Privacy Policy

Last updated: August 28, 2026

Ritsuban is a calm daily planner, operated by Alt Tab Design LLC, a Texas limited liability company ("we", "us") — Ritsuban is our product name and brand, and Alt Tab Design LLC is the data controller for the personal data described here. This policy explains what data we collect when you use it, where that data lives, who processes it on our behalf, and the controls you have over it. The short version: we collect what the product needs to work, we don't sell it or use it for advertising, and you can export or delete everything yourself, in the app, at any time.

1. Data we collect

Account information. When you create an account we collect your email address and, if you sign in with Google, the name associated with your Google account. Authentication is handled by Amazon Cognito (an AWS service). You can sign in with an email address and password or with your Google account; we never see or store your password in our own systems, and Google sign-in shares only your basic profile (email and name) with us. We also record, once, when your account is created, how you found us: the campaign parameters and referring link carried over from our website (a source, a campaign name, the referring page, and the time of that first visit), and — if you answer the optional "How did you hear about Ritsuban?" question offered after your first sign-in — the answer you choose. These fields are written once and never overwritten, the question is optional and can be skipped, and the random website visitor identifier described below is never stored on your account.

Your content. The things you put into Ritsuban: tasks and their descriptions, channels, planned days and time estimates, focus-session time logs, weekly-review reflections, the notes you keep in spaces along with any files and images you attach to them, and settings such as your timezone.

Notes, spaces, and the space assistant. Each space can have an AI assistant you invoke by asking it a question. When — and only when — you do, the text of the notes in that space, along with your question and the recent back-and-forth of that conversation, is sent to Anthropic (our AI provider, named in section 4) to generate the answer and any note edits or tasks you asked for. Nothing is sent to Anthropic unless you invoke the assistant; note attachments (files and images) are never sent, only note text.

Email you send to your capture address. Ritsuban gives you a personal email-to-task address. When a message is sent to it, we process the sender address, subject, and message body to create an item in your inbox. The raw email message (including headers and any attachments) is retained for 90 days for reliability and troubleshooting, then automatically and permanently deleted. The parsed subject and body remain as your inbox item or task until you delete them. Treat this address like a password: anyone who has it can add items to your inbox.

Meeting recordings and notes. Ritsuban's macOS desktop app can record meetings, but only when you explicitly start a recording — nothing is captured until you do, and an always-visible on-screen indicator shows while a recording is in progress. When you record, we collect the audio of the meeting and the material we derive from it: a written transcript, a summary, highlighted action items, and answers to any follow-up "deep dive" questions you ask about that meeting. A recording may capture the voices of other participants. You are responsible for obtaining any consent that the law requires before recording — some jurisdictions require every participant's consent. The visible indicator is there so everyone present can tell a recording is happening.

Billing information. Payments are handled by payment processors — we never see or store your full card number. Depending on where you subscribe, billing is processed by Stripe (web), Apple (App Store), or Google (Google Play), with RevenueCat managing subscription state across platforms. We store your subscription status (for example: trialing, active, expired) alongside your account.

Waitlist email addresses. If you join a waitlist on this site (for example, for a mobile beta), we collect the email address you submit and, if you choose one, which platform you're waiting for. We use it only to tell you when the thing you signed up for is available — never for other marketing, and we don't share it. To be removed from a waitlist, email [email protected] and we'll delete your entry.

Usage analytics. To understand which features are used and to catch errors, the apps record first-party usage events: feature actions (for example, creating a task), screen and page views recorded as normalized paths (never the titles or content of your work), the app version and platform, a random session identifier, and error diagnostics limited to truncated error messages — never stack traces and never your content. These events are linked to your account once you have one, sent only to our own servers, and stored in the same Amazon Aurora databases as the rest of your data. No third-party analytics service receives them, they are not shared with anyone, and they are not used for advertising or cross-company tracking. They are deleted automatically after 180 days. Your data export includes a summary of them (a total count, counts by event name, and your 100 most recent events), and deleting your account deletes them along with everything else.

Website analytics. We count visits to this marketing website ourselves, with our own software. The first time you arrive, your browser creates a random identifier and keeps it in that browser's local storage so we can tell a returning visit from a new one. It is a random value — not a fingerprint and not an advertising cookie — it is not derived from anything about you or your device, it is never combined with other signals to identify you, and it is never attached to your account. Alongside it we record the normalized path of the page you viewed — the page address only, never the query string — the width of your browser window, and, on your first visit only, the referring page your browser reports and any campaign parameters in the link you followed (the utm_source, utm_medium, and utm_campaign values). These visit records do not include your IP address, they are never sold, shared, or used for advertising, and they are deleted automatically after 180 days. If you go on to create an account, the campaign parameters carried over to app.ritsuban.com are held in that browser until the account is created, then recorded once on it and never updated — the random visitor identifier is never sent with them, so these visit records stay separate from your account.

Technical data. Standard server logs (such as IP address, request time, and user agent) are kept for security and operations. The marketing site and the app do not use advertising trackers or third-party analytics cookies, and no third-party analytics service is used on this site.

Do Not Track. Some browsers send a "Do Not Track" signal. We do not track you across other companies' websites or services, and we do not allow any third party to collect personally identifiable information about your activity on this site over time or across different websites. Because we do not do that collection, we do not respond differently to Do Not Track signals.

2. Where your data lives

Your account and content are stored in Amazon Aurora databases hosted with Amazon Web Services in the us-east-1 (Northern Virginia, USA) region, encrypted at rest and in transit. If you use Ritsuban from outside the United States, your data is transferred to and processed in the United States.

Meeting audio recordings and their transcripts, and the files and images you attach to notes, are stored, encrypted at rest, in Amazon S3 (also AWS, us-east-1), kept separate per user; the summaries and action items derived from them live alongside your account in Aurora. As above, this data is processed in the United States.

3. How we use your data

• To provide the product: storing and syncing your tasks and plans across your devices, and turning email you send to your capture address into inbox items.
• To operate your subscription: trials, billing state, and entitlements.
• To send service email: things like trial-ending notices, billing-issue notices, and renewal reminders. These are part of operating the service, not marketing.
• To keep the service secure and reliable: logs, backups, and abuse prevention.
• To understand how Ritsuban is used and to find errors: the first-party usage analytics described in section 1, and the first-party website analytics that tell us which pages people read and which channels bring them to Ritsuban. They stay on our own servers and are never used for advertising.

We do not sell your data, share it with advertisers, or use your content to train machine-learning models.

4. Who processes data on our behalf

• Amazon Web Services — hosting, storage (including Amazon Aurora), authentication (Amazon Cognito), and email delivery.
• RevenueCat — subscription management across web and mobile.
• Stripe — payment processing for web subscriptions. Under Stripe's Managed Payments program, Stripe is the merchant of record for those purchases, including calculating and remitting applicable sales tax.
• Apple and Google — in-app purchase billing on iOS and Android, and Google additionally for optional Google sign-in.
• AssemblyAI — our speech-to-text provider. When you record a meeting, the audio (via a temporary, expiring link) is sent to AssemblyAI to produce the transcript.
• Anthropic — our AI provider. Two features send your content to Anthropic: meeting summaries and deep-dive answers (the meeting transcript is sent), and the space assistant (the text of the notes in that space, plus your question and conversation, is sent when you invoke it).
• Cloudflare — hosting for this marketing website.

Each processor receives only what its role requires (for example, Stripe handles your card; it never sees your tasks).

AI features and your consent. Ritsuban's AI features send user content to exactly two named companies — AssemblyAI (meeting audio, for transcription) and Anthropic (meeting transcripts and space note text, for summaries, deep-dive answers, and assistant replies) — and only in response to an explicit action you take: starting a recording, asking a deep-dive question, or invoking a space assistant. No content is ever sent to either company in the background or by default. Neither company is permitted to use your content to train its models, and neither receives your account credentials or billing details. If you never use these features, nothing is sent.

5. How long we keep it

• Account data and your content (including spaces notes and their attachments): for as long as your account exists.
• Waitlist email addresses: until the waitlisted launch happens and its announcements are sent, or until you ask us to remove yours — whichever comes first.
• Raw inbound email (the original message sent to your capture address): 90 days, then deleted automatically.
• Meeting recordings, transcripts, summaries, and action items: kept until you delete the meeting or your account. Deleting a meeting permanently removes its audio, transcript, summary, and everything derived from it; deleting your account removes all of it.
• Usage analytics events: 180 days, then deleted automatically. Deleting your account deletes them immediately.
• Website analytics visit records (the marketing-site visits described in section 1): 180 days, then deleted automatically.
• Server logs: kept for a limited operational window, then rotated out.
• Billing records held by our payment processors are retained according to their policies and legal requirements.

6. Your controls

Export. You can download a complete copy of your data (your tasks, channels, plans, time logs, reflections, inbox items, and your meeting notes) from the app's settings, as JSON, at any time. You can also download the audio recording and transcript of any individual meeting directly from that meeting in the app.

Deletion. You can delete your account from the app's settings, or — without installing or signing into the app — from our account deletion page. This permanently removes your account and content from our systems, including your authentication record and subscription profile with our processors. If you subscribed through the App Store or Google Play, deleting your account does not cancel that subscription — cancel it in your store settings, otherwise the store will keep billing you.

Correction and questions. You can edit your content and settings directly in the app. For anything else — including privacy rights requests under the laws that apply to you (such as GDPR or CCPA) — contact us at the address below.

7. Children

Ritsuban is not directed to children and is not intended for anyone under 16. We do not knowingly collect data from children.

8. Changes to this policy

If we make material changes to this policy, we will update this page and note the new date above. For significant changes we will also notify you by email or in the app.

9. Contact

Questions about this policy or your data: [email protected].

Alt Tab Design LLC, a Texas limited liability company
9450 SW Gemini Dr PMB 73204
Beaverton, OR 97008
United States