Privacy policy of the Ritm app

Version of 26 October 2026. The Russian version is the original; this is a translation.

In short

Your tasks, schedule, notes and settings are stored on your phone. If you choose to sign in with Google (“Account and sync”), a copy is kept in Google Firebase cloud under your account, so you can move to a new phone or use two devices. Without signing in, your data goes nowhere. With your permission the app sends anonymous statistics: which features are used. It helps us understand what to improve and what to remove.

What is stored on the phone

• Tasks, notes, schedule, “done” marks and settings — in the app’s storage.
• Backups — in the “Downloads/Ritm” folder on the phone, if enabled.
• Your AI key, if you entered one. It is stored only on the phone and never goes into backups.

Account and cloud — only if you signed in with Google

Signing in is optional: everything works without it. If you tap “Sign in with Google”:

• Firebase Authentication (Google LLC) receives your name, email address and Google account ID — to recognise you on another phone.
• Cloud Firestore (Google LLC) stores your Ritm data: tasks, notes, schedule, week templates, check-offs, settings, profile, and photos, files and voice recordings from notes (up to 15 MB each). Only your account can access it: the database rules let nobody else read it, including other users.
• Data is transmitted encrypted and used only for syncing. We don’t read it, sell it or use it for advertising.
• Sign out in “Me” → “Account and sync” → “Sign out”: the data stays on the phone and the cloud copy stops updating.

Ritm Family — only if you created or joined a family

• Members of your family (up to 6 people) see your name and email address from your Google account, plus the shared tasks, events, invitations and lists you add to the family, and your answers to invitations.
• From your personal plan the family sees, for the next 14 days, only activity times and — as you choose — their type, the word “busy”, or the name. Notes, journals, summaries and free time are never shared. You can hide a whole day.
• The schedule of a person “without a phone” (for example, a child) is kept by the adult who added them: only the name and activity times that adult enters go to the family.
• For notifications (“you got a task”, “you’re invited”) the cloud stores your phone’s Firebase Cloud Messaging address (Google LLC). Notifications are sent by our server on Cloudflare Workers (Cloudflare, Inc.); it checks that sender and recipient are in the same family; it doesn’t keep the notifications, and technical server logs are deleted after a few days.
• Subscription: the cloud stores the subscription end date and how it was obtained (trial, code, transfer). If you pay by bank transfer, the developer receives a request with your name, email, amount and the receipt screenshot you attach. It is used only to confirm the payment and for income records; we never receive bank card data.
• Leave a family in “Me” → “Ritm Family”. Your personal plan stays with you; tasks and events you added stay with the family. The creator can delete the family — then shared tasks, events and lists are erased for everyone.

What is sent if you allowed statistics

Google Analytics for Firebase (Google LLC) receives events such as “marked an activity as done”, “opened Extend”, “changed the sound setting”. Events may have simple parameters: activity type (e.g. “english”), duration as a range (under 15 minutes, 15–60, over 60), step number, yes or no.

Firebase also collects technical data itself: phone model, Android and app version, language, country and city by IP address, session times and a random installation ID.

Crash reports (Firebase Crashlytics, Google LLC) — under the same permission. If the app closes with an error, a report is sent: where in the code the error happened, phone model, Android and app version, time and a random installation ID. Your tasks, notes and personal data are not included. Google keeps crash reports for 90 days.

What is never sent to statistics

• Titles and texts of tasks, notes and activities, tags, your profile (to the cloud — only if you signed in, and only to your account).
• Name, phone number, email, contacts (name and email — only to the sign-in service, if you signed in with Google).
• Precise location. The city for the weather forecast is chosen on the phone and is not part of the statistics.
• Advertising ID. The app doesn’t collect it and shows no ads.

Other services the app contacts itself

• Weather forecast (Open-Meteo): receives only the coordinates of the chosen city or place, without any data about you.
• AI, when you use its suggestions: receives the request text (e.g. a task title to split it into steps) and your profile. The built-in AI works through Ritm’s server on Cloudflare: it forwards the request to Google Gemini (or, when Gemini is busy, to Cloudflare Workers AI models) and returns the answer without storing anything. A random installation number is sent with the request — only to limit the number of requests per day; it is not linked to your name or phone. Google processes the request under its own terms and may use it to improve its models, so don’t put anything into your profile you don’t want to share. If you connected your own key, the request goes directly to the service you chose, bypassing Ritm’s server.
• Currency rates (open.er-api.com) — for spending totals in the journal: the app only requests exchange rates and sends no data about you.
• Bug report: sent only when you tap “Send report” yourself and choose where to send it. It contains the phone and app technical log and what you wrote. Your tasks and schedule are included only if you tick “Attach my data” yourself.

Permissions

• Notifications, exact alarms, showing over the lock screen — so that reminders and alarms fire on time, including when the phone is locked.
• Calendar — only if you turn on “Calendar events”: events are read and the plan is written to a separate “Ritm” calendar on the phone. Nothing is sent anywhere.
• Location — only if you choose weather “by phone location”: approximate coordinates go to Open-Meteo for the forecast. Location for the weather is never requested in the background.
• Background location — only if you add a place reminder (“when I get home”, “when I leave work”). The phone itself (through Google Play services) notices when you enter or leave the circle around a place, even when the app is closed. The coordinates of your places stay only on the phone: they are not sent to us, to the cloud or to statistics. Delete your places in Me → Places and the access is no longer used.
• Microphone — for voice input, only while you hold the microphone button. Speech is recognized by your phone’s speech recognition service (usually Google); the app receives text and keeps no recording. The recognized text may be sent to the AI as described above. The microphone is also used for voice notes: recording starts only after you tap "Record voice" and is stored only on your phone.
• Note attachments — photos, files and voice recordings you add to a task are stored on your phone inside the app. If you turn on copying of attachments, copies go to the Downloads/Ritm/вложения folder on the same phone. If you signed in with Google, copies are saved to your cloud as described above. Nothing else is uploaded.

Why

Statistics — to understand which features are used and which aren’t, and to make the app simpler. Cloud — so your data isn’t lost when you change phones. Data is not sold, not used for advertising and not shared with anyone except Google as a processor (statistics, sign-in and cloud).

How to turn it off

“Me” → “About” → “Send statistics”. After turning it off nothing is sent. Uninstalling the app deletes all its data from the phone, except backups in “Downloads”.

Retention

Google keeps statistics events for 14 months, then deletes them. The cloud copy of your data is kept while you use your account and is deleted immediately when you delete the account. Data is transmitted encrypted.

How to delete your data — Ritm (developer Pulsework)

1. Data on your phone (plan, tasks, notes, attachments, settings): uninstall Ritm — everything stored by the app is erased at once. Backups you saved in “Downloads/Ritm” stay until you delete that folder yourself.
2. Statistics (app usage events and the Firebase installation ID): turn off “Me” → “About” → “Send statistics” to stop collection, then email ritm.app.help@gmail.com with the subject “Ritm data deletion”. We delete the statistics linked to your device within 30 days and reply to confirm. Without a request, Google deletes statistics automatically after 14 months.
3. Account and cloud data (if you signed in with Google): in the app, “Me” → “Account and sync” → “Delete account” — all your data in the cloud (tasks, plan, notes, attachments, settings) and the sign-in account itself are erased at once. If the app is no longer installed, email ritm.app.help@gmail.com with the subject “Ritm account deletion” from the Google address you signed in with: we delete the account and all data within 30 days and reply to confirm.
4. AI requests are processed on the fly and not stored by us, so there is nothing to delete.

If you never signed in with Google, there is no account and none of your plan’s content on any server.

Children

The app is not intended for children under 13 and does not knowingly collect information about them. In Ritm Family an adult may add a child “without a phone” — just a name and a schedule entered by the adult; the child has no account.

Contact

Questions and data deletion requests: ritm.app.help@gmail.com.