Terms & Privacy Policy

1 Acceptance of Terms

Rhythme ("the App") is provided by RANKLORE PTE. LTD., a company registered in Singapore ("we", "us"). By using the App, you agree to these Terms of Service and Privacy Policy ("Terms"). If you do not agree with any part of them, please do not use the App.

You must be at least 18 years old to use this App. Rhythme is for adults: we ask you to confirm you are 18 or over, and may ask for an optional age range and an optional birthday, with the year only if you choose to add it. If we learn that an account belongs to someone under 18, we close it and delete its cloud copy.

2 What Rhythme Is: Wellness, Not Medical

The App provides general wellness information, cycle tracking, lifestyle suggestions, and educational content based on self-reported data. It does not:

• Diagnose, cure, mitigate, treat, or prevent any disease or medical condition
• Predict fertility, pregnancy outcomes, or disease risk with medical certainty
• Replace consultation with qualified healthcare professionals
• Constitute medical advice or a medical service

Always seek the advice of your physician or other qualified health provider with any questions you may have regarding a medical condition. Never disregard professional medical advice or delay in seeking it because of something you have read in this App.

3 Personal Data We Collect

The Personal Data Protection Act 2012 (PDPA) of Singapore applies to the personal data Rhythme handles. We collect only what each feature needs. This page describes what the App actually does; it is not a certification of compliance.

Your diary stays on this phone unless you turn on cloud backup. Signing in sends your account and consent records; your diary itself is not uploaded. If you do, a copy of your entries, your getting-to-know-you answers and your cycle settings is kept in your account in a database hosted in Singapore. Other users cannot read it. Things you add yourself stay on your phone unless you choose otherwise: files you import from Apple Health or Google, a clinician summary or encrypted share you create and send, and anything you export. The camera heart-rate check reads your camera on the phone only: the camera picture is never recorded or sent, and a reading you choose to keep is saved in your diary on this phone. Rhythme shows no advertising, uses no third-party behavioural analytics or tracking, and does not sell your data.

Luna's AI help is paused. While it is paused, nothing from your diary is sent to any AI service. If it returns, it will run on a service licensed for Singapore, this policy will say exactly what it receives and where, and you will be asked again before anything is sent.

4 How We Use Your Data

We use your personal data only for these purposes:

• To run the App on your phone: cycle tracking, logging, reminders, patterns and the summaries you ask for
• To back up and restore your diary, if you turn on cloud backup
• Luna's AI help, currently paused (see section 3)
• Plaza groups and friends, only if you join or make a plaza card
• To improve logging, only if you turn on "Help improve logging": then group counts and averages across at least 20 adults, never your diary on its own
• To keep the service safe: limiting misuse, and answering reports in the plaza
• To answer you: sign-in codes by email, and replies to messages you send us

We will not use your personal data for any other purpose without asking you first.

5 Consent & Withdrawal

Keeping your diary on your phone is what the App is, so it is the one required data choice; signing in is how the App opens and is not a use of your diary. Every other use is a separate choice: cloud backup, Help improve logging, plaza groups and plaza friends (Luna's AI help is paused). New choices start off, choices you made before are shown as you left them, and every choice is recorded with the notice version you read.

You can withdraw at any time, as easily as you agreed:

• Turn any choice off under Your choices in You, or in Luna's settings
• Turn cloud backup off, or delete your account and its cloud copy, from Your account
• Leave a plaza group, or turn Plaza friends off
• Or write to us at the address in section 17

Turning something off stops that use from then on. Some features cannot work without the data they need.

6 Data Storage & Security

• On your phone: your diary is saved in this browser's storage. It is not encrypted by the App, so anyone who can open this browser on your phone may be able to read it. Please lock your phone with a passcode or biometrics.
• Cloud backup (optional): kept in a database in Singapore. Each account can read only its own rows. Our server functions use it to back up, restore and delete your diary, and authorised Rhythme administrators and the companies that run the database can reach records only when needed to run, secure or support the service; actions in the staff dashboard are logged.
• In transit: everything between the App and our servers uses encrypted connections (HTTPS).
• What staff see: the staff page shows counts and group averages, never anyone's diary. When someone reports a plaza card or note, staff see the two plaza cards (the names and looks people chose) and the reported phrase, to decide the report. Staff records name the staff member and what they did.

If a data breach happens, we will contain it and assess it as soon as practicable, aiming to finish within 30 days. If it is notifiable under the PDPA, we will tell the Personal Data Protection Commission as soon as practicable and within 3 calendar days of deciding so, and tell the people affected where the law requires it, with steps they can take.

7 Data Retention & Deletion

Deleting your account removes everything backed up to it, your plaza card, friends and notes, and closes the account. Your diary on this phone is kept until you clear it there too. Files you exported yourself are yours and are not affected. Our providers keep their own service logs and backups for limited periods under their own policies.

8 Your Rights Under PDPA

Under the Personal Data Protection Act 2012 you can:

• Ask for access to the personal data we hold about you, and how it has been used or disclosed in the past year
• Ask for a correction of personal data that is wrong or incomplete
• Withdraw consent to a use of your data at any time (section 5)

Write to us at the address in section 17. We reply to access requests as soon as reasonably possible, make corrections as soon as practicable, and if we need longer than 30 days we tell you in writing within that time when we will reply. While we work on a request, we keep the data it asks about.

In the App, without asking us: export your diary (You, then Export my data), correct or delete any entry, delete this phone’s diary and settings (your sign-in, backup bookkeeping and Plus access stay on the phone), delete the cloud copy, and delete your account. Some records stay on our side after that, as listed above, such as Plus access and plaza safety reports, until we remove them; ask us at hello@ranklore.ai. These go beyond what the law requires.

9 Who Receives Data, and Where

We do not sell your personal data, and there is no advertising. These services handle data for us, only as needed for what you use:

Transfers outside Singapore. Your diary backup is stored in Singapore. Some service data leaves Singapore, as shown above: connection details when the App, fonts, pictures or podcast load, and service logs kept by our providers. We send each provider only what its service needs. Supabase processes our data for us under its data processing terms. GitHub, Google, Substack, Open Food Facts and the content delivery networks receive your network address and browser details when you load their content, and use them under their own privacy policies, which can include their own purposes such as security and service improvement. Luna's AI help, which would send diary content to an AI service, is paused, and nothing goes to one.

We may also disclose data if the law requires it, for example under a court order.

10 Local Storage, No Cookies

Rhythme keeps your diary, choices and settings in this browser's local storage on your phone. It does not use cookies, tracking, advertising identifiers or third-party analytics. You can clear this phone's diary and settings at any time with Delete this phone's diary in the journal, or by clearing this site's data in your browser settings. Clearing the phone does not delete your account or its cloud copy; do that from Your account in You.

11 User Responsibilities

By using Rhythme, you agree to:

• Provide accurate and truthful information when creating your profile and logging data
• Keep your account credentials secure and not share them with others
• Use the App only for lawful purposes and in accordance with these Terms
• Not use the App to make medical decisions without consulting a qualified healthcare professional
• Not attempt to reverse engineer, modify, or disrupt the App's functionality
• Respect the intellectual property rights of Rhythme and its licensors

12 Prohibited Uses

You agree not to use the App to:

• Violate any applicable laws or regulations
• Upload or transmit malware, viruses, or harmful code
• Attempt to gain unauthorized access to our systems or other users' data
• Use the App for any commercial purpose without our written consent
• Harass, abuse, or harm other users or our staff
• Use the App to provide medical advice or diagnosis to others

13 Intellectual Property

All content, features, and functionality of Rhythme, including but not limited to text, graphics, logos, icons, images, audio clips, digital downloads, data compilations, and software, are the exclusive property of Rhythme or its licensors and are protected by Singapore and international copyright, trademark, and other intellectual property laws.

You may not reproduce, distribute, modify, create derivative works of, publicly display, or commercially exploit any content from the App without our prior written consent.

14 Disclaimer & Limitation of Liability

To the fullest extent permitted by applicable law, Rhythme and its affiliates, directors, employees, and agents shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, use, goodwill, or other intangible losses, resulting from:

• Your use or inability to use the App
• Any decisions you make based on information provided by the App
• Any inaccuracies, errors, or omissions in the App's content
• Unauthorized access to or alteration of your data
• Any other matter relating to the App

Nothing in these Terms shall exclude or limit liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded or limited under Singapore law.

15 Changes to These Terms

We may update these Terms from time to time. When we do, we will revise the "Last updated" date at the top of this page and tell you in the App. Your continued use of the App after any changes constitutes acceptance of the updated Terms.

For material changes that affect your privacy rights or data usage, we will provide prominent notice and obtain your consent where required by the PDPA.

16 Governing Law

These Terms shall be governed by and construed in accordance with the laws of Singapore. Any dispute arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of Singapore.

17 Contact Us

For questions or requests about these Terms, your personal data or your PDPA rights, write to our Data Protection Officer:

If you are not satisfied with our reply, you may contact the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.