Our Commitment
My Royal Ritual retains your personal data only for as long as necessary to provide our services, comply with legal obligations, and support legitimate business purposes. You maintain control over your data at all times.
Retention Periods by Data Type
Account Information
- Email, name, password hash: Retained while your account is active
- Deleted accounts: Personal identifiers removed within 30 days of deletion request
Glow Assessment & Skin Profile
- Active profiles: Retained while account is active
- Inactive accounts: Anonymized after 24 months of inactivity
Journal Entries
- Private journals: Retained while account is active or until user deletion
- User-initiated deletion: Removed immediately upon request
Progress Photos (Photo Journey)
- Private photos: Retained while account is active or until user deletion
- Shared photos: Retained per sharing consent terms
- Moderation-flagged photos: Retained for 90 days for safety review, then deleted
Community Content (Crown Room)
- Published posts: Retained while account is active
- Removed content: Deleted within 30 days of removal
- Moderation logs: Retained for 12 months for safety compliance
Ritual Check-Ins & Challenges
- Active participation data: Retained while account is active
- Historical data: Anonymized after 24 months for trend analysis
Rewards & Glow Points
- Active accounts: Retained while account is active
- Forfeited points: Removed upon account deletion
Professional Applications (My Royal Ritual Pro)
- Approved professionals: Retained while professional status is active
- Rejected applications: Retained for 12 months for fraud prevention
- Suspended professionals: Retained for 24 months for compliance
Communication Records
- Support emails: Retained for 24 months
- Feedback submissions: Retained for 36 months for product improvement
Analytics & Usage Data
- Aggregated analytics: Retained indefinitely (anonymized)
- Individual usage logs: Anonymized after 12 months
Legal Basis for Processing (GDPR)
We process your personal data under the following legal bases:
- Contract performance: To provide My Royal Ritual services you requested
- Legitimate interests: Platform improvement, security, fraud prevention
- Consent: Marketing communications, optional features (withdrawable anytime)
- Legal obligation: Compliance with applicable laws and regulations
Your Data Rights
Under GDPR, CCPA, and other privacy laws, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Delete your data ("Right to be Forgotten")
- Portability: Receive your data in a portable format
- Restriction: Limit how we process your data
- Objection: Object to certain processing activities
- Withdraw consent: Revoke previously given consent
To exercise these rights, visit the Trust Center or contact us at hello@iseeyouroyalty.com.
International Data Transfers
My Royal Ritual is built on Base44, a platform that operates globally. Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by regulatory authorities
- Data Processing Agreements with service providers
- Encryption and security measures during transfer and storage
Third-Party Processors
We work with trusted service providers who process data on our behalf:
- Base44: Platform infrastructure, authentication, database management
- Email service providers: Transactional and marketing emails
- Analytics providers: Usage analytics (anonymized)
- Payment processors: Future e-commerce functionality (not yet implemented)
- Content delivery networks: Image and asset delivery
All processors are bound by Data Processing Agreements and must comply with applicable privacy laws.
Data Deletion Process
You may request deletion of your data at any time:
- Visit Trust Center in your account settings
- Select "Delete My Account" or specific data types (journals, photos)
- Confirm deletion (this action is permanent)
- Your data will be deleted within 30 days
- You will receive email confirmation of deletion
Note: Some data may be retained for legal compliance (e.g., fraud prevention, safety logs) even after account deletion.
Children's Privacy
My Royal Ritual is intended for users 18 years and older. We do not knowingly collect data from children under 18. If we become aware that we have collected data from a minor, we will delete it immediately.
Changes to This Policy
We may update this Data Retention Policy periodically. Material changes will be communicated via email or in-app notification. Continued use of My Royal Ritual constitutes acceptance of updated policies.
Contact Information
For privacy questions, data requests, or concerns:
Last Updated: May 30, 2026