Your data

Privacy policy

Ritmo helps you organize habits and track your progress. This page describes the data used to provide the service.

Who manages your data

The data controller is Raffaele Russo, the operator of Ritmo. For privacy questions or to exercise your rights, you can write to aloppa26@gmail.com.

What data we use

• Account: Email, user ID, username if provided, and information needed to manage sign-ins and sessions. Password authentication is managed by Supabase.
• Google sign-in: Google ID, email and basic profile information provided by Google, such as your name and picture. These identify your account. Ritmo does not request access to Gmail, Drive, contacts or calendar, and does not receive your Google password.
• Apple sign-in: Apple ID and email address provided by Apple, which may be a private relay address. These details identify your account; Ritmo does not receive your Apple password.
• Habits and progress: Titles, goals, frequencies, selected days, logged values, dates and a history of changes and archiving.
• Technical data: Request information, IP address, browser and error logs that hosting and authentication services may process for operation and security.

Only enter information needed to organize your activities. Ritmo is not designed to store medical records or other particularly sensitive data.

Why we process data

We use account and habit data to provide the requested features, sync history and respond to support requests. The legal basis is the performance of the requested service and pre-contractual measures (Article 6(1)(b) GDPR). Without the necessary account data, progress cannot be saved online; the trial without an account remains available.

Abuse prevention and security management are based on the legitimate interest in protecting the service (Article 6(1)(f) GDPR). Any processing required by law is based on applicable legal obligations (Article 6(1)(c) GDPR). We do not use data for personalized advertising, data sales or automated decisions with legal effects.

Browser storage and guest mode

Ritmo uses local browser storage to maintain your sign-in session and chart range preferences. The app does not include advertising analytics tools or profiling cookies.

Habits created without an account stay in the page’s memory: closing or reloading it deletes them. After signing in, you can choose to import them into your account. Signing in alone does not import them automatically.

A preference cookie remembers your chosen language for up to one year.

Providers and recipients

Ritmo uses Supabase for authentication and its database, and Cloudflare for hosting and site delivery. The operator may access data for administration, support and security. Authorities may receive data when required by law.

If you choose Google, sign-in is also subject to Google’s privacy policy. If you choose Apple, sign-in is also subject to Apple’s privacy policy. Providers may operate outside the European Economic Area. Contractual safeguards for this processing and these transfers are described in the data processing agreements of Supabase and Cloudflare; you can ask the controller for information about the safeguards applicable to your data.

How long we retain data

Your account, habits and history are retained until deletion. You can delete individual habits in the app or permanently delete your account and its data in Settings → Account → Delete account. Guest habits you have not imported remain on the device and can be deleted separately.

Any backups are removed according to the providers’ retention cycles. Technical and support data are retained for as long as needed to resolve problems, protect the service or meet legal obligations. Protecting a legal right may require further retention limited to that purpose.

Your rights

Where provided by the GDPR, you can request access, rectification, erasure, restriction and portability of data, and object to processing based on legitimate interest. Write to aloppa26@gmail.com: we may ask you to verify ownership of the account before acting.

You can also lodge a complaint with the Italian Data Protection Authority or the competent authority in your country. Revoking Google or Apple access in their settings does not automatically delete your Ritmo account or history.

Updates

This page is updated when features or processing practices change. The last updated date appears at the bottom of the page.