Last updated: 11 September 2026 · Subject to professional legal review
1. Who we are
ritual ("we", "us", "our") is a meal prep and food storage tracking service operated as a personal project. For privacy enquiries, contact us at the email address provided in the app or on our website.
2. What data we collect
We collect only what is necessary to provide the service:
- Account data: your email address and display name, provided when you sign up.
- Household data: food items, batch quantities, expiry dates, storage locations, photos, nutrition information, and consumption logs that you and your household members enter.
- Device data: FCM push notification tokens (to deliver alerts to your device). We do not collect device identifiers beyond what Firebase requires.
- Usage data: basic Firebase Analytics events (screen views, feature usage) to improve the app. No advertising profiles are built.
3. How we use your data
- To provide and operate the ritual service
- To send push notifications you have opted into
- To process subscription payments via Stripe (payment data is handled by Stripe and never stored by us)
- To improve the service through aggregate, anonymised usage analytics
4. Data sharing
We do not sell your personal data. We share data only with the following sub-processors: Google Firebase (database, authentication, cloud functions, analytics — hosted in Asia Southeast region), Stripe (payment processing). Both are bound by their own privacy policies and data processing agreements.
5. Household sharing
When you join a household, other members of that household can see the food items, logs, and activity you add. The household admin can remove members. Choose who you share your invite code with carefully.
6. Data retention
Your data is retained for as long as your account is active. You can delete your account at any time from Manage → Account, which permanently removes all your personal data and household contributions within 30 days.
Households where no member has logged in for 2 years are considered dormant. We will send a warning email 30 days before deletion. If no member logs in within that period, the household and all associated data will be permanently deleted. You can prevent this at any time by logging in.
7. Your rights (Singapore PDPA)
Under Singapore's Personal Data Protection Act, you have the right to access, correct, and withdraw consent for the use of your personal data. To exercise these rights, contact us directly. We will respond within 30 days.
8. Cookies and local storage
We use browser local storage to remember your selected household and app preferences. We do not use advertising cookies or third-party tracking cookies.
9. Children
ritual is not directed at children under 13. We do not knowingly collect data from children.
10. Changes to this policy
We may update this policy as the service evolves. We will notify you of material changes via the app or email.