Privacy Policy.

RhythmBio needs your date of birth to compute your cycles, and an email address so you can sign in. Anything else you give us (journal entries, family members, a calendar feed) exists to make the app useful to you. We never sell your data, we don't run advertising trackers, and you can delete your account and everything in it at any time from Settings.

Account data: your email address and a password (stored only as a secure hash by our authentication provider), plus your first name and date of birth.

Content you create: journal entries (sliders and notes), family members you add (their name, date of birth, and relationship), and, if you connect one, your calendar feed URL and the event titles it exposes.

Subscription data: if you upgrade, payments are processed by Stripe. We never see or store your card number. We store only your Stripe customer reference and subscription status.

Notifications: if you enable push notifications, we store the subscription token your browser generates.

We do not collect analytics identifiers, advertising IDs, or location data.

Your date of birth seeds the biorhythm calculations that power every screen. Your journal and cycle data are used to generate your daily briefings. When AI-written briefings are enabled, the relevant context (your first name, cycle positions, and recent journal signals) is processed by Anthropic's API to write them. Your email address is used for sign-in, account notices, and the daily briefing email if you turn it on.

Your data is stored with Supabase in the European Union (Ireland, eu-west-1) and encrypted in transit. The app is hosted on Vercel. Emails are sent via Resend. Payments run through Stripe. These providers process data on our behalf and under their own security programmes; none of them are permitted to use your data for their own purposes.

We don't sell your data. We don't share it with advertisers. We don't use third-party analytics trackers or advertising cookies. The only cookies we set are the ones that keep you signed in.

You can access and correct your profile in Settings at any time. Deleting your account from Settings permanently removes your profile, journal entries, family members, briefings, and push subscriptions. You also have the right to request a copy of your data, or to ask us to correct or erase it. Email us and we'll act on it promptly.

RhythmBio is not intended for children under 16. If you believe a child has created an account, contact us and we'll remove it.

If this policy changes materially, we'll note the new date at the top of this page and, for significant changes, tell you by email. Questions or requests: hi@rhythmbio.app.