Rujoo Privacy Policy

Rujoo is a habit tracker, so some of what you enter is personal. We collect only what is needed to run the app and sync it across your devices:

• Account information from Google or Apple sign-in: your name, email address and profile photo URL, plus a unique account identifier. We do not offer email/password sign-in.
• Household and profile data: your household, the profiles in it (your own and any Child Profiles you create, including a display name, avatar, optional age and an optional hashed PIN), and profile settings such as language, calendar and cadence preferences.
• Habit data: your habits, their schedules and goals, what you mark as completed, scorecard periods, streaks, and any journal entries you write.
• Leaderboard data, only if you opt in for a period: a display handle you choose and your completion statistics.
• Subscription status, if you choose to support Rujoo. Payments are handled by Apple or Google; we do not receive your card details.

Rujoo keeps your data on your device first and syncs it in the background. We do not run ads and we do not collect advertising identifiers.

We use your information to provide the app: to identify your account, keep your habits, streaks and household in sync across devices and co-parents, compute your scorecards, and run the optional leaderboard. We do not sell your information, and we do not use it for advertising.

Reminders are scheduled locally on your device; we do not need your location, contacts or photos to deliver them.

• Within your household: every member of your household can see and manage the profiles in it. This is how both parents reach the same Child Profile.
• On the leaderboard: sharing is a per-period choice. If you decline, everything stays private. If you share, others see only your display handle and completion percentage — never your journal entries. A Child Profile's sharing choice is its own, separate from yours.
• Nothing else. We do not share your habit or journal content with anyone outside your household.

We rely on the following services to run Rujoo:

• Supabase, for authentication and to store your account, household and habit data.
• Google and Apple sign-in, to verify your identity when you sign in.
• Google Cloud Translation: when you create a custom habit, its title and description are sent to Google Cloud Translation so it can be shown in English, Urdu and Arabic. Nothing else is sent.
• Apple App Store and Google Play, to process optional subscriptions.

Each has its own privacy policy governing how it handles the data described above.

We retain your information for as long as your account exists. You can permanently delete your account and your own habit data at any time from the Delete Account page, or by emailing us. Child Profiles that belong to a household are kept for the other household members unless the household owner deletes them. Data stored on your device is removed when you uninstall the app.

Rujoo is designed to be used by families. A Child Profile is created and managed by a parent or guardian inside their household; children do not create accounts or sign in with us. A Child Profile holds only a display name, avatar, optional age, optional hashed PIN and their own habit data. A child is never shown ads, and public leaderboard sharing for a Child Profile is off unless a parent turns it on.

If you believe a child's information has been collected without a parent's involvement, contact us and we will remove it.

Data is protected using the security practices of our infrastructure provider (Supabase), including encryption in transit and row-level access rules that limit each household's data to its own members. PINs are stored hashed. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your information.

We may update this policy from time to time. Material changes will be reflected by updating the effective date above.

Questions about this policy? Email us at dev.rujoo@vertexbytes.com.