Privacy Policy

Last updated: March 12, 2026

Rymi is built by two people who care about privacy. This policy explains what data we collect, why, and what we do with it. We've kept it in plain language because that's the only kind worth reading.

Website analytics

We use Plausible Analytics to understand how people use the website. Plausible is privacy-focused and open source. It does not use cookies, does not track you across sites, and does not collect personal information. All data is aggregated - we see page view counts, not individual visitors.

App analytics

The macOS and iOS apps use TelemetryDeck for privacy-focused usage analytics. TelemetryDeck anonymizes user identifiers on your device before any data leaves it. No cookies, no personal data, no tracking across apps. We see aggregate patterns (which features are used, how often) but can never identify individual users. No task content, titles, or descriptions are ever sent.

Your tasks

All task data is stored locally on your device. Rymi does not operate a task data server - we never see, store, or have access to your tasks.

If you enable multi-device sync, your tasks are synced through Apple's iCloud (CloudKit). This is a direct connection between your devices via your Apple ID. Rymi's servers are not involved. Data in transit is encrypted via TLS, and data at rest in iCloud is encrypted by Apple. You can enable Apple's Advanced Data Protection for end-to-end encryption.

Account data

If you create a Rymi account, we store your email address and a securely hashed password. This data is managed by Supabase, our authentication provider. Accounts are used for feature access and subscriptions - not for sync. We use your email only to authenticate you and send account-related messages (like email confirmation or password resets). We don't send marketing emails.

What we don't do

• No tracking cookies
• No third-party advertising or ad networks
• No selling or sharing of personal data
• No server-side storage of your tasks

Third parties

We use a small number of services to run Rymi:

• Apple iCloud (CloudKit) - optional multi-device sync (your tasks, via your Apple ID)
• Supabase - account authentication and subscription state
• TelemetryDeck - privacy-focused app analytics (anonymized on-device)
• Plausible Analytics - privacy-focused website analytics
• DigitalOcean - website and file hosting
• Cloudflare - DNS and CDN

None of these parties have access to your task data for their own purposes. Task sync goes directly through Apple's infrastructure, not ours.

Data retention and deletion

Your data is kept for as long as you have an account. If you want your account and all associated data deleted, email us and we'll take care of it promptly.

Changes

If we make meaningful changes to this policy, we'll update the date at the top and note what changed. We won't quietly reduce your privacy protections.

Contact

Questions about privacy? Email us at the contact page.