RingsFlow · Privacy Policy
Privacy Policy
How we process your personal data on the RingsFlow platform, why, on what legal basis and what rights you have.
Data controller
CONSCIOUS PATHS LTD
71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Contact: hello@ringsflow.com · Privacy: privacy@ringsflow.com
1. Who we are and what these policies cover
This Privacy Policy explains how CONSCIOUS PATHS LTD (the "controller", "we", "RingsFlow") processes the personal data of users of the RingsFlow platform (website and app). Your privacy matters to us. We process your data in line with Regulation (EU) 2016/679 (GDPR) and other applicable law.
2. What personal data we process
We process, in particular, the following categories of data:
- Registration and identification data: email, username, password (in encrypted form), and any other data you choose at registration.
- Profile data: name or nickname, profile picture, cover image, bio, interests and other data you voluntarily provide.
- Content you create: posts, photos, videos, comments, saved posts and other content within Flow, Rings and other features.
- Social and community data: who you follow, Ring memberships, entry requests, Ring roles.
- Communications: messages between users and communications with the controller (support, reports).
- Technical data: IP address, device and browser type, usage data, approximate location derived from IP where necessary for security and operation.
- Payment data: for paid services we process only the necessary payment information (e.g. status, amount); the actual payment data is processed by the payment provider (e.g. Stripe) under its own terms.
- Data from connected services: if you connect an account with a third party (e.g. TikTok), we process data to the extent you authorise (see Section 6).
Special categories of data: because of the spiritual and personal-growth focus of the platform, content you voluntarily share (for example in a private journal or "Grimoire", in profiles or communities) may contain sensitive data such as religious or philosophical beliefs, health or sexuality data. We treat such data with particular care — see Section 5.
3. Purposes of processing and legal basis (GDPR Art. 6)
| Purpose | Legal basis |
|---|---|
| Providing the service, operating your account and displaying content | Performance of a contract (Art. 6(1)(b)) |
| Security, prevention of abuse and fraud, handling reports | Legitimate interest (Art. 6(1)(f)) |
| Sending operational notices and in-service notifications | Performance of a contract / legitimate interest |
| Marketing communications (if you opt in) | Consent (Art. 6(1)(a)) |
| Compliance with legal obligations (e.g. tax, record-keeping) | Legal obligation (Art. 6(1)(c)) |
| Special category data you voluntarily share (belief, health, sexuality) | Your explicit consent (Art. 9(2)(a)) |
4. Cookies, local storage and analytics
- Necessary technical data: we use necessary cookies and local storage (localStorage) for sign-in, remembering settings (e.g. dark mode) and basic app functions.
- Analytics: we use simple, privacy-friendly, self-hosted analytics (visits, sources, approximate statistics) to improve the service. Where analytics stores identifiers, it does so in anonymised form.
- Third parties: if you embed external content (e.g. TikTok, YouTube), those platforms may use their own cookies under their policies.
You can manage cookies and consents in the app settings (Me → Settings → Privacy and data) and in your browser settings.
5. Special categories of data and the private Grimoire
RingsFlow is a platform for conscious connections and personal growth. Some features (for example the private journal/Grimoire, profiles, communities) may contain very personal data about your beliefs, spiritual practice, health or sexuality.
- We process such data only on the basis of your explicit consent or to the extent you publish it yourself.
- A public profile (for example interests such as "Tarot · Meditation") is not treated as automated processing of special categories; we do not systematically infer your religious or philosophical beliefs from it.
- The private Grimoire (personal, non-public records) is kept separate legally and technically: primarily only you have access, and if you share it, this happens only on the basis of your explicit settings.
- We never use sensitive data for automated decisions with legal effects, nor do we share it with advertising partners.
6. TikTok integration
If you connect your TikTok account to RingsFlow, we may process, to the extent of the permissions you grant us, in particular:
- TikTok user ID / open_id
- display name
- profile image
- public video metadata
- video IDs, video URLs / embed information
Why: so you can link your TikTok account and display your TikTok posts in RingsFlow.
Legal basis: provision of the service you requested and/or your consent where required.
What we do not do: through this integration RingsFlow does not download or host copies of your TikTok videos — videos remain on TikTok and are displayed through a supported integration.
Disconnecting: you may disconnect your TikTok account from RingsFlow at any time in the app settings (Me → Settings → Privacy and data → Connected accounts). After disconnecting we stop processing new data from TikTok; previously obtained data will be removed unless necessary for the operation of the service.
We protect TikTok user data, use it transparently and do not share it without appropriate authorisation. You grant the scope of permissions yourself and may revoke authorisation at any time — both with us and in your TikTok account settings.
7. Who we share data with (recipients)
We share data only to the extent necessary:
- hosting and infrastructure providers (operation, back-ups);
- payment providers (e.g. Stripe) for processing payments;
- email service providers for sending notices and support;
- connected platforms (e.g. TikTok, YouTube) to the extent you authorise;
- public authorities where required by law.
We never sell your data. We do not share it with third parties for their own marketing without your consent.
8. Transfers of data outside the EU/EEA
Some data may be processed by providers established outside the EU/EEA (for example in the United Kingdom or the USA). Transfers are made only on the basis of appropriate safeguards, such as adequacy decisions, standard contractual clauses (SCCs) or other lawful mechanisms. More information is available on request.
9. How long we keep data
We keep data for as long as necessary for the purposes for which it was collected:
- account data for the life of the account and thereafter for periods set by law (e.g. accounting and tax rules for payments);
- technical logs and security data for a limited period (typically months);
- after account closure we delete or anonymise personal data, unless the law requires otherwise.
10. Security
We use reasonable technical and organisational measures to protect your data: transport encryption (TLS), encrypted password storage, access control, back-ups and regular reviews. Nevertheless, no method of transmission or storage is absolutely secure; if you discover misuse of your account, contact us without delay.
11. Your rights under the GDPR
In relation to your personal data you have the right to:
- access your data and information about its processing;
- rectification of inaccurate data;
- erasure ("right to be forgotten");
- restriction of processing;
- data portability (receive your data in a machine-readable format and transfer it to another controller);
- object to processing based on legitimate interest;
- withdraw consent at any time where processing is based on consent (withdrawal does not affect the lawfulness of processing before the withdrawal);
- lodge a complaint with a supervisory authority (in the Czech Republic: Úřad pro ochranu osobních údajů, www.uoou.cz; in the UK: Information Commissioner's Office, ico.org.uk).
You may exercise your rights by email to privacy@ringsflow.com. We handle requests without undue delay, usually within one month.
12. Export and deletion of data in the app
You do not have to exercise your rights only by email — in the app you will find Me → Settings → Privacy and data, where you can:
- Download my data — export of your data (portability);
- Connected accounts — manage connections (e.g. TikTok);
- Disconnect TikTok;
- Consent management;
- Delete account — permanent closure of your account and data.
13. Changes to this policy
We may update this policy. We will inform you in advance of material changes (by email or in-service notice). The current version is always available at this address with its last-updated date.
14. Contact
If you have questions about data protection, contact us at privacy@ringsflow.com or by post at the controller's address shown at the beginning of this document.