Privacy Policy · rythme

In short. rythme never sells your data. Health data from Apple Health or Health Connect is read only, never used for advertising, and your body composition stays on your phone unless you explicitly include it in an AI analysis. You can delete your account and all your data at any time.

This policy explains what data the rythme app (bundle ID com.ellzx.rythme, on the App Store and Google Play) processes, why, who it is shared with and how to exercise your rights.

Who we are

rythme is published by an individual entrepreneur established in France (publisher name on Google Play: WINVO), the data controller. Details: legal notice. Contact: elloumi.zi@gmail.com.

Data we process

Data	Why	Where it goes
Account: random technical ID; if you sign in with Apple or Google, email (possibly hidden by Apple), name and, for Google, profile photo	Run your account, sync across devices	Our servers (Supabase)
Profile: first name, usual wake-up and bedtime, units, targets	Personalise the app	Our servers
Training log: workouts, sets, loads, reps, RIR, programs, custom exercises, plans	The workout tracker itself, history and backup	Your phone and our servers
Day log: sleep, meals and their estimated nutrients, fasting, water, mood, daily check-ins	Show your day next to your training	Our servers
Steps, workouts and sleep read from Apple Health / Health Connect	Fill your day log automatically	Our servers
Body composition read from Apple Health / Health Connect (weight, body fat, lean mass, bone mass, body water, basal metabolic rate, height)	Show it in Progress › Body	Your phone only, unless you consent to an AI analysis
Meal photos you choose to scan	Estimate foods and nutrients	Sent to our server and Mistral AI, not stored
Questions and data sent to AI features	Answer your question or build your plan	Our server and Mistral AI (processor, under its API terms); not stored by rythme
Purchase status (subscription)	Unlock Premium	Apple / Google, RevenueCat
Push token, time zone, language	Send the weekly review you enabled	Our servers
Advertising ID, IP address, device data (free version only, according to your choices)	Show and measure ads	Google AdMob
Crash reports and performance (device model, OS, app version)	Fix crashes and slowness	Expo

rythme does not use your location, contacts, microphone or heart-rate data. Face ID and fingerprint unlocking are checked by your phone; rythme never receives biometric data.

Health data (Apple Health and Health Connect)

If you allow it, and only for the types you enable, rythme reads steps, workouts (type and duration), sleep periods and body composition. It reads while the app is open, never in the background, and never writes to Apple Health or Health Connect.

Data from Apple Health and Health Connect:

is never sold, rented or transferred to data brokers;
is never used for advertising, ad targeting, marketing or profiling, and is never shared with ad networks;
is never used to assess creditworthiness, insurability or eligibility;
is not read by any human, except with your explicit consent for a support request, for security, or to comply with the law;
is shared only with our host (Supabase) for steps, workouts and sleep, and with Mistral AI only when you explicitly consent to an AI analysis.

The use and transfer of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. Data from Apple HealthKit is used in accordance with Apple's HealthKit guidelines.

You can revoke access at any time in Apple Health (Sharing › Apps › rythme) or in Health Connect (App permissions › rythme).

AI features

Some features use AI from Mistral AI (France), called by our server: meal scan, Ask rythme, free-text logging, daily tips, the training coach and the AI plan (Premium). When you use them, you are interacting with an AI system, and the app labels these features as AI. Only the values needed for your request are sent (for example averages from your log, a summary of your training, the text you type). Results are suggestions: nothing changes your program until you accept it, and anything you accept can be undone. More detail: how rythme uses AI.

Health-app data and AI. Weight and body composition from Apple Health or Health Connect stay on your phone by default. When you start an AI plan, rythme asks whether to include them; only if you explicitly agree are they sent to Mistral AI through our server, for that analysis only. You can withdraw this consent anytime in You › AI & data.

Subscriptions

Apple or Google process payments; we never see your payment details. RevenueCat receives your technical rythme ID and the purchase confirmation to unlock Premium.

Advertising (free version only)

Free users may see ads served by Google AdMob. In the European Economic Area, the UK and Switzerland, Google's consent form collects your choice before any ad request; on iPhone, rythme then asks for tracking permission (App Tracking Transparency). Depending on your choices, AdMob may use your device's advertising ID, IP address and technical data to show, measure and, if you allow it, personalise ads. No health data and no data from your log is ever sent to AdMob. Premium removes ads. You can change your choice in You › Security › Ad choices, or refuse tracking in your phone settings.

Legal bases (EU/UK)

Contract: account, training and day log, sync, subscriptions, AI features you request.
Explicit consent: health data, including health-app data sent to AI; ads and tracking; push notifications.
Legitimate interest: crash and performance diagnostics, security.
Legal obligation: purchase records kept by Apple, Google and RevenueCat.

Processors and transfers

Supabase: database, sign-in and server functions; servers in London (UK, adequacy decision).
Mistral AI (France): AI features.
RevenueCat (USA): subscription management.
Google AdMob (Google Ireland / Google LLC): ads in the free version and consent management.
Expo / 650 Industries (USA): app updates and diagnostics.
Apple and Google: sign-in, distribution and payments, under their own policies.

Transfers to the USA rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. All data is encrypted in transit (HTTPS) and database access is restricted, row by row, to the account owner.

Retention

We keep your data while your account exists and delete it when you delete your account. Host backups are erased within 30 days. Purchase records are kept by Apple, Google and RevenueCat under their legal obligations.

Delete your account and data

In the app: You › Delete my account (or You › Security › Delete my data if you use rythme without signing in). Deletion is immediate and permanent. Steps, including without the app: Delete your account.

Your rights

EU, UK and Switzerland (GDPR): access, rectification, erasure, restriction, objection, portability, and withdrawal of consent at any time. You can also complain to your data protection authority (in France, the CNIL).

United States (including California and other state privacy laws): you can request to know, access, correct and delete your personal data. We do not sell personal data. Personalised ads in the free version may count as "sharing" for cross-context behavioural advertising under some state laws: you can opt out in You › Security › Ad choices, by refusing tracking on iPhone, or with Premium. We honour opt-out requests without discrimination.

To exercise any right, email elloumi.zi@gmail.com. We reply within one month (45 days where US law allows).

Children

rythme is not intended for children under 16 and does not knowingly collect their data. If you believe a child has used rythme, contact us and we will delete the data.

Not medical advice

rythme is not a medical device. Figures shown, including fatigue and strength, are estimates from your training history, not physiological measurements, and do not replace advice from a health professional.

Changes

This policy evolves with the app; the date at the top shows the last update. Important changes are announced in the app.