Ryzome is a health app whose whole purpose is showing one number to a few people you chose. This document is about where the boundary of that sits, and what happens to everything else.
Ryzome LLC is a Texas limited liability company, Texas Secretary of State file number 806706410, and it is the controller of the personal data described here. In this policy "Ryzome", "we", and "us" mean Ryzome LLC. "The app" means the Ryzome application for iPhone and Android, and "the service" means the app together with this website and the systems behind them.
For anything in this policy, including any request under section 11, write to [email protected]. That address reaches both managing members directly, and it is the contact point for privacy matters.
The rest of this document is precise, which makes it long. In summary:
When you create an account we collect the sign-in identifier you use to create it, which is typically an email address; a display name, which is what the other members of your rings see; and the date the account was created. We do not ask for your legal name, your date of birth, your address, or your phone number, because the app does not need any of them.
The app reads the health metric your ring is competing on, as a daily figure, for the period the ring is active. Across the product the metrics available are:
We store one value per day, per metric, per person. We do not collect any other health or medical information: no heart rate, no workouts, no weight, no menstrual or reproductive data, no clinical records, no location, and nothing about medications or conditions. The app requests read access to what it needs and nothing beyond it, and it never writes anything back to your health records.
To keep the service working we process the app version and build, your device model and operating system version, and the time zone and local date your device reports, which is what decides which day a number belongs to. Our server records your IP address in its request logs, as any server does.
We run no third-party crash-reporting or analytics tool. Where a crash report reaches us at all it comes through Apple's or Google's own developer reporting, only if you have agreed to share diagnostics with them, and it is aggregated and not tied to your account by us.
We do not collect your contacts or address book, your photos, your precise or approximate location, your microphone or camera, your advertising identifier, or your browsing activity anywhere else. We do not track you across other apps or websites, and we do not use the App Tracking Transparency permission because we have nothing to ask for.
Ryzome does not measure anything itself. It reads figures that your phone and your wearables have already recorded, and it reads them from your device's own health platform: Apple Health, through HealthKit, on iPhone, and Health Connect on Android. Those are the only places health data enters Ryzome from.
An Apple Watch, a Garmin, a Whoop, or a Fitbit reaches Ryzome by writing into that health platform, which is something you set up once in that device's own app. Ryzome then reads the resulting daily figure like any other.
Ryzome does not connect to your Garmin, Whoop, or Fitbit account. We hold no credentials and no access tokens for those companies, we make no requests to their services, and they send us nothing. We receive a number from your phone, not an account from a wearable maker. If a device is not writing into your health platform, Ryzome cannot see it at all.
Your health platform asks you before anything is read, on a system permission screen that lists exactly which data types are being requested. Nothing is read until you allow it there. You can change or revoke that permission at any time, in the Health app under Sharing on iPhone or in Health Connect on Android, without uninstalling Ryzome. Revoking it stops new readings; it does not by itself delete readings already synced, which section 10 covers.
Health data obtained this way is subject to additional restrictions, which we follow as absolute rules:
Ryzome only ever reads. It does not write anything back into your health platform, so nothing Ryzome does changes the records your other apps see.
We use it to run the product, and for nothing else:
Where the law requires a lawful basis, we rely on performance of our contract with you for operating the service, your consent for reading health data (which you may withdraw at any time), and our legitimate interests in keeping the service secure and working. In jurisdictions that treat health data as a special category, we process it on the basis of your explicit consent, given at the permission screen described in section 4.
This is sharing by design, and it is the reason the app exists, so it deserves to be stated exactly. When you join a ring, every other member of that ring can see:
They cannot see:
Rings are joined by a short invite code, which is shared by a member. There is no public directory, no search, and no way to be added to a ring without the code. You can leave a ring at any time, which stops your figures appearing in it from that point.
Please treat this as a genuine disclosure and not boilerplate: if you join a ring, the people in it will see your number for the chosen metric. That is the point of Ryzome. If you do not want a particular number seen by a particular set of people, do not join a ring with them on that metric.
Beyond the members of your own rings, exactly one company processes your personal data on our behalf:
There is no analytics provider, no crash-reporting service, no advertising network, no customer-support platform, and no marketing tool in the path. This website is a set of static files served by Vercel, which sees requests for pages and never receives account or health data, because the website has no accounts in it.
Supabase is bound by a written agreement that permits processing only on our instructions and for the purposes we set, and that requires it to provide protection for your data at least equal to what this policy promises and to what Apple's developer requirements demand. It is not permitted to use your data for its own purposes.
If we ever add another processor, we will name it here before it begins processing anything of yours.
We may also disclose data:
Stated plainly, because for a health app it is the part that matters:
We keep your account data and your health records for as long as your account is open, because the product is a running comparison over time and deleting last week would break it. After your account is deleted, residual copies, including those in encrypted database backups, are removed within 7 days.
Server request logs are kept for a short operational period and then discarded. We may retain a minimal record of a deletion request itself, and anything a law specifically requires us to keep, for as long as that obligation lasts.
You can delete your account from inside the app. Open your profile, choose Delete account, and confirm. You do not need to email us, and you do not need to explain why.
Deleting your account removes:
A ring you created and are the only member of is removed along with its history. If you own a ring that other people are still in, we will not delete your account until you have handed that ring to another member, because deleting it would take the ring and every other member's recorded wins with it, and those people are neither asked nor told. The app names the rings that are in the way, and handing one over is a single choice in that ring's own screen.
Deletion cascades through our database, so there is no orphaned copy of your health data left behind, and it cannot be undone. If you would rather leave a single ring than delete everything, leaving the ring removes you from its standing and leaves your account intact.
Deleting the app from your device is not the same as deleting your account; it stops the app reading anything new, but the account remains until you delete it. If you cannot reach the in-app option for any reason, write to [email protected] and we will do it for you.
Deleting your Ryzome account does not delete anything from Apple Health or from a wearable company's own service. Those records are yours and stay where they are; revoking our read access, as described in section 4, is what stops us seeing them.
Wherever you live, you can ask us to:
Write to [email protected] from the address on your account. We may need to verify that you control the account before acting, and we will respond within the period the applicable law allows. Exercising any of these rights costs nothing, and we will not degrade your service or treat you differently for it.
Ryzome is not intended for children. You must be at least 13 years old to create an account, and older where your country sets a higher age for consenting to this kind of processing on your own behalf.
We do not knowingly collect personal data from anyone under 13. If we learn that we have, we delete the account and its health records promptly. A parent or guardian who believes their child has created an account should write to [email protected] and we will remove it. Ryzome is not directed to children and is not submitted to Apple's Kids Category.
Data is encrypted in transit and at rest. Access to your daily figures is restricted at the database level to your own account, so the rule that a ring only ever receives aggregates is enforced by the storage layer and not by application code alone. Access by our own people is limited to what is needed to operate the service and is logged.
No system is perfect, and we will not pretend otherwise. If a breach affects your personal data we will notify you and the relevant authorities as the law requires. To report a vulnerability, write to [email protected].
Ryzome LLC operates from the United States, and your data is processed there by us and by the processor named in section 7. If you use the service from outside the United States, you are sending your data to a country whose data protection law may differ from your own. Where a transfer of this kind needs a legal mechanism, we rely on the appropriate one, such as the European Commission's standard contractual clauses.
If we change this policy we will post the new version here with a new effective date. If a change materially affects how we handle health data, we will tell you in the app before it takes effect, and where consent is required we will ask for it again rather than assume it. We will not apply a new purpose to data already collected without your agreement.
Ryzome LLC, a Texas limited liability company
[email protected]
Privacy, access, export, and deletion requests all go to the same address. See also our terms of service, our consumer health data privacy policy, and the contact page.