Ritm privacy policy
Effective date: 10 October 2026
Who operates Ritm
Ritm is published and operated by millastarcom. Contact: develop@millastar.com. This policy covers Ritm, its account service and community.
Local diary and online features
You can use the diary and reference library without an account. Local records include your profile, goals, dietary restrictions, measurements, water, wellbeing, notes, plans and optional photos. Structured diary records are stored in an encrypted app store on your device. Photos are stored as image files in app-private storage protected by operating system access controls. Credentials and keys use platform secure storage. Online features can contact the Ritm server even in guest mode, for example when viewing public community content.
Information sent to the service
Registration and sign-in send your email and password over HTTPS; the server stores a password hash. Accounts use user IDs and session tokens. Account sync sends supported measurements, program check-ins and associated notes and sharing choices. Water, wellbeing and the new food diary are local and are not queued for sync. Photo uploads require an account and a separate upload action. Enabling local photos does not publish them.
Community visibility
Public profiles, reviews and participation can be visible to others, including guests. Posting requires accepting community rules. Reports, blocks and moderation decisions are stored to handle abuse. Blocking filters community content for the signed-in user; it does not make previously public content private for everyone. Moderators can access reports and reported content to investigate them.
Purposes and service providers
We process account information to authenticate you, supported records to provide storage and sync, and community information to publish your content and moderate abuse. Ritm uses a hosted server provided by Contabo. Operators with authorized administrative access can maintain the service and investigate failures. This app includes no advertising or third-party analytics SDK. The AI/team sharing switches do not activate an external AI provider in this version.
Backups and retention
Local records remain until you clear them, sign out, remove the app or replace them through restore. Server account records remain until account deletion or removal of individual supported records. Automatic server backups are retained for up to 30 days; deleted records can remain in those restricted copies until expiry. A restore of an older server copy must reapply subsequent deletion events before serving users. Deletion security events (user ID, event time and operation ID) are retained in the active service for up to 90 days to prevent deleted accounts from being restored and investigate abuse. New dedicated technical service and web error logs can contain IP address, request path, time and errors and are retained for up to 7 days. Earlier entries in the shared server journal follow its existing rotation, which has no separately established time limit for Ritm; the 7-day limit does not apply retrospectively to those entries. Restricted backup copies of security events can remain for up to 30 additional days after their active retention expires. Community records tied to a deleted account are removed with it.
Export and deletion
Settings and privacy provides a local diary backup, account export, local clearing and account deletion. The local backup is an unencrypted file containing personal records and photos. You choose where to save it; a cloud document provider receives the file if you choose it. The backup excludes credentials, permissions and pending uploads and is not automatically uploaded by Ritm. Account export covers server-side records. Account deletion removes the account, associated database records and server photos; the app clears local records after a successful response. Wait for success: a failed request may require retry. Independently saved backups and exports remain under your control; delete them yourself.
Requests outside the app
Use the public Delete your Ritm account page to sign in and confirm account deletion. The page does not store your password or session in browser storage. If you cannot sign in, contact develop@millastar.com from your registration email for account-access assistance. Never email a password or login code.
Audience and changes
Ritm is intended for adults aged 18 and over for general wellness. It does not diagnose, treat or replace professional medical advice. Russian and English interfaces are supported. Contact develop@millastar.com about data access, correction, deletion or this policy. Policy changes will be dated and shown here.