Privacy Policy — Rhythms
Last updated: 26 August 2026
Rhythms is developed and published by Candan Weng, an independent developer. Contact: candanweng@gmail.com. In this policy, “we” means that developer, and “the app” means the Rhythms iOS app.
The short version
Rhythms collects nothing. There is no account, no analytics, no advertising, no tracking, no third-party SDK that reports anything, and no server belonging to us. Your tasks stay on your device unless you deliberately export them, or turn on iCloud sync — which puts them in your iCloud account, not ours.
What is stored, and where
Everything you enter — task names, notes, categories, schedules and your completion history — is stored in a database inside the app’s own container on your device. We cannot see it, and neither can anyone else without access to your unlocked device.
iCloud sync
iCloud sync is off by default. If you turn it on, the app
keeps a copy of your library in your own iCloud Drive, in a file named
rhythms-library.json inside a folder called Rhythms. Your other
devices signed in to the same Apple Account read and write that same file,
which is how they stay in step.
That file is in your iCloud account, under Apple’s terms and your own iCloud settings. We have no access to it — there is no server of ours involved, no account with us, and no key we hold. You can open, copy or delete the file yourself from the Files app or from iCloud Drive on a Mac.
Turning sync off leaves the file where it is, because your other devices may still be using it. Deleting the file, or turning off iCloud Drive, is done in Apple’s own settings.
If you never turn sync on, nothing about your library leaves the device. If you delete the app and had sync off, that data is deleted with it.
What leaves your device
| When | What | To whom |
|---|---|---|
| You buy Pro, subscribe, or leave a tip | The purchase request | Apple |
| You tap “Restore purchases” | A request for your past purchases | Apple |
| You export a backup | The file, to wherever you send it | Chosen by you |
| You turn on iCloud sync | Your tasks, categories and completion history | Your own iCloud account |
Purchases and subscriptions are handled entirely by Apple’s App Store using Apple’s own StoreKit. We never see your payment details, your Apple Account, or your name, and we receive no personal information from Apple that identifies you. The app stores only a local note of which product you bought, so it knows to stay unlocked. Apple’s handling of that transaction is covered by Apple’s Privacy Policy.
Rhythms makes no network requests of its own. Purchases go through Apple’s StoreKit, and iCloud sync is carried by the operating system’s own iCloud Drive machinery — the app hands a file to iOS or macOS and the system does the rest.
Data we receive from Apple
If you choose to share crash and usage data with developers in Settings › Privacy & Security › Analytics & Improvements, Apple may show us anonymised, aggregated crash reports and sales figures through App Store Connect. We cannot identify you from them and we do not combine them with anything else. This is Apple’s reporting, not collection by the app.
Third parties
We share no data with any third party, because we hold none. There are no advertising networks, analytics providers, or data brokers involved in Rhythms, and no data is ever sold. Apple is the only party in the picture, and only for payments, as described above.
Notifications
Reminders are scheduled locally by iOS on your device. They are not push notifications; nothing is sent through any server. If you decline notification permission, the rest of the app works normally.
Data you export
An exported backup is a plain JSON file containing your tasks, categories and completion history. Once you have shared or saved it, where it goes and who can read it is determined by where you put it. We have no access to it.
Retention and deletion
We retain nothing and cannot delete anything on your behalf, because we never hold any of it. On the device, the data lives for as long as the app is installed; deleting the app removes the database and every task, category and completion record with it, permanently.
If you have used iCloud sync, a copy also lives in your own iCloud account, and deleting the app does not remove it — that copy is yours to delete, from the Files app or from iCloud Drive on a Mac. Export a backup first if you want to keep a copy of either.
Children
Rhythms is not directed at children and collects no data from anyone, including children. It contains no user-generated content, no messaging, and no links out to the open web other than the ones named in this policy.
Your rights
Under the GDPR, the CCPA and comparable laws you have rights to access, correct, export and delete your personal data. Because we hold no data about you, there is nothing for us to disclose, correct or delete — the data is already entirely in your hands. To export it, use Settings › Backup › Export a backup. To remove everything, delete the app — and, if you turned on iCloud sync, delete the Rhythms folder from iCloud Drive. If you have a question about these rights, write to candanweng@gmail.com and we will answer within 30 days.
Changes
If this policy changes, the updated version will be published here with a new date. Material changes will also be noted in the app’s release notes.
Contact
Questions about this policy: candanweng@gmail.com
