Privacy
Last updated 18 October 2026
Rhythm is the planning app at rhythm-dailysky.app. This page explains what the app stores, where it stores it, and who can reach it. It is written to be read, not to be survived.
Cycle and tracker data never leaves your device. If you turn on cycle tracking or create a custom tracker, those logs are written to your browser's local storage on the device you used, and nowhere else. They are not uploaded to our servers when you sign in. They are not included in the backup file you can export. They are not sent to any calendar, any analytics service, or any third party. There is no copy of them for us to lose, sell, or be compelled to hand over.
We built it this way on purpose. We can't hand over what we never have.
What Rhythm stores on your device
Rhythm works fully without an account. Used that way, everything stays in your browser's local storage and never reaches us at all:
- Your tasks, quarterly rocks, and plans
- Your chart placements, if you enter them
- Your check-ins — energy, mood, and journal lines
- Your personality-test results, if you record them
- Your cycle logs and custom tracker logs — these stay here permanently, whether or not you have an account
- Preferences like your theme and sort order
Clearing your browser data deletes all of it. That is why the app offers a backup file — and why the backup deliberately excludes cycle and tracker logs.
What happens if you create an account
Signing in is optional. It exists so your plans survive a lost phone and follow you between devices. When you sign in, these things sync to your private document in our database:
- Tasks, rocks, and plans
- Chart placements
- Check-ins and journal lines
- Personality-test results
- Your profile: handle, picture, and coaching-sharing preference
Cycle and tracker logs are not on that list and never will be. This is enforced in two independent places in our code: the sync layer has no path to send them, and our database rules reject them outright if anything ever tried.
We also store your email address and a user id from your sign-in method, so we know which account is yours.
Who can see your data
Your account document is readable and writable only by you. Our database rules enforce this per account — not as a setting, but as a condition on every read and write. No other user can reach your data.
Stephanie, as coach, can see your levels, rocks, and check-ins only if you are in a coaching tier and you have switched on "Sharing with Stephanie" in your account settings. That switch is off by default. Cycle and tracker data is never included, no matter what that switch says, because it never reaches a server in the first place.
Google sign-in
If you choose "Continue with Google," Google tells us your email address, your basic profile information, and an account identifier. We use these to create and identify your account. We do not receive your Google password.
Google Calendar
Rhythm can connect to Google Calendar so your dated tasks appear on your calendar and so the app can see when you are already busy before it calls a time favourable. This is optional, off unless you turn it on, and you choose which calendars are included.
- We request only the calendar access needed for those two functions.
- We use Google Calendar data only to provide those features to you.
- We do not use Google Calendar data to train models, and we do not sell, rent, or transfer it.
- We do not show it to any human except you, other than where required by law or to investigate a security issue.
- You can disconnect at any time in your account settings, or revoke access at myaccount.google.com/permissions. Disconnecting stops all further access.
Rhythm's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Cycle and tracker data is never written to any calendar. Putting reproductive health information on a third-party server, shared across devices and visible to anyone with calendar access, is precisely the exposure our device-only rule exists to prevent.
Who is responsible for your data
The business that runs Rhythm is the data controller. Questions, requests, or complaints go to unscheduled@protonmail.com and we answer within 30 days.
Why we are allowed to hold it
Where the UK or EU GDPR applies, our lawful bases are:
- Performing our contract with you — storing your tasks, plans and account so the app works.
- Your consent — notifications, calendar access, and sharing with a coach. Each is off until you turn it on, and you can withdraw any of them at any time without affecting the rest.
- Our legitimate interests — keeping the service secure and working. We do not profile you for advertising, because there is no advertising.
Cycle and tracker data has no lawful basis listed here because we never receive it.
Where it is stored
Rhythm runs on Google Firebase, and account data is stored on servers in the United States. If you are in the UK or EU, that is an international transfer, made under Google's Standard Contractual Clauses. Your device data — including everything cycle-related — is not transferred anywhere, because it does not leave your device.
Storage on your device
Rhythm uses your browser's local storage to hold your data and a few preferences. It is not used for tracking and it is not shared. We set no advertising or analytics cookies — there are no third-party scripts on this site at all, which is why you have never seen a cookie banner here. Clearing your browser data clears it.
Your rights, plainly
Depending on where you live, you can ask us to:
- Show you what we hold — though the app already does this; it is all on your screen.
- Correct it — you can edit anything directly.
- Delete it — from the app, or by writing to us.
- Hand it over in a portable file — that is the "Back up to file" button, and it works without asking us.
- Stop or limit processing, or object to it.
We do not sell your personal information, and we never have. We do not share it for cross-context behavioural advertising. If you are in California, that means there is nothing for you to opt out of — but you keep every right above regardless.
You can also complain to a regulator: the ICO in the UK, or your national authority in the EU. We would rather you told us first, but it is your right either way.
Deleting your account
You can delete your account yourself, from inside the app: open the account menu (the letter in the top right), and under Account tap delete my account, then confirm. It is a two-step so a stray tap cannot do it.
Deleting removes everything on our side — your synced data, any subscription, your coaching thread, anything you posted — and signs you out. Your subscription is cancelled first, so a deleted account never keeps paying. The app also clears this device, including the cycle and tracker logs that only ever lived here. There is no undo; if you want a copy first, use Back up to file before you delete.
If you cannot get into the app, write to unscheduled@protonmail.com from the address on the account and we will delete it for you, usually within a few days.
If something goes wrong
If a breach happens that puts your data at real risk, we will tell you and the relevant regulator without undue delay — and within 72 hours where the law requires it. We will say what happened rather than issuing a statement about how seriously we take security.
Automated processing
The coaching features use your data to generate written guidance, including with an AI model. That guidance is advisory: no automated decision is made about you that has a legal or similarly significant effect, nothing is decided about you without a human being able to review it, and you can ignore all of it. Cycle and tracker data is never sent to any model.
Who processes data for us
- Google Firebase — authentication, database, and hosting. Your synced account data lives here.
- Stripe — payments, once subscriptions launch. Stripe handles card details directly; we never see or store your card number.
- Anthropic — the AI model behind the coaching synthesis. When you ask for a coaching read, the business details it draws on (your level, season, rocks, energy, strengths, and record) are sent to Anthropic to generate the guidance, and are not used to train their models. Your cycle and tracker data is never included, because it never leaves your device.
That is the whole list. Rhythm contains no analytics, no advertising trackers, no session recording, and no third-party scripts. Nobody is watching how you use it.
How long we keep things
Synced account data is kept while your account exists. Delete your account and it is removed from our active database; backups roll off within 30 days. Device data lives until you clear it — and cycle tracking has a one-tap erase in the Me tab that removes every cycle log immediately.
Your rights
You can export everything we hold, correct it in the app, or ask us to delete it. Depending on where you live you may also have the right to object to processing or to complain to a regulator. Write to us and we will help; we are not going to make you fight for your own data.
Children
Rhythm is not intended for children under 13, and we do not knowingly collect their information.
Changes
If this policy changes materially we will say so in the app rather than quietly editing this page. The device-only promise about cycle and tracker data is not something we intend to change; if it ever were, it would require a separate, explicit opt-in from you, and the wording inside the app would be corrected first.