Rituality World Co Privacy Policy

Effective Date: April 9, 2026

Who We Are and Scope

Rituality World Co (“Rituality,” “we,” “us,” or “our”) is a Delaware corporation that operates myrituality.com, our mobile application, and related services (together, the “Services”).

The Services help adults discover, create, share, and participate in rituals, communities, classes, sessions, and events, including AI-guided recommendations and a marketplace where independent hosts and guides offer paid and free experiences.

This Privacy Policy explains how we collect, use, share, retain, and protect personal information when you use the Services. It also describes your choices and rights. Rituality World Co is the controller of the personal information described here.

The Services are intended for users in the United States.

Rituality World Co
1927 Harbor Blvd. #305
Costa Mesa, CA 92627
[email protected] | myrituality.com/privacy

This Privacy Policy does not cover third-party services linked from or embedded in the Services, such as Stripe, YouTube, Google, Vimeo, or calendar providers, which are governed by their own privacy policies. If you do not agree with this Privacy Policy, please do not use the Services.

Information We Collect

A. Information You Provide

• Account information. Name, username, email address, phone number (used for one-time-password verification), and password.
• Profile information. Bio, profile image, interests, practices, languages, cultural or community descriptors, and anything else you add to your profile.
• Location you enter. City, state, or region you type during registration or in your profile.
• Device location (optional). Certain features, particularly on mobile, may request permission to access your device’s location. If you grant permission, we may collect approximate or precise device location to enable features such as finding nearby events or sharing your location with other users. You can revoke permission at any time through your device or browser settings.
• Content you submit. Rituals, posts, comments, uploads, images, videos, community content, event listings, and messages you send through the Services.
• AI interaction content. Prompts, check-ins, reflections, and other information you share when using our AI-powered features.
• Booking and transaction information. Subscription details, purchases, bookings, and related records. Payment card data is collected and processed directly by Stripe and is not stored on our servers.
• Support and communications. Questions, support tickets, emails, survey responses, and feedback.
• Calendar or integration data. If you connect a calendar service such as Google Calendar, Microsoft, or Apple Calendar for booking or scheduling.

Depending on how you use the Services, the information you provide may include details about your wellness, emotional state, practices, beliefs, or community participation. Please share only the information you are comfortable with us processing.

B. Information Collected Automatically

• Device and browser data. IP address, device identifiers, browser type, operating system, app version, language settings, and approximate location inferred from your IP address.
• Usage and behavioral data. Pages viewed, features used, time spent, clicks, referral URLs, ritual views, ritual completion rates, and engagement patterns. In-app behavioral analytics cannot currently be disabled while using the Services.
• Log and diagnostic data. Crash reports, performance data, error logs, and troubleshooting records.
• Cookies and similar technologies. Identifiers and activity information collected through cookies, SDKs, local storage, or similar technologies.

C. Information From Other Sources

• Payment processors. Stripe provides transaction confirmations, payout status, refund and dispute data, and limited payment identifiers.
• AI service providers. Third-party AI providers, which may include Google Gemini, OpenAI, Anthropic, or others, accessed through AI routing services such as OpenRouter, process inputs and outputs for our AI features and support safety and quality evaluation.
• Embedded content providers. YouTube, Vimeo, and similar platforms may provide metadata when you interact with embedded content.
• Other users. A host, organizer, or other user may invite you, tag you, message you, or include you in a community or event.
• Service providers. Vendors that help us operate, secure, analyze, or improve the Services.

How We Use Your Information

We use personal information to:

• provide the Services, including accounts, profiles, rituals, messaging, bookings, subscriptions, communities, events, and marketplace features;
• personalize your experience, including recommending rituals, communities, hosts, and content based on your activity, preferences, and the location you provide or permit us to access;
• operate AI-powered tools and recommendations;
• process payments, payouts, refunds, chargebacks, and subscriptions through Stripe;
• moderate content, investigate reports, enforce our Terms, and protect the safety and integrity of the Services;
• detect and prevent fraud, abuse, harassment, and unauthorized access;
• communicate with you about your account, bookings, support requests, safety issues, transactions, and policy updates;
• send marketing or promotional communications where you have opted in;
• analyze usage, improve features, debug issues, and develop new functionality;
• create aggregated or de-identified insights and analytics; and
• comply with legal obligations and protect our rights, users, hosts, and the public.

AI Features and Automated Recommendations

How the AI Features Work

When you use Rituality’s AI tools (the “Rituality AI Guide”), your messages are processed by third-party AI providers to generate responses and recommendations. We currently use third-party AI providers, which may include Google Gemini, OpenAI, Anthropic, or others, accessed through AI routing services such as OpenRouter. Your AI conversation history is stored and associated with your account so you can continue conversations and receive contextual responses.

Product Improvement

We may use AI interaction data in anonymized or aggregated form to improve the AI features and the Services. Once data has been anonymized, it cannot be linked back to you. We do not use creator-submitted ritual content to train AI models without separate written permission. We may also use AI to generate images for rituals, events, or related content based on user inputs.

Safety and Crisis Language

Our AI tools are designed to detect language that may indicate a crisis, distress, or risk of self-harm. If such language is detected, the AI may redirect you to crisis resources such as the 988 Suicide & Crisis Lifeline, 911, or other support services. Crisis-triggered conversations may be flagged and logged internally for safety and quality purposes. The AI prohibits discussion of self-harm methods. We do not use crisis-flagged data for marketing or advertising.

Automated Recommendations

The AI and other features may recommend rituals, communities, hosts, and content based on your input, behavioral data, and profile information. These recommendations are informational and do not produce legal effects or similarly significant effects on you.

What the AI Is Not

Rituality’s AI features are not therapy, counseling, medical care, psychological diagnosis, legal advice, crisis response services, or a religious authority. They are not a substitute for licensed professional help or emergency services.

Deleting AI History

You can delete your AI conversation history through your account settings. Deletion removes your conversations from the active system. Anonymized or aggregated data derived before deletion may be retained. Limited copies may persist in backups or safety logs for a period after deletion.

Community, Messaging, Events, and User Visibility

The Services are built around community. Some of your information is visible to other users depending on the feature, your settings, and your activity.

• Profile. Your username, profile photo, bio, rituals, communities, and follower relationships may be visible to other users.
• Content. Rituals, listings, events, and community posts you create may be visible to other users.
• Messages. Messages are visible to the sender and recipient(s). We may review messages for safety and moderation.
• Events and bookings. Hosts and organizers receive information needed to manage bookings, attendance, communications, refunds, disputes, and safety.
• Followers. Follower and following relationships may be visible through community features.
• Location sharing. Certain features may allow you to share your location with other users. Location sharing is always optional and can be disabled through your account or device settings.

We may review user content, messages, and community activity when necessary for moderation, safety, legal compliance, or enforcement of our Terms.

Location Information

We collect location information in two ways:

• Location you enter. City, state, or region you provide at signup or in your profile. This is used to personalize your experience and show relevant local events and communities.
• Device location (optional). Certain features, particularly on mobile, may request permission to access your device’s location through your browser or mobile operating system. If you grant permission, we may collect approximate or precise device location to enable features such as finding nearby events or sharing your location with other users. You can revoke permission at any time through your device or browser settings. Features that depend on device location may not function fully if you decline or revoke permission.

We do not continuously track your background location. We do not sell or share your precise location data with third parties for their own advertising purposes.

Payments and Financial Information

Payments and payouts are processed by Stripe and Stripe Connect. Rituality does not store your full payment card number on its own servers. We receive transaction confirmations, payout records, subscription status, refund and chargeback data, and limited billing identifiers from Stripe.

Hosts and guides are independent contractors who set their own pricing and refund policies and handle their own tax obligations. Stripe may issue tax reporting forms, such as IRS Form 1099-K, to eligible payees as required by law. For more information about how Stripe handles data, please review Stripe’s privacy policy.

We may share relevant transaction data and related communications with Stripe, hosts, and other involved parties to process payouts, refunds, chargebacks, disputes, fraud prevention, and support requests.

YouTube, Vimeo, and Third-Party Content

The Services allow users to embed and view third-party content, including YouTube and Vimeo videos. We use YouTube API Services in connection with this feature. We may store related metadata and transcripts to support search, recommendations, and AI features.

• We do not download, copy, or host YouTube video files.
• We do not claim ownership over third-party video content.
• We comply with YouTube API Terms of Service and honor takedown and removal requests.
• Third-party providers may collect information directly when you interact with embedded content, under their own terms and privacy policies.

By viewing or interacting with YouTube content through the Services, you agree to be bound by YouTube’s Terms of Service and Google’s Privacy Policy.

Cookies, Analytics, and Marketing

We use cookies, SDKs, and similar technologies to operate the Services, keep you signed in, remember preferences, measure traffic and engagement, monitor performance, debug issues, and improve features. Our analytics tools may include Google Analytics, Firebase, and related services.

In-app behavioral analytics, such as page views, clicks, and ritual completion data, cannot currently be disabled while using the Services. You can manage cookies through your browser settings, but disabling certain cookies may affect functionality.

We send marketing emails only to users who have opted in. You can opt out at any time by clicking “unsubscribe” in any marketing email or updating your account settings. Opting out of marketing does not affect service-related communications.

We do not currently use third-party advertising cookies, retargeting pixels, or cross-context behavioral tracking on the Services.

Our Services do not currently respond to browser “Do Not Track” signals. However, we process Global Privacy Control (“GPC”) signals as opt-out requests where required by applicable law. Some third-party analytics or embedded content providers may collect information about your online activities over time and across different online services when you use the Services or interact with embedded content, subject to their own terms and privacy policies.

How We Share Your Information

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising as those terms are defined under California law.

We share personal information in the following circumstances:

• With other users. Profile information, community participation, event attendance, follower relationships, and content you post may be visible to other users as described in Section 5. Messages are shared with recipients.
• With hosts and guides. When you book, register for, or participate in a host’s offering, we share relevant information, such as your username, contact details, and booking information, so the host can manage the event, communicate with you, and handle refunds or disputes.
• With service providers. We share information with vendors that help us operate the Services, including providers of hosting and infrastructure, payment processing (Stripe), AI functionality (which may include Google Gemini, OpenAI, Anthropic, or others, accessed through AI routing services such as OpenRouter), analytics (Google Analytics, Firebase), email delivery (MailerLite), error tracking, safety and moderation, and calendar integrations. These providers process information on our behalf or under their own terms.
• With YouTube and Google. When YouTube content is embedded on the Services, Google may receive information about your interaction with that content.
• For legal reasons. We may disclose information if required by law, regulation, or legal process, or to protect the rights, safety, or property of Rituality, our users, or others.
• In business transfers. If Rituality is involved in a merger, acquisition, sale of assets, or bankruptcy, personal information may be transferred as part of that transaction. We will notify you of any such change.
• With your consent. We may share information for other purposes with your direction or consent.

Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention varies by data type:

Data Category	Retention Criteria
Account and profile	While your account is active; deleted within a reasonable period after account deletion, except as required by law.
AI conversation history	While your account is active or until you delete it; after deletion, retained only as long as needed for safety review, legal compliance, and backup recovery, then deleted or de-identified.
Crisis-flagged logs	At least 6 years, or longer where required for safety review, incident documentation, legal compliance, and backup recovery.
Messages and community content	While your account is active; may persist for recipients, moderation, or legal purposes.
User-generated content	While your account is active or until you delete it; may be retained in anonymized form.
Payment and transaction records	At least 6 years, or longer where required for tax, accounting, chargeback/dispute resolution, fraud prevention, or legal-defense purposes.
Behavioral analytics	Retained in identifiable form while your account is active and thereafter only for a limited period as reasonably necessary for analytics, debugging, security, fraud prevention, and related operational purposes; retained indefinitely in aggregated form.
Cookies and device data	Varies by cookie type and provider.
Backup copies	May persist for a limited period after deletion from active systems.

When you delete your account, we will delete or anonymize your personal information within the timeframes above, except where retention is required or permitted by law. Some information you shared with others, such as messages or community posts, may remain visible to those users after deletion.

Your Choices and Rights

• Account settings. Update your profile, manage notification preferences, and control visibility settings through your account.
• AI chat history. Delete your AI conversation history through your account settings. Anonymized data and limited safety or backup copies may persist.
• Account deletion. Request deletion by contacting us at [email protected] or using any account-deletion feature in the Services.
• Data export. We do not currently offer a self-service data export tool. If applicable law gives you portability rights, you may submit a request and we will review it as required by law.
• Marketing opt-out. Opt out via the “unsubscribe” link in any marketing email or your account settings.
• Location permissions. Disable device location permissions through your device or browser settings at any time.
• Cookies. Manage cookies through your browser settings.
• Rights requests. Email [email protected] or visit myrituality.com/privacy. We may verify your identity before processing your request.

California Privacy Notice

This section applies to California residents and supplements the rest of this Privacy Policy.

Categories Collected

Category	Examples
Identifiers	Name, email, phone, username, IP address.
Customer records	Name, phone number, billing contact details, and transaction-related records.
Commercial information	Transaction history, subscriptions, bookings.
Internet or network activity	Pages visited, clicks, ritual views, AI chat usage.
Geolocation	User-entered location (city/region), approximate location inferred from IP, and precise device location if permission is granted.
Audio, electronic, or visual information	Uploaded photos, videos, profile images.
Inferences	Ritual preferences, behavioral patterns, recommendations.
Sensitive personal information	Precise device location if permission is granted; information revealing religious or philosophical beliefs; wellness or distress-related information; and certain message or AI-interaction content.

Disclosures to Service Providers and Contractors

In the preceding 12 months, we may have disclosed the following categories of personal information to service providers and contractors for business purposes: identifiers, customer records, commercial information, internet or network activity, geolocation information, audio, electronic, or visual information, inferences, and, depending on how you use the Services, sensitive personal information. We disclose this information to providers of hosting and infrastructure, payment processing (Stripe), AI functionality (which may include Google Gemini, OpenAI, Anthropic, or others, accessed through AI routing services such as OpenRouter), analytics (Google Analytics, Firebase), email delivery (MailerLite), error tracking, and safety and moderation services.

We use sensitive personal information as reasonably necessary to provide the Services, maintain safety and security, process transactions, comply with law, facilitate user-selected features such as optional location sharing, and work with service providers and contractors that help us operate the Services. We do not use sensitive personal information for advertising or cross-context behavioral advertising.

Your California Rights

California residents may have the following rights, subject to applicable exceptions:

• Right to know/access. Request the categories and specific pieces of personal information we have collected.
• Right to delete. Request deletion, subject to certain exceptions.
• Right to correct. Request correction of inaccurate information.
• Right to non-discrimination. We will not discriminate against you for exercising your rights.

We do not sell personal information and do not share personal information for cross-context behavioral advertising as those terms are defined under California law.

Submitting a Request

Email [email protected] or visit myrituality.com/privacy. We will verify your identity and respond within 45 days, extendable by an additional 45 days with notice. You may designate an authorized agent to make a request on your behalf where permitted by law.

International Transfers

We are based in the United States and process personal information in the United States. We may also use service providers that process personal information in other countries. Those countries may have data protection laws that differ from the laws where you live. When we transfer personal information to service providers, we use reasonable contractual and organizational measures designed to protect it.

Children and Age Restrictions

The Services are intended for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use the Services.

If we learn that we have collected personal information from a person under 18, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a minor, please contact us at [email protected].

Security

We use reasonable administrative, technical, and organizational safeguards to help protect personal information, such as encryption in transit and access controls where appropriate. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Google API Services — Limited Use

Rituality’s use and transfer to any other app of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version, update the effective date as applicable, and provide additional notice where required by law.

Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our data practices, contact us at:

Rituality World Co
1927 Harbor Blvd. #305
Costa Mesa, CA 92627
Email: [email protected]
Web: myrituality.com/privacy