Privacy

Who holds this

Sunilkumar Kalabandi, an individual in the United Arab Emirates, operates RiteStack. Write hello@ritestack.app for access, correction, or deletion.

What we collect

Only what the ritual needs:

• Email, so we can send a one-time sign-in code.
• The rows you type: tool name, monthly cost, renew date, last-used, cancel URL, and keep / cut / pause, backup billing URL, and any cancellation confirmation date or note you add.
• Whether the seven-day ritual is open, and whether the $14 pack is paid.
• Optional feedback: name if you give one, email, and the note.

Hosting logs (IP, user agent, time) may sit with Cloudflare for a short window so the site can stay up.

What we do not collect

We do not scan Gmail. We do not read your inbox. We do not connect a bank. We do not use Plaid. Card numbers go to Paddle, not to us.

Why we hold it

To sign you in, show you your list, run keep / cut / pause, take the $14 once payment through Paddle, and answer mail you send to hello@ritestack.app. That is the whole job.

Who else sees it

• Cloudflare hosts the app.
• Supabase holds auth and your rows, isolated to your account.
• Paddle.com is the merchant of record for paid orders. Paddle’s privacy terms cover checkout. Buyer support: paddle.net.

We do not sell your list. We do not sell your email.

How long

Rows stay while the account stays. Write hello@ritestack.app and we will delete the account and the list. Backups may lag a short time. Magic-link mail is not kept as a permanent archive.

The mobile companions

The iOS and Android apps use the same account and inventory. The iOS app stores sign-in tokens and your reminder preference in device-only Keychain storage. The Android app protects saved sign-in tokens using Android Keystore-backed encryption. Optional reminders are scheduled on your device; their notification text contains no tool names or amounts. Signing out removes the saved session and reminders. Sample preview does not upload its sample rows.

You can delete your account inside the app from Account → Delete account. This removes your account, inventory and access profile across devices. Backups may take a short time to expire, and payment processors may retain records required by law. You can also request deletion without installing the app at ritestack.app/delete-account. The mobile apps contain no advertising, tracking or third-party analytics SDK.

Cookies

Sign-in uses a session cookie so the ritual can load. There is no ad pixel and no third-party marketing cookie on this site.

Your rights

You can ask for a copy, a correction, or deletion. Email hello@ritestack.app. If you live somewhere with extra privacy law (including the EU/UK), those rights still apply. We will answer from the UAE.