Privacy Policy

We collect what we need to run Riti for you, and not more. We don't sell your data. We don't share it with advertisers. Your household's content stays inside your household unless you publish it to a public family hub yourself.

Account information. Your name, email, phone number, and password (hashed) — needed to create and protect your account.

Household content. Guests, shagun entries, vendor bookings, expenses, RSVPs, invitations, photographs, and notes you add to your events.

Device permissions. Photos you pick from your library; camera captures when you scan invites or shagun receipts; microphone recordings when you add voice notes or use speech-to-text. We ask for each permission before we use it, and you can revoke any of them from your device settings at any time. If you turn on cloud transcription for better Tamil and other Indian languages, short audio clips are sent to our speech provider — listed below.

Partner information. For vendors and venues: business name, GST number, services offered, portfolio, payout details, and verification documents.

Usage data. Anonymous information about which screens you use, which features perform well, and which crash. We use this to improve the product.

Payment metadata. Razorpay handles cards and UPI. We see only the payment status, order ID, and amount — we never see your card number or CVV.

To make Riti work — to show your events, save your guest book across functions, send invitations, generate exports, and keep your account secure. We also use it for product analytics, to comply with the law, and to write to you about your account.

Riti Pass binds up to four people. Members of the same household can see and edit the household's events. The primary account holder can add or remove members. When a member is removed, their personal account stays; the household content stays with the household.

If you choose to publish a public family hub at ritiapp.com/family/<you>, the information you mark public will be reachable on the open internet. You can unpublish at any time. We don't publish anything for you automatically.

When you contact a partner through Riti, the partner sees the information you choose to send them — typically your name, your event, and what you're asking for. Partners can't browse the household's full guest list or ledger.

We use a small number of trusted service providers to run Riti. Each one processes the minimum data needed for its job and is bound by confidentiality:

• Supabase — database, authentication, and file storage.
• Razorpay — payments (cards, UPI, netbanking). Card and CVV data never reaches us.
• Firebase Cloud Messaging — push notifications. A device token is stored against your account so we can deliver alerts.
• Sentry — crash and error diagnostics so we can fix bugs that break your experience.
• Sarvam AI — optional cloud speech-to-text for Tamil, Hindi, and other Indian languages. Audio is only sent when you explicitly enable cloud transcription.

Data is stored on infrastructure with industry-standard encryption at rest and in transit. Passwords are hashed with bcrypt. We back up databases daily. We can't promise zero incidents, but we will tell you quickly if anything affects your account.

You can view, edit, export, or delete your household's data from inside the app. You can also write to us and ask for the same. When you delete your account, we delete the personal data associated with it within thirty days, except where we are required by law to keep certain records (invoices and tax documents, for example).

We use a small number of cookies to keep you signed in and remember preferences. We use privacy-respecting analytics that don't follow you around the internet. We don't use any tracking pixels for advertising.

Riti is for adults running family events. The events themselves may celebrate children (baby showers, name-givings, birthdays), but the app account belongs to an adult member of the household. We don't knowingly collect personal information from anyone under 18.

When we change this policy in a meaningful way, we'll show a notice inside the app and update the “Last updated” date at the top of this page.

For privacy concerns, data-access or deletion requests, and any questions about this policy, write to us at legal@ritiapp.com. For everything else — accounts, payments, partner queries — our support page has the right address.