Privacy Policy
Ridha is a privacy-first wellbeing app that helps you check in on how you feel and reflect on your patterns. We handle wellbeing data, which can be sensitive, so we collect only what we need, keep personal and anonymous data separate, and never sell your data or share identifiable wellbeing data with employers.
Data we collect
- Account: first name, last name, personal email, country, preferred language, date of birth / 18+ confirmation, account status, and login & verification records.
- Wellbeing: your daily overall mood, My Life drivers, My Work drivers (only if you connect a workplace), check-in history, and the personal insights derived from them.
- Workplace (optional): if you verify a work email, we store it masked and as a one-way hash only — the full work email is never stored — along with the email domain, membership status, role, and verification dates.
- Support & waitlist: messages and email addresses you submit to us.
- Consents: a record of the permissions you grant (Terms, Privacy, AI guidance, workplace, notifications).
- Subscription status: your plan (Free/Plus). We do not collect payment information in this version.
What we do not collect
We do not collect precise or coarse location, contacts, photos or videos, camera, microphone, calendar, browsing or search history, or health-device metrics. Ridha uses no third-party analytics, advertising, or tracking SDKs, collects no advertising identifiers, and does not track you across other apps or websites.
How we use your data
To run your account, provide check-ins and insights, generate optional personalised AI guidance (see below), verify your workplace if you opt in, respond to requests, secure the service, and meet legal obligations. My Work selections may be marked as eligible for future anonymous aggregation, but team pulse and workplace reporting are not available in this release. We never sell your data or use personal wellbeing data for advertising.
AI processing
Personalised AI guidance is off by default. If you turn it on, a de-identified, mood-derived summary of your check-ins is sent to our AI provider (OpenAI) to generate your reflections, tips, and nudges. Identifying information — your email, name, employer, and identity — is stripped before anything is sent, and AI reflections are never used for workplace scoring. OpenAI states that API inputs and outputs are not used to train its models by default unless the API account owner explicitly opts in; default abuse-monitoring logs may be retained for up to 30 days unless law requires longer retention. You can turn AI guidance off at any time in Settings.
What employers can never see
Employers have no reporting access in this release. They cannot see your overall mood, My Life drivers, individual My Work selections, AI guidance, personal insights, or your identity behind any check-in.
Features not available in this release
Community, Journal, Ridha Index, Culture Badge, team pulse, workplace reporting, and billing are not available. Ridha therefore does not collect Community posts, Journal entries, moderation reports, analytics events, crash reports, or payment-card details through those features.
Where your data is stored
Your data is hosted on our infrastructure provider Supabase in the Tokyo, Japan region (ap-northeast-1). Data is encrypted in transit (HTTPS/TLS) and at rest.
Service providers
- Supabase — hosting, database, authentication, and server functions.
- OpenAI — optional AI guidance only, after you opt in (de-identified data, not used for training).
- Email delivery — used to send sign-in codes and account emails.
These providers process data on Ridha's behalf; this is not "selling" and is not sharing your data for others' own purposes.
Data retention
We keep your account data while your account is active. When you delete your account, your personal data is erased or anonymised (see below). The raw context used for AI guidance is purged on a rolling basis (up to 90 days). A minimal deletion audit record (your email, country, and optional reason) is kept for 90 days as evidence the deletion was honoured, then purged.
Account deletion
You can delete your account and data at any time:
- In the app: More → Terms & Privacy → Data & Account Deletion → Delete account.
- By email: privacy@ridha.app from your account email.
The in-app flow immediately removes or anonymises your active app profile, check-ins, drivers, AI content, saved advice, coach goals, workplace verification, preferences, plan record, and support/access submissions. It also attempts to remove your sign-in identity; if that provider-side step is unavailable, your app profile remains disabled and its personal data remains removed or anonymised. Verified email requests may take up to 30 days. Records may be retained only as described in the retention section above or where the law requires.
Your rights
Depending on your country, you may have rights to access, correct, delete, export, or restrict use of your personal data. Send requests to privacy@ridha.app.
Security
We use transport encryption, encryption at rest, access controls, data minimisation, work-email masking, secure authentication, and audit logging for sensitive actions.
Children
Ridha is for users aged 18 and over. We do not knowingly collect data from anyone under 18.
Not a medical or crisis service
Ridha supports everyday wellbeing and reflection. It is not a medical device and not a crisis service, and does not diagnose or treat any condition. In an emergency, contact your local emergency services or a qualified professional.
Changes
We may update this policy; material changes will be reflected here with a new effective date.