Privacy Policy

1. Who We Are

This Privacy Policy describes how Rhyma ("we", "us", "our") collects, uses, and protects your personal data when you use our mobile application available on the Apple App Store and Google Play (the "App").

The data controller is Vitalii Samarskyi, individual entrepreneur, Ukraine. You can contact us at: support@rhyma.app.

Rhyma's backend services are hosted on Google Firebase, which acts as our data processor/service provider for authentication, data storage, messaging, and related infrastructure services.

2. Data We Collect

We collect account and profile data, authentication data, device and technical data, approximate location data, camera and gallery data, and usage or diagnostic data when you use Rhyma.

This may include your name or nickname, email address, profile images, user identifiers, basic settings, device information, Firebase identifiers, approximate city or region, uploaded photos, in-app events, error information, crash information, and performance diagnostics.

We do not use precise GPS-level location for tracking your exact movements, and we do not access your photos or camera for any purpose other than allowing you to select or capture images for use inside the App.

3. How We Use Your Data

We use your data to create and manage your account, authenticate you, synchronize your profile and settings, operate collaborative poetry features, provide notifications, protect the App from abuse, improve reliability and user experience, and comply with applicable legal obligations.

Approximate location may be used for gamification features, local content, and community-related elements without tracking precise movements.

4. Legal Bases for Processing

Where applicable law requires a legal basis, we rely on performance of a contract, legitimate interests, consent, and legal obligations.

You may withdraw consent at any time through device settings or by contacting us, without affecting processing that occurred before withdrawal.

5. Camera, Photos, and Location

The App requests camera and photo library access only so you can capture or select images for your avatar, cover image, or other user content.

The App may request approximate location to enable gamified features, local challenges, or region-based elements. You may disable these permissions at any time in your device settings.

6. Firebase and Other Processors

We use Firebase Authentication, Cloud Firestore, Cloud Storage for Firebase, Cloud Functions for Firebase, Firebase Cloud Messaging, and Firebase App Check as our primary backend infrastructure.

Firebase and Google process personal data on our instructions and for the purposes described in this Policy. We do not currently share your personal data with independent third-party controllers for their own marketing or advertising purposes.

7. Data Retention, Anonymization, and Deletion

We store account and profile data for as long as your account remains active or as necessary to provide the App's services. Technical and diagnostic logs are retained for up to 3 months unless a longer period is required for security or technical investigations.

To preserve the integrity of collaboratively created content, we may anonymize personal data instead of fully deleting all related records. If you request deletion, we will remove or anonymize personal identifiers in active systems while retaining anonymized collaborative content where necessary.

8. Your Rights

Depending on your location and applicable law, you may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.

To exercise these rights, contact us using the details below. We may need to verify your identity before processing your request.

9. Cookies, Analytics, and Tracking Technologies

The App and its backend infrastructure may use mobile SDKs and identifiers to provide core functionality, maintain authenticated sessions, perform analytics, measure usage, improve reliability, and diagnose errors or crashes.

Where required by law, we will obtain consent before using non-essential analytics or tracking technologies.

Optional rewarded ads are provided through Google AdMob. If you choose to watch an ad, Google may process advertising identifiers, consent signals, device information, ad interaction data, and related diagnostics to serve and verify the rewarded ad.

10. International Data Transfers

Because we use Firebase and Google Cloud services, your personal data may be stored or processed outside your country, including in the European Union, the United States, and other jurisdictions where Google maintains data centers.

Where required, we rely on appropriate safeguards such as standard contractual clauses and technical and organizational measures.

11. Data Security

We implement technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

These measures include encryption in transit and at rest, access controls, authentication mechanisms, Firebase security rules, Firebase App Check, and monitoring for unusual activity or potential security incidents.

12. Children's Privacy

Rhyma is not directed to children below the minimum age required by applicable law for independent consent to data processing. We do not knowingly collect personal data from such children.

If we become aware that we collected personal data from a child contrary to this Policy, we will delete or anonymize it as soon as reasonably possible.

13. Notice for U.S. and California Residents

At this time, Rhyma does not "sell" or "share" personal information as those terms are defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

If you are a U.S. or California resident and have questions about how your rights may apply to Rhyma now or in the future, contact us using the details below.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or operational needs.

When we make material changes, we will update the "Last updated" date and, where appropriate, provide notice within the App or by other reasonable means.

15. Contact

If you have questions about this Privacy Policy, our data practices, or wish to exercise privacy rights, please contact: Vitalii Samarskyi, individual entrepreneur, Ukraine.

Contact email: support@rhyma.app