1. Controller Information

The controller of your personal data is:

Mateusz Kupczyk
ul. Jasnogórska 43/1, Częstochowa, Poland
NIP: 5732770289
Email: contact@ritma.app

2. Scope

This Privacy Policy explains how we process personal data when you use the Ritma mobile and web application (“App”), in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

3. Personal Data We Process

3.1 Account Data

• Email address (required)
• Password (stored in hashed form)
• Full name (optional)
• Language preference

Purpose: Account creation, authentication, and communication
Legal basis: Art. 6(1)(b) GDPR – performance of a contract

3.2 App Usage & User-Generated Content

• Tasks, comments, and attachments
• Weekly reflections and insights
• Gratitude entries
• Feeling check-ins (numeric scale)
• Meeting conclusions
• Activity logs

Purpose: Providing core app functionality
Legal basis: Art. 6(1)(b) GDPR

3.3 Technical & Device Data

• Device platform (iOS / Android)
• Timezone
• Push notification tokens
• Reminder preferences

Purpose: App operation, notifications, scheduling
Legal basis: Art. 6(1)(f) GDPR – legitimate interest in service operation

3.4 Error & Performance Data

We use error monitoring tools that may process limited personal data included in error reports.

Purpose: App stability and bug fixing
Legal basis: Art. 6(1)(f) GDPR

4. Third-Party Services

We use the following processors:

• Firebase Cloud Messaging (Google LLC) – push notifications
• Sentry – error tracking and diagnostics
• DigitalOcean (Frankfurt, EU) – hosting and database infrastructure

Data is processed under data processing agreements and, where applicable, standard contractual clauses.

5. Data Storage Location

All primary data is hosted in Frankfurt, Germany (EU).

6. Camera & File Access

The App may request access to your device camera or photo gallery solely for uploading attachments to tasks. Access is optional and controlled by your device settings.

7. Data Retention

We store personal data for as long as your account remains active or as required to provide the service.
Account deletion requests are handled manually upon user request.

8. Your Rights

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your account
• Restrict or object to processing
• Data portability

Requests can be submitted via the App settings or by email at contact@ritma.app.

9. Complaints

You may lodge a complaint with your local data protection authority.
In Poland, this is the President of the Personal Data Protection Office (UODO).