Legal
Privacy Policy
Last updated October 2026
Who we are
THERA Rituals is run from Italy by R. Ashlee, the data controller. For any privacy question, write to info@therarituals.com.
What we store
If you create an account we store your email address, a display name if you give one, and an encrypted password (or your Google account identifier if you sign in with Google).
Inside your account we store what you choose to keep: saved rituals, completed rituals, written reflections and journal entries, intentions, and records of collections you have reserved or purchased.
We also record simple product events — such as which page was opened or which ritual was started — so we can see what is useful. These events never contain the text you write.
Waitlist
If you leave your email to hear when a collection opens, we use it only to write to you about that opening and the founding price. You can unsubscribe at any time from any email or by writing to us.
Your reflections are private
Journal entries and reflections are readable only by the account that wrote them. Access is enforced at the database level, not only in the interface. We do not publish, sell or share what you write.
Why we store it
To give you an account, to keep your rituals and writing available across devices, to deliver digital collections you buy, and to keep the product working. We do not sell personal data, and we do not run advertising trackers.
Legal basis
We process account data to provide the service you asked for (performance of a contract), waitlist emails on the basis of your consent, and basic product events on the basis of our legitimate interest in keeping THERA useful. You can withdraw consent at any time.
Cookies and local storage
THERA uses only what is strictly necessary: a session token to keep you signed in, and your browser's local storage to keep your Soul Notes fragments and pages on your device. Fragments stay on your device unless you create an account. There are no advertising or third-party tracking cookies, so no cookie consent banner is required. Clearing your browser storage signs you out and removes fragments kept only on that device.
Who processes data for us
Our hosting and database provider stores the data described above on our behalf. If you sign in with Google, Google confirms your identity to us. Payment, once enabled, will be handled by our payment provider — card details never reach THERA.
How long we keep it
For as long as your account exists. Ask us to delete your account and we remove your profile, saved rituals and written entries, keeping only the purchase records we are legally required to retain.
Your rights
You can ask for a copy of your data, correction of it, or its deletion, and you can object to processing. Write to info@therarituals.com. If you are in the EU or UK you may also complain to your local data protection authority (in Italy, the Garante per la protezione dei dati personali).
Not medical care
THERA is written for everyday life. It is not medical or psychological treatment and does not replace professional care.