This policy is from Connor Matthew Otto, who makes and runs the Rhythm Fit app ("Rhythm", "we"). It applies to "consumer health data" as Washington and Nevada law define it: information linked to you that identifies your past, present or future physical or mental health, including information we work out from other data.
This policy adds to our Privacy Policy.
| Category | What it includes | How we use it |
|---|---|---|
| Workout and effort data | Exercises, sets, reps, weights, workout time, workout heart rate and calories, the 1-5 mood and the 0-10 effort rating you can pick after a workout, and notes you type (which may mention your health) | To keep your training history, track progress and suggest your next weights |
| Body measurements | Body weight, waist, hips, arms, thighs, chest, neck and calves, height, birthday, gender | To fit suggestions to you, and to check you are 18 or over |
| Wearable readings (Oura, Whoop) | Heart rate, resting heart rate, heart-rate variability (HRV), sleep and sleep stages, breathing rate, skin temperature and its change from your normal, calories, and Oura's readiness, sleep and activity scores; some older Oura summaries also hold daytime stress | To give you Today's Read (Rhythm's daily suggestion) and fill in workout heart rate and calories |
| Apple Health readings | Heart rate, resting heart rate, HRV, breathing rate, sleep, wrist temperature, active calories, period and menopause records, protein and water | Same as above. These are read on your phone and not stored on our servers, except the heart rate and calories saved with a workout |
| Cycle data | Period and cycle dates, cycle phase, cycle status (for example pregnant, postpartum, birth control, perimenopause), daily check-ins | To shape suggestions around your cycle. Stored only on your phone, never on our servers. Oura period tags pass through our server to your phone without being saved |
| Inferences | Your daily readiness suggestion; whether a suggestion was eased because you might be getting ill | Worked out on your phone to give you Today's Read |
| Health-related preferences | App settings that can hint at health, such as the switch that hides nutrition numbers | So your preferences follow you to a new phone |
| Usage data, only if you say yes | Workout totals, the 1-5 mood, and your daily readiness in words, linked to a random account ID | To learn which features help and what to fix |
We collect this data only to provide the Rhythm features you ask for, and usage data only with your consent (section 5).
How we process it (Nevada). Your phone works out your suggestions. Our server gets your Oura and Whoop data from those companies. Our database (Supabase, in the United States) stores your account, training, app settings and Oura and Whoop summaries so they come back on a new phone. Cycle data and Apple Health readings are processed only on your phone.
We do not sell consumer health data. We do not share it for advertising.
| Who receives it | Category of recipient | Which health data | Why |
|---|---|---|---|
| Supabase (and Amazon Web Services under it) | Service provider: database host | Workout, body and wearable data; health-related preferences | To store your data for you |
| Cloudflare | Service provider: backup storage | A backup copy of the database above | To recover data after a failure |
| PostHog | Service provider: product analytics | Usage data, only if you say yes (section 1) | To improve the app |
| Sentry | Service provider: crash reporting | Crash reports. They are built to exclude cycle data and raw health readings; they may show which screen you were on | To fix bugs |
| Apple Health (on your phone) | At your direction | Your workouts, active calories and your effort rating, if you allow Rhythm to write to Apple Health | You asked Rhythm to save workouts there |
| People you send a routine link to | At your direction | A routine's name and exercise count (not health data, listed for completeness) | You chose to share it |
We use each service provider only to run Rhythm, under its terms, and not for its own purposes. We have no affiliates. We may disclose data if the law requires it.
Third-party tracking (Nevada). No other company collects your consumer health data across other apps or websites over time through Rhythm.
You have the right to:
How to ask:
When we answer: within 45 days of your request. If we need more time, we will tell you why within those 45 days, and we will finish within 45 more days. Requests are free.
Appeal: if we refuse your request, reply to our answer with the word "Appeal". We will answer in writing within 45 days and explain what we did or did not do and why. If we still refuse, we will tell you how to contact your Attorney General:
We will never treat you worse for using these rights.
To collect. We collect consumer health data only to provide the features you ask for: when you log a workout, connect a wearable, allow Apple Health, or turn on cycle tracking, you are asking for that feature. Before Rhythm connects Oura or Whoop, or asks Apple for Health access, the app tells you what it saves and asks you to agree. We collect usage data only after you tap "Share usage data" on the consent screen. That screen names the data, the purpose, who receives it (our analytics provider, PostHog), and how to turn it off.
To share. We share consumer health data only with the service providers in section 3, to run Rhythm, or at your direction. Your consent to usage data covers sending it to PostHog; you can withdraw it at any time in Settings → Legal & Data → Your Privacy, and collection stops at once.
New uses. We will not collect new categories of consumer health data, or use it for a new purpose, without telling you first and asking for your consent.
Sale. We do not sell consumer health data, and we will not do so without your separate, signed authorization.
When we change this policy, we change the effective date at the top. If a change is important, we email you at your account address before it takes effect, and ask for consent again where the law requires it.
team@rhythmfit.app · Post: 7864 Camino Huerta, San Diego, CA 92122