Политика конфиденциальности.

Ritual построен вокруг единого акта практики. Его позиция о конфиденциальности следует тому же принципу: собирать как можно меньше, показывать то, что собираем, и никогда не продавать ваши данные.

Что мы собираем

Ritual не требует учётной записи и может использоваться локально. Практика происходит в вашем браузере; единственная опциональная передача данных — это 6away Engine Contribution, описанный в этой политике, и вы можете отключить его в любой момент.

• Данные практики (серия, длительность, намерение, последняя сессия) хранятся локально в вашем браузере и синхронизируются с вашей учётной записью, если вы вошли в неё. В остальном они не передаются — за исключением опционального Вклада в 6away Engine, описанного ниже.
• Образцы Локального поля вычисляются в вашем браузере из crypto.getRandomValues(). Сырые образцы никогда не передаются.
• Логи сервера. Наш хостинг-провайдер может записывать стандартные метаданные запроса (IP, user agent, отметка времени) ради безопасности и надёжности. Мы не используем эти данные для отслеживания.

Вклад в 6away Engine

Ritual может передавать анонимные структурированные наблюдения из ваших завершённых сессий, чтобы помочь улучшить движок 6away Engine. Это опционально и отключено по умолчанию; вы можете включить это в любой момент в Настройках, и Ritual полностью работает в любом случае.

• Отправляются только структурированные сводки сессии — длительность, намерение, глубина и устойчивость сессии, прерывания и (когда включён Body Signal) производные сводные значения частоты сердечных сокращений и HRV.
• Никогда никакой дневник, размышление, расшифровка или произвольный текст — Ritual их не запрашивает, и ничего из этого не отправляется.
• Никогда сырые данные сенсоров: видео с камеры и сырые интервалы между сердечными сокращениями (RR) остаются на вашем устройстве; его покидают только производные сводки.
• Никакие данные не передаются между рабочими пространствами или между учётными записями.
• При отключённом вкладе ничего из ваших сессий не отправляется — Ritual остаётся полностью локальным.

Что мы не собираем

• Никакой аналитики вашей индивидуальной практики.
• Никаких сторонних рекламных трекеров.
• Никакого доступа к микрофону. Камера и Bluetooth-датчик пульса включаются только по вашему явному согласию и по умолчанию выключены.
• Никаких медицинских или диагностических заявлений. Body Signal носит исключительно наблюдательный характер, а Локальное поле — не измерение вас.

Файлы cookie

Ritual не устанавливает отслеживающие cookie. Функциональное хранилище браузера (например, localStorage) может использоваться, чтобы запомнить настройки для следующей сессии.

Передача

Мы не продаём и не сдаём в аренду вашу информацию. Единственное, что мы передаём, — это опциональный анонимный 6away Engine Contribution, описанный в этой политике, и только пока он у вас включён. Если правоохранительные органы делают законный запрос, мы отвечаем как требует закон и уведомляем затронутых пользователей, где это разрешено.

Дети

Ritual не предназначен для детей до 13 лет.

Изменения

Мы можем время от времени обновлять эту политику. Существенные изменения будут отражены в дате «Последнее обновление» выше.

Контакт

Вопросы о конфиденциальности можно направлять на hello@ritual.guru.

Continuity

These sections are shown in English until they are translated. They add to the sections above: Continuity is part of your private ritual data; if you join Challenges, the information described below is shown to other eligible Challenges participants — separately from the optional 6away Engine Contribution, which joining never turns on; and the last section explains privacy requests, account deletion, and where your data is processed.

After each ritual you complete, Ritual shows you a private Continuity score out of 100. It reflects how continuously you remained in the ritual: the share of it you stayed in, less a little each time you left (switching apps or tabs, locking the screen, or the window losing focus). It does not measure attention, mental state, physiological coherence, or consciousness, and it never uses heart rate, HRV, camera, or other Body Signal data, or the Local Field.

To calculate it, Ritual counts how many times you left and how many seconds you were away. It records that you left and for how long — never where you went or what you did. These counts and the score, with its version, stay on your device: they are stored only in your browser, with that ritual, among the 500 most recent rituals it keeps. They are never sent to our servers or saved to your account, are not synced between your devices, and are removed when you clear this site's data in your browser. Continuity is never shown to anyone else, never sent with the 6away Engine Contribution, and never used in Challenges rankings.

Legal basis. If you sign in, we keep your practice history in your account to provide the sync you signed in for. Our legal basis is the performance of our agreement with you (GDPR Art. 6(1)(b)). Continuity is not part of this: it is calculated and kept only on your device.

Challenges

Challenges are optional weekly leaderboards with their own opt-in, separate from your private ritual data and from the 6away Engine Contribution. Joining Challenges never turns on the Engine Contribution.

Participants earn one point for each UTC day on which they complete a ritual of 5, 10, 15, or 30 minutes, with a separate board for each length. You can take part if you are at least 18 years old: you sign in with your 6away account, choose a display name, tick one box confirming that you are at least 18 years old, and tick a second box agreeing that your display name, points, and ranking may be visible to other eligible Challenges participants. Live rankings may not always be open; while they are closed, no one can join, no ritual starts or points are recorded, and every board you see is a demonstration.

Who can take part, and where. Challenges are for adults aged 18 or older, in every country. You confirm your age yourself when you join: we don't ask for your date of birth, an identity document, or your address, and we don't estimate your age. If the law ever requires us to close Challenges in a particular country, our server would go by the country that our hosting provider derives from your connection's IP address; our app never reads your IP address, and we don't store your country. For now, the Challenges terms you agree to are in English, whatever language the app is in. In this policy, “eligible Challenges participants” means participants who are signed in and have agreed to the current version of the Challenges terms. If you have joined, you keep your participation and points wherever you are, and you can always change your display name, withdraw, and open the Challenges terms you agreed to, whatever language the app is in.

Legal basis. We show your display name and weekly points to other eligible Challenges participants only with your consent (GDPR Art. 6(1)(a)). You can withdraw your consent at any time, with immediate effect, by withdrawing from Challenges; this doesn't affect what was shown before you withdrew.

If you join, we store:

• the display name you choose, and a simplified form of it used only to keep names unique;
• a record of your consent — the version of the consent wording you agreed to (which also shows that you confirmed being at least 18 years old), the language and version of the legal text, and when you agreed (never your country, IP address, date of birth, or address) — and when you last changed your name;
• for each ritual you begin at a Challenges length while taking part, the time it started (by our server's clock) and its length; once that ritual is completed and timed by our server, also when it ended and which ritual in your practice history it belongs to;
• for each point you earn: the ritual's length, the day and week it counts toward, the version of the points rules, when the ritual was completed, and how long it ran as measured by our server. No Continuity score or other session detail is stored with it.

These records are linked to your account so they can be counted and deleted, but your account details are never shown with them. We keep your participant record and your points until you withdraw, and a ritual start only for as long as the point it earned; boards show only the current week.

Every other ritual start is deleted — one never completed, or one whose ritual earned no point (for example, a second ritual of the same length on the same UTC day). Your own are deleted when you next begin a ritual, and all of them when you withdraw. Any such start more than 3 hours old is also deleted by a cleanup that runs about once an hour, and whenever a participant begins a ritual. This usually happens within a few hours of a start becoming unusable, but the hourly cleanup is best-effort and a run can occasionally be missed, so we can't promise an exact deadline.

What others see. Only other eligible Challenges participants can see the real weekly boards; everyone else sees only a demonstration board. For each participant with a point that week, a board shows only their display name, how many days they practised at that length that week, and their rank. Choose a display name you're comfortable with others seeing.

Never shown to anyone else: your email address, your 6away name or profile, your Continuity, your heart rate, HRV, or camera data, which days or at what times you practised, or any other detail of your sessions.

Changes to the Challenges terms. If they change in substance, you'll be asked to agree again. Until you do, you don't appear on the boards and new rituals don't earn points.

Leaving. You can change your display name or withdraw at any time from the Challenges screen. Withdrawing immediately deletes your participation (including your consent record), your points, and your ritual starts, so you leave every board. Your practice history stays in your account, and Continuity stays on your device. Deleted Challenges data can remain in our database provider's point-in-time-restore history for up to 6 hours before it is gone for good.

Demonstration boards are labelled as such and show fictional participants — not real people and not 6away users. They contain no one's data. Any placement of yours shown against one is a preview, calculated in the app from your own rituals and visible only to you.

Your requests and where your data is stored

Requests. To ask for a copy of your data, a correction, or the deletion of your Ritual data, or with any privacy question, email hello@ritual.guru. We reply only to the email address on your account and act once you confirm from that address. We never ask for an identity document, your date of birth, your address, a password, or a one-time code. To leave Challenges, you can also use Withdraw in the app at any time.

Deleting your account. Ritual has no automatic or in-app account deletion; we delete accounts by hand when you ask. Deleting your account removes your Ritual account record, your synced practice history, and all your Challenges data. It doesn't delete your 6away sign-in account or anything already sent through the optional 6away Engine Contribution — if your request covers those, we pass it to whoever operates them — or what is stored in your browser, including Continuity, which you can remove by signing out and clearing this site's data. Deleted data can remain in our database provider's point-in-time-restore history for up to 6 hours, and in any copy of the database made before the deletion until that copy is deleted.

Where your data is processed. Ritual's app servers run in the United States (Vercel, Washington, D.C. region), and the database that holds your account, synced practice history, and Challenges data is in Singapore (Neon, on Amazon Web Services). If you use Ritual with an account, your data is therefore transferred to and processed in those countries, which may be outside the country where you live.