Rhythm Privacy Policy

Last updated: September 25, 2026

1. Who we are

Rhythm is operated by Mustafa Kashif (“we,” “us,” or “Rhythm”). For privacy questions or requests, email mustafakashif196@gmail.com.

2. Information we handle

Depending on how you use Rhythm, the app handles:

Do not put sensitive personal information in activity names or optional notes. Rhythm does not ask for precise location, contacts, photos, health data, or payment information.

3. How we use information

We use this information to create and secure your account, provide sign-in, store and sync your records across devices when you are signed in, display your plans and summaries, respond to support requests, troubleshoot failures, and protect the service. We do not use your activity records to serve advertising, and we do not sell personal information.

4. Where information is stored and who processes it

Your records are stored locally on your device. When signed in, the account and supported activity and time-record data are sent to Supabase for authentication and cloud storage. Supabase processes information under its own privacy terms and may process technical information needed to operate and secure its services. Apple or Google processes information when you choose its sign-in option. Apple also distributes beta builds through TestFlight when you participate in beta testing. Those providers act under their own privacy policies.

We do not currently send your activity data to an advertising network or third-party analytics service. Sync is account-scoped and protected by access controls intended to let a signed-in user access only that user’s cloud records. No internet transmission or storage system can be guaranteed completely secure.

5. When information is shared

We share information with the service providers described above only as needed to operate sign-in, cloud sync, app distribution, and support. We may also disclose information if required by law or if reasonably necessary to protect users, the service, or legal rights. We do not make your activity records public.

6. How long information is kept

Information remains on your device until you remove it, reset the app’s data, or uninstall the app (device and operating-system behavior can affect local retention). Cloud records remain while your account is active, unless you delete them or we must retain limited information for legal, security, or dispute-resolution reasons. Service providers may retain encrypted backups or operational logs for limited periods under their own retention practices.

7. Your choices and deletion

You can edit or reset your local activity data in the app. You can sign out at any time. From Settings, you can request permanent account deletion; this deletes the account and associated cloud records. The device used for the deletion clears its account-owned local records. Copies stored locally on another device are not remotely erased and must be cleared on that device. Deletion cannot be undone. You may also contact us at the address above for privacy requests.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of your personal information, or to object to or restrict certain processing. Contact us and we will respond as required by applicable law.

8. Children

Rhythm is a general personal-planning app and is not designed to collect information from children. We have not set an age threshold in the app. If you believe a child has provided personal information, contact us so we can review and address the request.

9. International processing and changes

Supabase and the sign-in or distribution providers may process information in countries where they or their service providers operate. We may update this policy as the app changes. The current version and its effective date will be available in the app and at the public policy page.

10. Contact

For privacy questions or requests, contact Mustafa Kashif at mustafakashif196@gmail.com.