Privacy Policy

Ritmoso is a free app for tracking habits, tasks, goals and important dates. The controller of your personal data, under Brazil's General Data Protection Law (LGPD), is Ritmoso.

For anything about privacy, including exercising your rights, contact us at support@ritmoso.app. This contact also serves as the channel of our data protection officer.

Account data. Name, e-mail and password. Your password is never stored as text: we only keep a cryptographic hash that can't be reversed. Your account also has a unique username (your @), made from your name, never from your e-mail, which you can change in Settings. We also keep whether and when you confirmed your e-mail.

Ratings and help requests. When you use "Rate" or "Help", we keep what you wrote, the rating and the topic and, only if you allow it, the page, the app version and your browser. The message is also e-mailed to our contact address so we can reply.

Google sign-in. If you choose to sign in with Google, we receive your Google account identifier, name, e-mail (and whether it's verified) and profile picture. We never receive your Google password or access to any other data in your Google account.

What you record. Habits, check-ins, tasks, goals, dates, notes and preferences (such as the day your week starts). This content is private: only you can see it.

Daily summary e-mail. Only if you turn it on in Settings: we keep that choice, your browser's time zone and language (to know what your "today" is and which language to write in) and the day it was last sent. The e-mail lists the titles of the day's habits, tasks and dates.

Technical data. To protect accounts against repeated attempts, we temporarily record the IP address and e-mail used when signing in, signing up and resetting a password. Our hosting provider also keeps short-lived access logs (such as IP and browser) for operations and security.

Error reports. When something fails, we automatically record a technical report: the error message and where it happened in the code, the page (without address parameters), the browser type and your account's internal identifier. These reports never include your name, e-mail, IP address or what you record in the app.

Usage metrics. We record that certain actions happened, such as signing up, the first visit of the day, creating an item (only its type: habit, task, goal, date or category), completing a task, checking in a habit, moving a goal forward and appearance choices, linked to your account's internal identifier. These records never include titles, notes, messages or the content of what you record. On the public pages we count visits in aggregate, without cookies and without identifying visitors.

We don't collect sensitive data, location, contacts or payment details.

• Providing the service: creating and keeping your account, storing and syncing your data across devices, and signing you in. Legal basis: performance of a contract (LGPD, art. 7, V).
• Security: limiting sign-in attempts, keeping sessions secure and preventing abuse. Legal basis: legitimate interest (art. 7, IX).
• Fixing errors: finding and fixing failures in the app through error reports. Legal basis: legitimate interest (art. 7, IX).
• Improving the app: understanding which features are used, where people give up and whether they come back, through usage metrics. Legal basis: legitimate interest (art. 7, IX).
• Service e-mails: sending the e-mail confirmation link after a password sign-up and the password reset link when you ask for it. We don't send marketing e-mails. Legal basis: performance of a contract (art. 7, V).
• Daily summary: if you turn it on, sending a morning e-mail with your day. Turn it off in Settings or through the link in every e-mail. Legal basis: consent (art. 7, I).
• Legal obligations: complying with court or authority orders, if any. Legal basis: compliance with a legal obligation (art. 7, II).

We only use essential cookies. There are no advertising, analytics or tracking cookies.

• ritmoso-session: keeps you signed in. Lasts up to 30 days and renews while you use the app.
• ritmoso-oauth-*: protect Google sign-in. Last 10 minutes.
• ritmoso-theme and ritmoso-locale: remember the theme and language chosen on this device. Last 1 year.
• ritmoso-tz: keeps the device's time zone, so pages arrive showing the right date for today. Lasts 1 year.
• ritmoso-demo: marks that you're in the demo (“Try without an account”). Goes away when the browser closes, when you leave the demo or when you sign in.

In the demo, the sample data and what you tick stay only in this browser tab's storage: nothing is sent to our servers and it all goes away when the tab closes.

Older versions of the app kept data in the browser's local storage. If any is found, it moves to your account on your first visit and is then removed from the browser.

We don't sell, rent or share your data for advertising. It's only processed by the providers that run the service, acting as processors on our instructions:

• Vercel Inc.: hosts the app and counts visits to the public pages in aggregate, without cookies.
• Neon: the database where your account and records are stored.
• Google: Google sign-in (if you use it) and the mailbox where we read messages sent to our contact address.
• Resend: delivery of service e-mails (e-mail confirmation, password reset and the daily summary).
• ImprovMX: forwarding of messages sent to the domain's contact address to our mailbox.
• Rollbar: receives and analyzes error reports.
• GitHub: stores the daily database backup, encrypted (AES-256) before it leaves our environment; GitHub doesn't have the key to open it.

We may also share data when required by law or by order of a competent authority.

These providers' servers are in the United States, so your data is transferred outside Brazil, relying on the contractual guarantees and security measures these providers offer, under article 33 of the LGPD.

• Account and records: for as long as your account exists.
• Sessions: up to 30 days without use. Password reset links: 30 minutes.
• Sign-in attempt records: up to 1 hour, then deleted.
• Error reports: for a limited time, according to the provider's retention period.
• When you delete your account, everything is removed from the database immediately. The daily (encrypted) backups may hold it for up to 14 days until they're deleted automatically; they're only used to restore the service after a failure.

The LGPD (art. 18) gives you the right to: confirmation that we process your data, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about who we share it with, deletion of your data, and review of the legal bases we rely on.

You can do most of this yourself, right in the app:

• Correct: edit your records and your name at any time.
• Access and port: in Settings → Privacy, download all your data as JSON.
• Delete: in Settings → Privacy, delete your account and all its data.

For anything else, write to support@ritmoso.app. We reply within 15 days. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).

All traffic is encrypted (HTTPS). Passwords and session tokens are only stored as hashes, sign-in attempts are limited and every database query is scoped to the user's own data. No system is 100% secure, but if an incident could put you at risk, we'll notify you and the ANPD.

Ritmoso isn't directed at children. If you're under 18, use the app with the knowledge and permission of your parents or guardians.

We may update this policy. The date at the top shows the latest change. If a change is significant, we'll let you know by e-mail before it takes effect. See also the Terms of Service.