Privacy Policy

The essentials

• RYTH stores your entries, goals and statistics only on your device. We run no server for this data and have no access to it.
• You don't need an account: no sign-up, no email address, no name.
• RYTH contains no ads, no tracking and no analytics tools.
• If you buy RYTH Premium, payment and subscription run through the App Store or Google Play. We use the service RevenueCat to unlock Premium. Nobody learns anything about your entries in the process.
• This website uses no tracking and only one strictly necessary cookie – and only if you pick a language yourself.

Controller

The controller responsible for data processing in the RYTH app and on this website is:

TRN Studios
Represented by Hasan Turan
Oesterheidestr. 10
44892 Bochum, Germany
Email: trnstudios@outlook.de

We have not appointed a data protection officer because we are not legally required to. If you have questions about privacy, just write to the address above.

App: Your data stays on your device

RYTH works without an account and without servers of our own. Everything you enter or set in the app is stored exclusively in your device's local storage. This includes:

• your entries: times of units smoked, skipped and added later, and Jokers used,
• your consumption details: type (cigarettes, heated tobacco or e-cigarette), previous amount, pack price and pack size,
• your plan: daily goal, step-down plan and its history, wake-up time and bedtime, time zone and paused days,
• progress and settings: milestones, breathing exercises, reminders and whether Premium is active.

This data is not transferred to us or to anyone else. We cannot view it, analyse it or restore it. Information about your smoking habits may be health-related. That is exactly why it only leaves your device in the following cases, all of which you control.

Device backups. Depending on your device settings, the app data is included in your iCloud backup or Google backup. Apple or Google are responsible for this under their own privacy policies; we have no access to it. You control backups in your device settings.

Widget and Apple Watch (iOS). So that the widget and the Watch app can show your timer and today's count, the app passes a summary (e.g. next time, today's count, savings) to the widget on the same device and sends it via Apple's WatchConnectivity directly to your paired Apple Watch. Entries you make on the Watch travel back to your iPhone the same way. No servers of ours are involved.

Sharing. When you share an image of your progress, the app creates the image on your device and opens your system's share sheet. You decide where the image goes. The app you choose, for example a messenger, is then responsible for any further processing.

Deleting. In the app's settings you can reset all entries at any time; this cannot be undone. If you delete the app, your device also removes all locally stored data.

App: Reminders and permissions

RYTH reminds you when your next one is due. The app schedules these notifications locally on your device. There is no push server, and we receive no device token for notifications. The app asks for permission through the system dialog; you can withdraw it at any time in your device settings.

On Android, the app may also use the “Alarms & reminders” permission so that reminders arrive on time. RYTH does not use location, camera, microphone, contacts or health data (Apple Health, Health Connect).

App: Purchases and subscriptions (RYTH Premium)

App Store and Google Play. You buy Premium through the App Store (Apple Distribution International Ltd., Ireland) or Google Play (Google Ireland Limited, Ireland). Apple or Google handle the purchase contract, payment and subscription management under their own responsibility. We receive neither your name nor your email address nor any payment details. The privacy policies of Apple and Google apply.

RevenueCat. To verify purchases, unlock Premium and restore purchases on a new device, we use RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, USA, as our processor. The following is processed:

• a randomly generated identifier that is not linked to your name,
• purchase data from the store: product, purchase and expiry date, price and currency, store country, trial and renewal status,
• technical data: operating system and version, app version, device language and the IP address technically required for the connection,
• where you opened the Premium screen from (e.g. setup, statistics, widget), so we can see which pointers to Premium are helpful.

RevenueCat does not receive your entries, goals or any other information from the app. The legal basis is Art. 6(1)(b) GDPR (performance of the Premium contract); for where the screen was opened from, our legitimate interest in improving the app (Art. 6(1)(f) GDPR). Because RevenueCat is based in the USA, the transfer is safeguarded by the EU Standard Contractual Clauses, which are part of our data processing agreement with RevenueCat. Purchase data is kept as long as it is needed for your subscription and statutory retention periods apply. More in RevenueCat's privacy policy.

App: No ads, no tracking

RYTH contains no advertising and no advertising, tracking or analytics SDKs. We don't use an advertising ID (IDFA/AAID) and don't track you across other apps or websites. Apple and Google provide us with aggregated statistics at most (e.g. downloads or crash reports), crash reports only if you have allowed sharing with developers in your device settings.

When the app asks you for a rating, it uses Apple's or Google's rating dialog. We only see your rating as it is published in the store.

Website ryth-app.com

Hosting. The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. With every request, Vercel processes technically necessary data: IP address, date and time, the address requested, the previously visited page, and browser and operating system details. This serves to deliver and secure the website; the legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Vercel processes the data on our behalf and is certified under the EU-U.S. Data Privacy Framework.

Prices for your country. To show you the Premium price in your currency, Vercel derives your country from your IP address. Only the country code is sent to your browser; we don't store it.

Cookies. Only if you pick a language yourself do we store your choice in the cookie “NEXT_LOCALE” (content: the language code, lifetime: one year), so the website appears in that language on your next visit. This cookie is strictly necessary for a function you requested and therefore permitted without consent (Section 25(2) no. 2 of the German TDDDG). We use no other cookies, tracking or analytics tools.

Fonts. The fonts are served from our own server. No connection is made to Google or any other font provider.

Links to the stores. The links to the App Store and Google Play are plain links. No data is transferred until you click one; Apple's or Google's terms then apply.

Contact by email

If you write to us, we process your email address and the content of your message to reply to you (Art. 6(1)(b) or (f) GDPR). Our mailbox is provided by Microsoft (Outlook.com). We delete your message once your request has been dealt with, unless statutory retention obligations apply.

Your rights

You have the right at any time to:

• access the data stored about you (Art. 15 GDPR),
• have inaccurate data corrected (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on our legitimate interest (Art. 21 GDPR),
• withdraw consent you have given, with effect for the future (Art. 7(3) GDPR).

Just send us an email. Because we keep no accounts and don't know your app data, we can usually only match data held by RevenueCat using a reference you give us, for example the order number from Apple's or Google's purchase receipt.

You can also lodge a complaint with a data protection supervisory authority, for example the one responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

Other information

No obligation to provide data. You are not obliged to provide us with any data. Without the purchase data, however, Premium cannot be unlocked.

No automated decisions. We make no automated decisions within the meaning of Art. 22 GDPR and create no profiles.

Age group. RYTH is intended for adults.

Changes. If the app, the website or the law changes, we will update this policy. The version published here applies.