Rhythm ("Rhythm", "we", "us", or "our") is a marketplace for daily routines. Creators publish structured routines (a sequence of time blocks for a day or several days), and users browse, purchase or save, and then follow them with timed reminders and check-ins.
We wrote this policy to explain, in plain language, what information we collect when you use the Rhythm app, why we collect it, how we protect it, and the choices you have. Please read it carefully.
1. Information We Collect
1.1 Account information
When you create an account, we collect:
- Email address — used as your login identifier and for account-related communications.
- Password — stored only in hashed form (we never store or see your plain-text password).
1.2 User-generated content (UGC)
When you create and publish a routine, we collect the content you provide:
- Routine title, description, and category.
- Time blocks, each containing a time, duration, block type (e.g. Focus / Break / Leisure), and optional text notes, video links, and web links.
- Cover image you upload for the routine.
1.3 Usage and activity data
We record activity generated while you use Rhythm, so that the product works and so we can show you your own progress:
- Check-in records and completion rate for routines you follow.
- Bookings (routines you schedule).
- Saved/favorited routines.
- Follows (creators you follow).
- Purchase records (routines you have acquired — free or paid).
1.4 Technical data
- Timezone (your device's UTC offset). This is a core feature: Rhythm converts a creator's schedule into your local time so routines display at the correct times for you.
- Device and browser information (e.g. device model, operating system, app version) for compatibility and troubleshooting.
- IP address, which our backend (PocketBase) records in standard server request logs for security and abuse prevention.
1.5 What we do not collect
- Precise location (GPS coordinates). We only use your timezone, not your physical location.
- Payment card details. Purchases, if and when offered, are handled by the app store (e.g. Google Play Billing); card numbers never reach our servers.
- Health data. We track your routine completion, not medical or fitness measurements.
2. How We Use Your Information
| Purpose | What it enables |
|---|
| Provide the service | Let you browse, publish, purchase, save, follow, and execute routines. |
| Timezone conversion | Convert routine times into your local timezone (core functionality). |
| Progress & recap | Show your check-ins, completion rate, and recap after finishing a routine. |
| Account features | Maintain your library, purchases, saved items, follows, and creator content. |
| Security & abuse prevention | Detect and prevent fraud, spam, and misuse using server logs and IP addresses. |
| Support & troubleshooting | Diagnose issues using device/browser information. |
| Legal obligations | Comply with applicable laws and enforce our terms. |
We do not sell your personal information, and we do not use your data to serve advertising.
3. Legal Basis for Processing (EEA/UK)
Where data protection law (such as the GDPR) applies, we rely on these legal bases:
- Performance of a contract — to provide the Rhythm service you signed up for (e.g. storing your routines, converting timezones, tracking your check-ins).
- Legitimate interests — for security, fraud prevention, and product improvement, balanced against your rights.
- Consent — where required (e.g. optional notifications), which you may withdraw at any time.
- Legal obligation — where we must retain data to comply with the law.
4. Data Storage & Security
- Where data is stored. Your data is stored on servers operated on our behalf by our hosting provider. Data may be stored in the region where our servers are located.
- Encryption in transit. All data is transmitted over encrypted connections (HTTPS/TLS) between your device and our servers.
- Password security. Passwords are stored as salted hashes, never in plain text.
- Retention. We keep your data for as long as your account is active, or as long as needed to provide the service and meet legal obligations. When you delete your account (see Section 7), we delete your personal data as described there.
While we use reasonable measures to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
5. Third Parties
We share your information only in the following limited circumstances:
- Hosting / infrastructure providers. We use a cloud hosting provider and the self-hosted PocketBase backend to store and serve your data. These providers process data on our behalf under our instructions and do not use it for their own purposes.
- App stores. If you make a purchase, the app store (e.g. Google Play) processes the transaction; we receive only a transaction confirmation, not your payment details.
- Legal disclosure. We may disclose information if required by law or to protect the rights, safety, or property of Rhythm, our users, or others.
We do not sell, rent, or trade your personal information, and we do not share it with advertisers or data brokers.
6. Your Rights
Depending on where you live, you may have the right to:
- Access a copy of the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Export / data portability — receive your data in a structured, commonly used format.
- Delete your data (see Section 7 for how to delete your account).
- Restrict or object to certain processing.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data-protection authority.
To exercise any of these rights, contact us at the address in Section 10. We will respond within the time required by applicable law (typically within 30 days) and may ask you to verify your identity.
California & Other US State Privacy Rights
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the right to:
- Know what personal information we collect, use, and disclose (the categories are listed in Section 1).
- Access a copy of your personal information.
- Delete your personal information.
- Correct inaccurate personal information.
- Opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA.
- Not be discriminated against for exercising any of these rights.
We do not collect "sensitive personal information" as defined by the CCPA, and we do not use or disclose personal information for cross-context behavioral advertising.
To exercise any of these rights, contact us at the address in the "Contact Us" section. We will verify your request and respond within the time required by law (typically 45 days).
Residents of other US states (for example Virginia, Colorado, Connecticut, and Utah) may have similar rights under their state privacy laws. We honor these rights to the extent required by applicable law.
7. How to Delete Your Account
You can delete your account and associated data directly from the app:
- Open Rhythm and go to Settings.
- Tap Delete Account.
- Confirm your choice.
What deletion means: Account deletion is irreversible. When you delete your account, we delete your account and the content and activity associated with it in a cascading manner, including:
- your email address and password;
- routines you published (including titles, descriptions, time blocks, links, and cover images);
- your purchases, bookings, saved items, and follows;
- your check-in and completion records.
Some data may be retained temporarily in backups or where required to comply with legal obligations, after which it is deleted. You can also request deletion by contacting us (Section 10).
8. Children's Privacy
Rhythm is not directed at children and does not knowingly collect personal information from children. If you are under the age of 13 (or 16 in some EEA countries), you may not use Rhythm without verifiable parental consent. If we learn that we have collected personal information from a child without the required consent, we will delete it promptly. If you believe a child has provided us personal information, please contact us.
9. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or for legal reasons. When we make material changes, we will update the "Effective date" at the top and, where appropriate, notify you in the app or by email. Your continued use of Rhythm after changes take effect constitutes acceptance of the updated policy.
10. Contact Us
If you have questions or concerns about this policy or your data, contact us at:
Email: privacy@rhythmdaily.app
We will do our best to address your request promptly.