identifier and Apple's purchase data so the app knows whether Pro is unlocked — it never receives your habits.

Notifications

Ritual uses two different kinds of notification, and it is worth separating them.

• Habit reminders are local. The reminders you set on a habit are scheduled by iOS on your own device. Their text and times never leave your phone and are never sent to us or to any push server.
• App announcements are remote, and strictly opt-in. Ritual also supports remote push notifications (for example, a note that a new version has shipped), delivered through Firebase Cloud Messaging. Your device is subscribed only if you allow notifications on the screen that says announcements are included, or turn on the "App announcements" switch in Settings — and turning that switch off stops them at any time. Allowing notifications anywhere else (for example, just for your habit reminders) never subscribes you. Announcements are the same message sent to everyone subscribed — they never contain personal content.

To make any notification deliverable, Ritual registers a device record with our own notification service at engage.puzzpics.com. That record contains: a random identifier generated by the app for this install (not your Apple ID, and not your device's advertising or vendor identifier), the app slug "ritual", your platform, your iOS version, the Ritual version, your locale and time-zone identifiers, whether you granted notification permission, your announcement opt-in choice, and — once iOS has issued one, which only happens after you allow notifications — the push token. The same service records a handful of fixed engagement events: that a session started, that an announcement was opened, and whether an in-app message was shown, tapped, or dismissed.

None of this contains habit data of any kind. There are no habit names, no notes, no completion dates, and no free text in any of it.

Advertising and tracking

There are no ads and no advertising SDKs in Ritual. We do not use the advertising identifier (IDFA), so the App Tracking Transparency prompt does not apply, and we do not track you across other companies' apps or websites.

Apple Watch and Widgets

The Apple Watch app, home screen and Lock Screen widgets, and the Control Center control read your habit data directly from your device using the same local store. No additional data leaves your device as a result of using these features.

Third-party services

Ritual relies on the following third parties, each of which processes data under its own terms:

• Google — Firebase (Analytics, Crashlytics, Cloud Messaging): anonymous usage events, crash reports, and delivery of opt-in announcement notifications. Firebase privacy
• Apple (App Store, StoreKit 2, CloudKit, APNs): purchases, optional iCloud sync, and notification delivery. Apple privacy
• RevenueCat: purchase and entitlement status for Ritual Pro. RevenueCat privacy
• Our own notification service (engage.puzzpics.com, operated by us): the device record and fixed engagement events described under Notifications.

Children

Ritual is not directed at children under 13 and we do not knowingly collect personal data from children. The app has no social features, no chat, and no user-generated content shared with others, and the data it does send (described above) is anonymous and contains no habit content.

Data retention and deletion

Your habits live on your device, so you control their retention. To delete all Ritual data, delete the app from your iPhone. If iCloud sync was enabled, delete Ritual's iCloud data from Settings › [Your Name] › iCloud › Manage Account Storage. Deleting the app also ends the device record described under Notifications, because the random install identifier it is keyed to is destroyed with the app.

Anonymous analytics and crash data are retained by Firebase for a limited period (up to 14 months for analytics) and are then deleted or aggregated under Google's retention policy.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, note the change in the app's release notes. A material increase in data collection ships only with an app update, never silently — and the App Store privacy label is updated in that same release. Continued use of Ritual after changes are posted constitutes acceptance.

Contact

Questions about privacy? Email us at kenz@kenzapps.com. We will respond within 5 business days.

Governing law

This policy is governed by the laws of the jurisdiction in which ExploringIdeas operates. Any disputes shall be resolved in the appropriate courts of that jurisdiction.