Privacy Policy — Rhythms

Last updated: 26 August 2026

Rhythms is developed and published by Candan Weng, an independent developer. Contact: candanweng@gmail.com. In this policy, “we” means that developer, and “the app” means the Rhythms iOS app.

The short version

Rhythms collects nothing. There is no account, no analytics, no advertising, no tracking, no third-party SDK that reports anything, and no server belonging to us. Your tasks stay on your device unless you deliberately export them, or turn on iCloud sync — which puts them in your iCloud account, not ours.

What is stored, and where

Everything you enter — task names, notes, categories, schedules and your completion history — is stored in a database inside the app’s own container on your device. We cannot see it, and neither can anyone else without access to your unlocked device.

iCloud sync

iCloud sync is off by default. If you turn it on, the app keeps a copy of your library in your own iCloud Drive, in a file named rhythms-library.json inside a folder called Rhythms. Your other devices signed in to the same Apple Account read and write that same file, which is how they stay in step.

That file is in your iCloud account, under Apple’s terms and your own iCloud settings. We have no access to it — there is no server of ours involved, no account with us, and no key we hold. You can open, copy or delete the file yourself from the Files app or from iCloud Drive on a Mac.

Turning sync off leaves the file where it is, because your other devices may still be using it. Deleting the file, or turning off iCloud Drive, is done in Apple’s own settings.

If you never turn sync on, nothing about your library leaves the device. If you delete the app and had sync off, that data is deleted with it.

What leaves your device

When	What	To whom
You buy Pro, subscribe, or leave a tip	The purchase request	Apple
You tap “Restore purchases”	A request for your past purchases	Apple
You export a backup	The file, to wherever you send it	Chosen by you
You turn on iCloud sync	Your tasks, categories and completion history	Your own iCloud account

Purchases and subscriptions are handled entirely by Apple’s App Store using Apple’s own StoreKit. We never see your payment details, your Apple Account, or your name, and we receive no personal information from Apple that identifies you. The app stores only a local note of which product you bought, so it knows to stay unlocked. Apple’s handling of that transaction is covered by Apple’s Privacy Policy.

Rhythms makes no network requests of its own. Purchases go through Apple’s StoreKit, and iCloud sync is carried by the operating system’s own iCloud Drive machinery — the app hands a file to iOS or macOS and the system does the rest.

Data we receive from Apple

If you choose to share crash and usage data with developers in Settings › Privacy & Security › Analytics & Improvements, Apple may show us anonymised, aggregated crash reports and sales figures through App Store Connect. We cannot identify you from them and we do not combine them with anything else. This is Apple’s reporting, not collection by the app.

Third parties

We share no data with any third party, because we hold none. There are no advertising networks, analytics providers, or data brokers involved in Rhythms, and no data is ever sold. Apple is the only party in the picture, and only for payments, as described above.

Notifications

Reminders are scheduled locally by iOS on your device. They are not push notifications; nothing is sent through any server. If you decline notification permission, the rest of the app works normally.

Data you export

An exported backup is a plain JSON file containing your tasks, categories and completion history. Once you have shared or saved it, where it goes and who can read it is determined by where you put it. We have no access to it.

Retention and deletion

We retain nothing and cannot delete anything on your behalf, because we never hold any of it. On the device, the data lives for as long as the app is installed; deleting the app removes the database and every task, category and completion record with it, permanently.

If you have used iCloud sync, a copy also lives in your own iCloud account, and deleting the app does not remove it — that copy is yours to delete, from the Files app or from iCloud Drive on a Mac. Export a backup first if you want to keep a copy of either.

Children

Rhythms is not directed at children and collects no data from anyone, including children. It contains no user-generated content, no messaging, and no links out to the open web other than the ones named in this policy.

Your rights

Under the GDPR, the CCPA and comparable laws you have rights to access, correct, export and delete your personal data. Because we hold no data about you, there is nothing for us to disclose, correct or delete — the data is already entirely in your hands. To export it, use Settings › Backup › Export a backup. To remove everything, delete the app — and, if you turned on iCloud sync, delete the Rhythms folder from iCloud Drive. If you have a question about these rights, write to candanweng@gmail.com and we will answer within 30 days.

Changes

If this policy changes, the updated version will be published here with a new date. Material changes will also be noted in the app’s release notes.

Contact

Questions about this policy: candanweng@gmail.com

Support · Terms of Use