RITA ("Reminisce in the app") is built on a simple principle: your family's memories belong to your family. This policy explains what data we collect, why, and how it is protected.
Who we are
RITA is developed and operated by Sam Watson. If you have any questions about this policy, contact us at hello@rita-app.com.
What RITA stores and where
Stored only on your device (by default)
When you use RITA without a cloud account, everything stays on your phone:
- Voice recordings — stored as audio files in your device's private documents folder. Never transmitted anywhere.
- Photos — stored locally. We never access your photo library without explicit permission for a specific recording.
- Memory titles, prompts, and transcripts — stored in a local database on your device.
- Tags and collections — stored locally.
No account is required to use RITA. No data leaves your device unless you explicitly choose a cloud feature.
Stored in the cloud (only when you opt in)
If you create a RITA account and enable cloud backup or family sharing, the following is uploaded:
- Encrypted audio files — encrypted on your device before upload using AES-256-GCM. We cannot listen to your recordings.
- Encrypted photos — encrypted before upload. We cannot view your photos.
- Memory metadata — titles, dates, prompt questions, and transcript text, stored in Firebase Firestore (Google Cloud, Europe).
- Your email address and display name — used to identify your account and enable family sharing.
Your encryption key is derived from your device and account. We cannot decrypt your files.
Authentication and accounts
Account sign-in uses Apple Sign-In or Google Sign-In. We do not store your Apple or Google password. We receive only your email address and display name from those providers.
Family sharing
When you share a memory via a link or QR code, a short-lived share record is created in our database containing the memory title and your display name. This record expires after 48 hours. The recipient never receives your audio or photos directly through the share link — they receive an invitation to view the memory within the RITA app.
Subscriptions
RITA Plus subscriptions are processed by Apple via the App Store. We use RevenueCat to manage subscription status. RevenueCat receives a pseudonymous App Store receipt — it does not receive your name or payment details. We never store card numbers or payment information.
Crash reporting and analytics
For users who have opted into cloud features, we use:
- Firebase Crashlytics — records app crashes to help us fix bugs. Crash reports contain device model, iOS version, and a stack trace. No personal data or memory content is included.
- Firebase Analytics — records anonymised events (e.g. "recording started") to understand how features are used. No recording content is ever sent.
These services are only active for users with a RITA cloud account. Offline-only users are not tracked.
Microphone and camera permissions
RITA requests microphone access to record audio. Camera and photo library access is requested only when you choose to add a photo to a memory. We do not access your microphone or camera at any other time.
Speech recognition
If you use the on-device transcription feature, your audio is processed locally on your device using Apple's Speech Recognition framework. Audio is not sent to our servers for transcription unless you explicitly tap "Better transcript" (a premium feature that uses OpenAI Whisper). When you use Better Transcript, a short audio clip is sent securely to OpenAI and is not stored by them beyond the duration of the request.
Data retention
- Local data — stored on your device until you delete the memory or uninstall the app.
- Cloud data — retained while your account is active. You can delete your account and all associated data at any time from the app settings.
- Share records — expire automatically after 48 hours.
- Crash reports — retained for 90 days by Firebase Crashlytics.
Your rights
Under UK GDPR and the Data Protection Act 2018, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (right to erasure)
- Object to processing
- Data portability — export your memories as a ZIP file from within the app at any time
To exercise any of these rights, contact hello@rita-app.com.
Children
RITA is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes to this policy
We will notify you of material changes by updating the "Last updated" date above. Continued use of the app after changes constitutes acceptance of the revised policy.