Daily Rituals is a journal that lives on your phone. There are no accounts, and we never see what you write. This policy explains the few things that do leave your device and why.
Who we are
Daily Rituals is made by Saquib Ahmed, an independent developer based in India ("we"). We are responsible for the data described here (the "data controller" under the GDPR, and the "data fiduciary" under India's Digital Personal Data Protection Act).
What stays on your device
Your journal entries, moods, decorated pages, streak, candles, Embers, cosmetics and settings are stored only in the app's private storage on your phone. We have no server that holds them and no way to read them.
What leaves your device, and why
| What | Who receives it | Why |
|---|---|---|
| Purchase records (which plan or Ember pack you bought, when, and the store's purchase token), plus a random app user ID created by the app | RevenueCat, our payment processor, and Google Play | To confirm your Plus subscription, deliver Ember packs, restore purchases, and take back Embers if a purchase is refunded |
| A random installation ID, the app version and the platform | Expo (our update service) | To deliver app updates |
| Your IP address, as with any internet request | Cloudflare, which hosts the sky videos | To download the sky videos you choose |
None of these include your name, email, contacts, location or anything you wrote in your journal. We do not use analytics, advertising IDs, crash reporting or tracking of any kind, and we never sell or share your data for advertising.
Why we're allowed to use it
- Purchase records and the app user ID: needed to provide what you bought (performance of a contract).
- Installation ID and app version: our legitimate interest in keeping the app working and up to date.
- IP address for sky videos: our legitimate interest in delivering the video you asked for.
Where it's processed
RevenueCat, Expo and Cloudflare are based in the United States and may process this data there or in other countries. Each protects it under its own privacy terms, including the European Commission's standard contractual clauses where those apply.
How long it's kept
Purchase records are kept as described under "Deleting your data". Expo and Cloudflare keep the installation ID and IP address only as long as they need to deliver updates and videos, under their own retention policies. We don't keep a copy of any of it.
Backups
- Google backup. If Android backup is on for your phone, Android copies your journal and your subscription status to your Google account so they can come back on a new or reinstalled phone. Google handles and encrypts this under its own privacy policy; we can't access it. You can turn it off in your phone's Settings → Google → Backup.
- Backup files you export. "Back up my journal" creates a file that you choose where to send. It is not encrypted, so keep it somewhere you trust.
Reminders
If you turn on the daily reminder, the app schedules it on your phone. Nothing is sent to us.
Deleting your data
- In the app: You → Reset all data deletes your journal and settings from the phone.
- Uninstalling removes the app's data from the phone. A copy may remain in your Google backup until Google replaces or removes it; you can delete it in your Google account's backup settings.
- Purchase records are kept by Google Play and RevenueCat for as long as they need them for billing and legal reasons. To ask RevenueCat to delete your purchase records, email us with your Google Play order number (see "Your rights") and we will pass the request on.
Your rights
Depending on where you live, you can ask us to tell you what data about you we hold, to correct it, to delete it, or to stop using it. Because we hold nothing ourselves, we'll pass the request to RevenueCat. Email the address below with the Google Play order number from your purchase receipt (it starts with "GPA."), so the right records can be found. We'll reply within 30 days.
If you're unhappy with how we handle your data, you can complain to us at the address below, and you can also complain to your local data protection authority (for example, the Data Protection Board of India, or your national regulator in the EU or UK).
Children
Daily Rituals is meant for adults (18 and over). If you're under 18, use it only with a parent's or guardian's permission, and ask them before buying anything; Google Play's family settings can require their approval. We don't knowingly collect data from children. If you believe a child's purchase records reached RevenueCat without a parent's consent, email us and we'll have them deleted.
Changes
If this policy changes, we'll update the date above. Significant changes will also be noted in the app's release notes.