Privacy Policy

Who we are

Ritualist (“we,” “us”) operates the website at ritualistlabs.com and The Ritual, our scalp-tracking companion app. This policy explains what information we collect across both, why we collect it, and what choices you have.

Information we collect

• Waitlist and contact info. If you sign up for updates, we collect your email address and send it to our email provider (SendGrid) to send you updates about Ritualist.
• Account info. If you create an account on The Ritual, we collect your name, email address, and password (stored securely, we never see it in plain text), or, if you sign in with Google, your name, email address, and profile photo as provided by Google.
• Routine and symptom logs. The core of The Ritual is self-tracking: which products you use, when, and how your scalp feels (itch, flaking, redness, dryness, and similar ratings you enter yourself). This is information you choose to log.
• Progress photos. If you choose to upload photos to track visible changes over time, those photos are stored privately and are never shared or made public. Uploading photos is entirely optional.
• Coach conversations. If you use the AI Coach, your messages and the data needed to answer them (your logged routine and symptom history) are sent to our AI provider (Anthropic) to generate a response. We do not use your conversations to train any AI model.
• Usage data. We use basic, privacy-respecting website analytics (Vercel Analytics) to understand which pages are visited. This does not identify you personally.
• Anonymous session data. Before you create an account, The Ritual can be used anonymously, identified only by a random ID stored in your browser. If you later create an account, that anonymous activity is linked to your new account so you don't lose it.

How we use this information

We use the information above only to:

• Run and improve The Ritual and the Ritualist website
• Show you your own logged history, scores, and trends
• Generate Coach responses grounded in your own data
• Send you updates you've asked for
• Understand, in aggregate, how the product is used

We do not sell your personal information, and we do not use your health-related logs for advertising.

Who we share it with

We use a small number of service providers to run Ritualist, and share only what each one needs to do its job:

• Supabase — our database, authentication, and file storage provider
• Google — if you choose to sign in with Google
• Anthropic — powers the AI Coach and Advisor conversations
• OpenAI — powers search over our internal knowledge base, used to ground AI responses
• SendGrid — sends waitlist and account-related emails
• Vercel — hosts the site and app, and provides basic analytics

We do not share your information with any other third party, and we do not sell it to anyone, including for advertising.

Your choices

• You can use The Ritual anonymously without creating an account
• You can delete any progress photo, log, or routine item at any time from within the app
• You can ask us to delete your account and all associated data by emailing us (see below)
• You can unsubscribe from emails using the link in any email we send

Data retention

We keep your account and logged data for as long as your account is active, so your history stays available to you. If you delete your account, we delete your personal data within a reasonable time, except where we're required to keep limited records for legal or accounting reasons.

Children's privacy

Ritualist and The Ritual are not directed at children, and we don't knowingly collect information from anyone under 16.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page. Continued use of Ritualist after a change means you accept the updated policy.

Contact us

Questions about this policy or your data? Email us at hello@ritualistlabs.com.