Datenschutzerklärung.

Ritual ist um eine einzige Handlung der Praxis herum gebaut. Seine Datenschutzhaltung folgt demselben Prinzip: so wenig wie möglich erheben, das Erhobene offenlegen und deine Daten niemals verkaufen.

Was wir erheben

Ritual erfordert kein Konto und kann lokal genutzt werden. Die Praxis findet in deinem Browser statt; die einzige optionale Weitergabe ist die in dieser Erklärung beschriebene 6away Engine Contribution, die du jederzeit ausschalten kannst.

• Praxisdaten (Serie, Dauer, Absicht, letzte Sitzung) werden lokal in deinem Browser gespeichert und mit deinem Konto synchronisiert, wenn du dich anmeldest. Sie werden ansonsten nicht weitergegeben — mit Ausnahme der optionalen 6away Engine Contribution, die unten beschrieben wird.
• Lokales-Feld-Proben werden in deinem Browser aus crypto.getRandomValues() berechnet. Rohproben werden niemals übertragen.
• Server-Logs. Unser Hosting-Anbieter kann Standard-Anfrage-Metadaten (IP, User Agent, Zeitstempel) aus Sicherheits- und Zuverlässigkeitsgründen aufzeichnen. Wir verwenden diese Daten nicht für Tracking.

6away Engine Contribution

Ritual kann anonyme, strukturierte Beobachtungen aus deinen abgeschlossenen Sitzungen beitragen, um die 6away Engine zu verbessern. Das ist optional und standardmäßig ausgeschaltet; du kannst es jederzeit in den Einstellungen einschalten, und Ritual funktioniert so oder so vollständig.

• Es werden nur strukturierte Sitzungszusammenfassungen gesendet — Dauer, Absicht, Sitzungstiefe und -stabilität, Unterbrechungen und (wenn Body Signal aktiv ist) abgeleitete Zusammenfassungswerte zu Herzfrequenz und HRV.
• Niemals Journal, Reflexion, Transkript oder Freitext — Ritual fragt danach nicht, und nichts davon wird gesendet.
• Niemals Rohsensordaten: Kameravideo und rohe Herzschlag-Intervalle (RR) bleiben auf deinem Gerät; nur die abgeleiteten Zusammenfassungen verlassen es.
• Es werden keine Daten über Arbeitsbereiche oder Konten hinweg geteilt.
• Mit ausgeschalteter Contribution wird nichts aus deinen Sitzungen gesendet — Ritual bleibt vollständig nur lokal.

Was wir nicht erheben

• Keine Analyse deiner individuellen Praxis.
• Keine Drittanbieter-Werbe-Tracker.
• Kein Mikrofonzugriff. Kamera und Bluetooth-Herzsensor sind opt-in und standardmäßig aus.
• Keine medizinischen oder diagnostischen Aussagen. Body Signal ist rein beobachtend, und das Lokale Feld ist keine Messung von dir.

Cookies

Ritual setzt keine Tracking-Cookies. Funktionale Speicherung in deinem Browser (z. B. localStorage) kann verwendet werden, um Einstellungen für deine nächste Sitzung zu merken.

Weitergabe

Wir verkaufen oder vermieten deine Daten nicht. Das Einzige, was wir teilen, ist die in dieser Erklärung beschriebene optionale, anonyme 6away Engine Contribution — und nur, solange du sie eingeschaltet hast. Wenn eine Strafverfolgungsbehörde eine rechtmäßige Anfrage stellt, antworten wir wie gesetzlich gefordert und benachrichtigen betroffene Nutzer, soweit erlaubt.

Kinder

Ritual richtet sich nicht an Kinder unter 13 Jahren.

Änderungen

Wir können diese Erklärung von Zeit zu Zeit aktualisieren. Wesentliche Änderungen werden im Datum „Zuletzt aktualisiert“ oben widergespiegelt.

Kontakt

Datenschutzfragen können an hello@ritual.guru gesendet werden.

Continuity

These sections are shown in English until they are translated. They add to the sections above: Continuity is part of your private ritual data; if you join Challenges, the information described below is shown to other eligible Challenges participants — separately from the optional 6away Engine Contribution, which joining never turns on; and the last section explains privacy requests, account deletion, and where your data is processed.

After each ritual you complete, Ritual shows you a private Continuity score out of 100. It reflects how continuously you remained in the ritual: the share of it you stayed in, less a little each time you left (switching apps or tabs, locking the screen, or the window losing focus). It does not measure attention, mental state, physiological coherence, or consciousness, and it never uses heart rate, HRV, camera, or other Body Signal data, or the Local Field.

To calculate it, Ritual counts how many times you left and how many seconds you were away. It records that you left and for how long — never where you went or what you did. These counts and the score, with its version, stay on your device: they are stored only in your browser, with that ritual, among the 500 most recent rituals it keeps. They are never sent to our servers or saved to your account, are not synced between your devices, and are removed when you clear this site's data in your browser. Continuity is never shown to anyone else, never sent with the 6away Engine Contribution, and never used in Challenges rankings.

Legal basis. If you sign in, we keep your practice history in your account to provide the sync you signed in for. Our legal basis is the performance of our agreement with you (GDPR Art. 6(1)(b)). Continuity is not part of this: it is calculated and kept only on your device.

Challenges

Challenges are optional weekly leaderboards with their own opt-in, separate from your private ritual data and from the 6away Engine Contribution. Joining Challenges never turns on the Engine Contribution.

Participants earn one point for each UTC day on which they complete a ritual of 5, 10, 15, or 30 minutes, with a separate board for each length. You can take part if you are at least 18 years old: you sign in with your 6away account, choose a display name, tick one box confirming that you are at least 18 years old, and tick a second box agreeing that your display name, points, and ranking may be visible to other eligible Challenges participants. Live rankings may not always be open; while they are closed, no one can join, no ritual starts or points are recorded, and every board you see is a demonstration.

Who can take part, and where. Challenges are for adults aged 18 or older, in every country. You confirm your age yourself when you join: we don't ask for your date of birth, an identity document, or your address, and we don't estimate your age. If the law ever requires us to close Challenges in a particular country, our server would go by the country that our hosting provider derives from your connection's IP address; our app never reads your IP address, and we don't store your country. For now, the Challenges terms you agree to are in English, whatever language the app is in. In this policy, “eligible Challenges participants” means participants who are signed in and have agreed to the current version of the Challenges terms. If you have joined, you keep your participation and points wherever you are, and you can always change your display name, withdraw, and open the Challenges terms you agreed to, whatever language the app is in.

Legal basis. We show your display name and weekly points to other eligible Challenges participants only with your consent (GDPR Art. 6(1)(a)). You can withdraw your consent at any time, with immediate effect, by withdrawing from Challenges; this doesn't affect what was shown before you withdrew.

If you join, we store:

• the display name you choose, and a simplified form of it used only to keep names unique;
• a record of your consent — the version of the consent wording you agreed to (which also shows that you confirmed being at least 18 years old), the language and version of the legal text, and when you agreed (never your country, IP address, date of birth, or address) — and when you last changed your name;
• for each ritual you begin at a Challenges length while taking part, the time it started (by our server's clock) and its length; once that ritual is completed and timed by our server, also when it ended and which ritual in your practice history it belongs to;
• for each point you earn: the ritual's length, the day and week it counts toward, the version of the points rules, when the ritual was completed, and how long it ran as measured by our server. No Continuity score or other session detail is stored with it.

These records are linked to your account so they can be counted and deleted, but your account details are never shown with them. We keep your participant record and your points until you withdraw, and a ritual start only for as long as the point it earned; boards show only the current week.

Every other ritual start is deleted — one never completed, or one whose ritual earned no point (for example, a second ritual of the same length on the same UTC day). Your own are deleted when you next begin a ritual, and all of them when you withdraw. Any such start more than 3 hours old is also deleted by a cleanup that runs about once an hour, and whenever a participant begins a ritual. This usually happens within a few hours of a start becoming unusable, but the hourly cleanup is best-effort and a run can occasionally be missed, so we can't promise an exact deadline.

What others see. Only other eligible Challenges participants can see the real weekly boards; everyone else sees only a demonstration board. For each participant with a point that week, a board shows only their display name, how many days they practised at that length that week, and their rank. Choose a display name you're comfortable with others seeing.

Never shown to anyone else: your email address, your 6away name or profile, your Continuity, your heart rate, HRV, or camera data, which days or at what times you practised, or any other detail of your sessions.

Changes to the Challenges terms. If they change in substance, you'll be asked to agree again. Until you do, you don't appear on the boards and new rituals don't earn points.

Leaving. You can change your display name or withdraw at any time from the Challenges screen. Withdrawing immediately deletes your participation (including your consent record), your points, and your ritual starts, so you leave every board. Your practice history stays in your account, and Continuity stays on your device. Deleted Challenges data can remain in our database provider's point-in-time-restore history for up to 6 hours before it is gone for good.

Demonstration boards are labelled as such and show fictional participants — not real people and not 6away users. They contain no one's data. Any placement of yours shown against one is a preview, calculated in the app from your own rituals and visible only to you.

Your requests and where your data is stored

Requests. To ask for a copy of your data, a correction, or the deletion of your Ritual data, or with any privacy question, email hello@ritual.guru. We reply only to the email address on your account and act once you confirm from that address. We never ask for an identity document, your date of birth, your address, a password, or a one-time code. To leave Challenges, you can also use Withdraw in the app at any time.

Deleting your account. Ritual has no automatic or in-app account deletion; we delete accounts by hand when you ask. Deleting your account removes your Ritual account record, your synced practice history, and all your Challenges data. It doesn't delete your 6away sign-in account or anything already sent through the optional 6away Engine Contribution — if your request covers those, we pass it to whoever operates them — or what is stored in your browser, including Continuity, which you can remove by signing out and clearing this site's data. Deleted data can remain in our database provider's point-in-time-restore history for up to 6 hours, and in any copy of the database made before the deletion until that copy is deleted.

Where your data is processed. Ritual's app servers run in the United States (Vercel, Washington, D.C. region), and the database that holds your account, synced practice history, and Challenges data is in Singapore (Neon, on Amazon Web Services). If you use Ritual with an account, your data is therefore transferred to and processed in those countries, which may be outside the country where you live.