Privacy policy

1. Who is responsible for your data

The data controller is YRD SOLUTIONS S.R.L., tax ID 50377628, Trade Register no. J13/2265/2024, registered office at Șos. Mangaliei nr. 57, bl. SM1, sc. B, et. 1, ap. 50, Constanța, jud. Constanța, România. For any question or request about your data, write to us at support@ritmo.social.

This policy applies to the Ritmo app for iPhone and to the site ritmo.social.

2. What we process

Account data: your email address, an account identifier and your phone's language (so we write to you in your language).

Business data: the name, type and description of your business, the language of your posts, your goals, the age of your audience, your tone and the networks you post on, as you enter them in the app.

Content: the planned posts and their text, your logo and the pictures you add to posts.

Purchase data: which subscription or packs you have, their status and renewal dates. We neither receive nor store your card details: Apple takes the payment.

Usage data: how many posts you have used of the free ones, of your subscription and of your packs.

Technical data: IP address and request details, kept briefly in server logs for security and troubleshooting.

We show no advertising, do not track you across apps and do not sell data.

3. Why we process it

To provide the service (performance of the contract): creating your account, writing your posts, keeping them so you find them on another phone, applying your plan's limits.

To meet legal obligations, such as accounting and consumer protection rules.

For our legitimate interest in keeping the service secure and preventing abuse, including taking the free posts more than once.

4. Who receives it

We use providers that process data on our behalf, only as far as the service needs:

Supabase (accounts, database and files; servers in the European Union).

Vercel (hosting of the server and the site).

Anthropic (writing the text; United States). It receives the description of your business and the topics of the posts, not your email address.

TypeSafe (choosing suitable templates). It receives the description of your business, not your email address.

RevenueCat and Apple (subscriptions and purchases).

Resend (sending the email with the sign-in code).

Bunny (delivery of the Ritmo gallery pictures).

Some providers process data outside the European Economic Area. In those cases the transfer relies on the European Commission's standard contractual clauses or on an adequacy decision.

We may disclose data to authorities when the law requires it.

5. How long we keep it

We keep account data, business data and content for as long as you have an account. When you delete your account, we delete them from our servers, together with your files.

After deletion we keep a one-way fingerprint (hash) of the email address, with the number of free posts used, so that those posts are given once to each person. The address cannot be recovered from the fingerprint.

Technical logs are kept briefly, as a rule no longer than 30 days. Accounting records are kept for as long as the law requires.

6. Data on your phone

The app keeps a copy of your profile, posts and pictures on the phone, so it is fast and works offline. It asks for access to Photos only when you choose a picture or save a post, and to notifications only if you turn on reminders, which are scheduled on the phone.

7. Your rights

You have the right to ask for access to your data, for its correction or deletion, for restriction of processing, for data portability, and to object to processing based on legitimate interest.

You can delete your account and data directly in the app, in Settings. For other requests write to us at support@ritmo.social; we answer within one month.

If you believe your data is processed wrongly, you may complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or to the authority of your country.

8. Security

Data travels encrypted, and every account can read and write only its own data. No system is perfectly secure; if an incident affects your data, we tell you as the law requires.

9. Children

The service is not for people under 18 and we do not knowingly collect data from children.

10. Changes

We may update this policy. The current version and its date are on this page; we announce important changes in the app or by email.