Ritmo Privacy Policy

Last updated: 08/09/2026

Ritmo is a to-do app. This page says what is stored, where and why, in the same terms the code is written in. If anything here does not match what the app does, that is a bug and we want to hear about it.

Who is responsible

To be completed by the operator: Brobit Software's legal name, tax identifier and registered address, plus a contact address for privacy matters. Without these the page does not meet the GDPR; they were left blank on purpose rather than invented.

You can use Ritmo without an account

If you do not sign in, your tasks never leave your device. Nothing is sent to any server and none of your data exists anywhere else. An account is only needed to sync across your devices and to share projects with other people.

What is stored once you sign in

Data	Why
Your name	It is what people you share a project with see.
Your email address	It identifies your account, lets others invite you, and is what makes signing in with Apple or Google land on the same account rather than two.
An identifier from Apple or Google	It proves it is you when you sign in. No password from those accounts is ever stored.
Your password, if you register with email	Stored as a hash: never in the clear, and it cannot be recovered — only changed.
Your tasks, projects, sections, labels, comments and attachments	This is the app's content. It is stored so it can sync across your devices.
A device token for notifications	To deliver the reminders you create. It is an Apple token, not a permanent device identifier.

What is not stored

No analytics, no tracking. Ritmo ships no analytics, advertising or measurement SDK. Which screens you open and how long you take are not recorded.
Nothing is sold or shared with anyone for commercial purposes.
No calendar content is copied. If you connect Apple Calendar, the server stores only the event and calendar identifiers, so it knows which task goes with which event. Not the title, not the attendees, not the notes.
Your location never reaches our server. See below.

Location and weather

The home screen greeting can show the weather. For that the app asks for your location and passes it to Apple's WeatherKit, which returns the forecast. That location is never sent to Ritmo's servers and is not stored anywhere. Decline the permission and the app works the same, without the weather.

Who it is shared with

Who	What they receive	Why
Apple	What Sign in with Apple and push notifications require and, if you allow it, your location for the weather.	Platform services.
Google	Only if you choose to sign in with Google: what is needed to verify your identity.	Authentication.
Other people	Your name and public handle, and the content of the projects you share.	Collaboration, and only when you start it.

There is no other third party. Ritmo's server is our own, not a vendor reselling services on top of your data.

How long

Your account's content, for as long as the account exists.
Your session: the access token lasts 1 hour and the refresh token 90 days, replaced every time it is used.
Links sent by email are single-use and expire: 15 minutes for sign-in, 1 hour for password reset, 24 hours for verification.

Your rights

You may request access, rectification, erasure, restriction, objection and portability, and lodge a complaint with your supervisory authority. Your name and email you can change yourself, in the app's Settings.

You can delete your account from inside the app, under “My details”. It is really deleted: no flag, no copy in a bin. The only thing that survives are the projects you shared with other people, which stay with them inside — their work is not yours to delete.

Children

Ritmo is not directed at children under 14 and does not knowingly collect their data.

Changes

If this policy changes, the date above changes too. A change affecting what is done with your data is also announced inside the app.