Privacy policy
Version of November 15, 2026
This policy explains what personal data Ritomi handles, why, for how long and how you exercise your rights, under Brazil's General Data Protection Law (Law 13,709/2018, the LGPD).
In a few lines: what you log stays on your iPhone. Cloud backup only happens if you allow it. We don't sell data, show ads or track you across other apps and websites.
1. Who is responsible for your data
The controller is Pro Magal Tecnologia, registered in Brazil under CNPJ 35.137.404/0001-06. The data protection officer can be reached at privacy@ritomi.app.
2. What data we handle
- On your iPhone: what you log in the app and what it reads from the Health app, with your permission. This data doesn't leave the device, except through cloud backup.
- Account: email, name and sign-in data from Apple or Google, if you use them.
- Profile: language, age range and program preferences, with no health data.
- Subscription: plan and status. Purchases are made through Apple, and we never receive your card details.
- Notifications: the device code for receiving notices.
- App usage and errors: screens opened, actions in the app, technical device data and approximate location from your IP address. They never include sign-up answers, health data or text you write.
- Messages you send us.
3. Health data and cloud backup
Cloud backup keeps a copy of the app, with health data, journal, photos and audio, so you can get your progress back when you switch devices. Because it includes sensitive data, it only happens with your permission at sign-up (art. 11, I, of the LGPD). You can withdraw it any time, in the app or at privacy@ritomi.app, and the stored copies are deleted.
Health data, including data from the Health app, is never used for advertising.
4. Why we use data and on what legal basis
| Purpose | Legal basis (LGPD) |
|---|---|
| Creating and keeping the account, building the plan, unlocking Premium and sending notices | Performance of a contract (art. 7, V) |
| Cloud backup | Consent (art. 7, I, and art. 11, I) |
| Improving the app and fixing bugs | Legitimate interest (art. 7, IX) |
| Answering messages and proving your permissions | Legitimate interest and regular exercise of rights (art. 7, IX and VI) |
| Complying with the law and responding to authorities | Legal obligation (art. 7, II) |
You can object to uses based on legitimate interest, and turn off usage data in Profile › Privacy.
5. Who receives your data
We don't sell or rent data. We share only what's needed with providers that process data on our behalf, such as hosting, sign-in, payment, notification, email, usage measurement and error reporting services. They may use the data only to provide their service to Ritomi. We also share data when the law or an authority requires it.
6. Transfers to other countries
Some providers process data outside Brazil, mainly in the United States. These transfers follow art. 33 of the LGPD: they're needed to provide the service you signed up for and, for cloud backup, are also covered by your permission.
7. Ads and tracking
The app has no ads, doesn't use the iPhone's advertising identifier and sends no data to ad platforms. The website uses no cookies.
8. How long we keep data
While the account exists, or as long as each purpose requires. The backup keeps only the most recent copies, and older ones are deleted automatically. When you delete your account, we delete its data, except what the law requires us to keep.
9. Teenagers
Ritomi is for people 13 or older. Users 13 to 17 need a parent's or guardian's permission, and we handle their data in their best interest (art. 14 of the LGPD). If we learn of an account belonging to someone under 13, we delete it.
10. Your rights
The LGPD (art. 18) lets you confirm that we handle your data, access it, correct it, take it to another service, ask for anonymization, blocking or deletion, know who receives it, withdraw consent and object to processing.
- In the app: edit your data, export your records and turn off the backup in Profile › Data, and delete your account in Profile › Account.
- By email: write to privacy@ritomi.app from your account's email. We answer within 15 days.
- Complaints: to Brazil's National Data Protection Authority, at gov.br/anpd, or to the authority where you live.
Deleting your account doesn't cancel your subscription. Cancel first in Settings › [your name] › Subscriptions.
11. Security
We use technical and administrative measures to protect data, such as encrypted connections and restricted access: each account can only reach its own data. If an incident could bring you relevant risk, we'll tell you and the ANPD.
12. Changes to this policy
We'll tell you in the app before an important change takes effect. If a change affects what goes into cloud backup, we'll ask for your permission again.
This English version is a translation. If it differs from the Portuguese version, the Portuguese version prevails, without limiting rights you have where you live.