Privacy

Who processes your data

• The controller of personal data is Mgr. David Zažímal, a self-employed natural person, registered office B. Němcové 570/2, 589 01 Třešť, company ID (IČO) 23198231, Czech Republic.
• RYTAVO is the name of the app he runs; it is not a separate company.
• No data protection officer has been appointed.
• Contact: privacy@rytavo.com.

What data we process

Data about you and your account:

• e-mail address, display name, language and appearance;
• country – only if you choose it in your profile yourself; we never derive it from your IP address or location;
• sign-in data of the account:
  • the password only as a secure hash;
  • the identifier of a connected Apple, Google or Facebook account;
  • for Apple, an encrypted refresh token (see below);
  • passkeys (public key);
  • with two-factor authentication turned on, the authenticator app key and recovery codes.

Content you enter into RYTAVO yourself:

• habits, entries, notes, photos, measurements, challenges, rhythms and sharing;
• the e-mail address or RYTAVO code of a person you invite to a group, if you fill it in (see Group invitations);
• daily totals from Apple Health, if you switch on the connection in the iPhone app yourself (see Health data).

Sign-in with Apple, Google and Facebook

What we get from the service. When you sign in with Apple, Google or Facebook, you communicate directly with that service. We only get from it:

• your identifier at the service;
• your e-mail address;
• your name – Apple passes it only at the first sign-in and only if you allow it;
• from Google and Facebook also a link to your profile photo.

Apple's hidden e-mail. With Apple you can hide your e-mail address. We then receive a random Apple address that forwards messages to your real e-mail.

What we pass on. We pass to the provider only the technical data needed to complete the sign-in: a one-time sign-in code and the identification of the RYTAVO app.

Profile photo (Google and Facebook):

• We download the photo only once and only for an account that has no photo yet.
• We store it as our own copy, cropped and without metadata. We never load it from the service again.
• Once you change or remove it in Profile → Profile photo, we never take it over again.
• Apple does not pass on a photo.

Other data from providers. At sign-in Apple may also pass other data, for example an estimate of whether you are a real person. We do not store or use it.

What we never do:

• We never see or store your passwords for these services.
• We never publish anything on your behalf.

Apple refresh token.

• We store it only for an account connected to Apple, encrypted.
• It serves exactly one purpose: when you disconnect Apple or delete your account, we ask Apple to end RYTAVO's access. Apple requires this of apps with Sign in with Apple.
• The legal basis is legitimate interest: your and our interest that the link with Apple also ends after you disconnect it or delete the account (see Why and on what basis). You can object to it. The token also ends when you disconnect Apple from the account.
• We use it for nothing else. We never use it to read your data at Apple.
• We do not store access tokens or identity tokens of providers.
• The token is a security secret, like the password hash, and is therefore not part of the data export.
• It exists only while Apple is connected to the account. You can see this in Profile → Sign-in and security.

Position of the providers. Apple, Google and Meta process the data about your sign-in as independent controllers under their own privacy policies. For users in the EEA these are:

• for Google, Google Ireland Limited;
• for Facebook, Meta Platforms Ireland Limited;
• for Apple, Apple Distribution International Limited (Ireland).

Operational and security data

Account and sign-in. We record:

• when and how the account was created;
• the time and method of each successful sign-in;
• for each day only the fact that you used RYTAVO – without tracking pages, clicks or devices.

Server logs. For each request the web server records the IP address, time, page address (without parameters, without invitation links and without RYTAVO codes) and browser identification. For the public website rytavo.com also:

• only the domain of the website you came from (never the full address);
• whether the browser opened the page as an ordinary visit.

Application logs contain the internal account ID and a shortened e-mail address, never content.

Traffic statistics of the website rytavo.com.

• From the logs of the public website we create internal aggregate statistics, so that we know how much interest there is in the website and can improve its content and operation.
• The statistics contain:
  • daily numbers of page views and an estimate of the number of visitors per day;
  • the most visited pages;
  • domains of referring websites and the type of the source of the visit;
  • the approximate country;
  • the rough type of device, operating system and browser;
  • error responses.
• We determine the approximate country, and whether an address belongs to a data-centre network, only on our own server from local IP address databases; we never send the address anywhere.
• We do not count our own tests, checks and automated traffic among the visitors.
• The aggregates contain no IP addresses, browser identification, city or other identifiers and link no one across days.

What we do not use: advertising, analytics cookies, or third-party analytics or tracking tools.

Confirmations and access to the account

What we store with the account:

• the time you confirmed that you are at least 15 years old – without a date of birth or other information about age;
• the time and version of the Terms of Use you last accepted;
• for accounts from the beta testing period also the time beta access was granted and a possible founding beta tester mark.

Historical beta invitations. No new ones are created. For invitations we record:

• a hash of the link, times and, after use, the internal ID of the account created;
• for an invitation an administrator sent by e-mail, also the recipient's e-mail address, the chosen language, the time it was sent and the internal ID of the administrator – only to manage this invitation.

The data is deleted with the invitation, at the latest 180 days after it was used, cancelled or expired. The recipient's address is also deleted when the account is deleted.

Manual granting or removal of RYTAVO Plus by an administrator:

• We record the time, the change, an optional note and the internal ID of the administrator.
• You will find this in the data export, without the administrator's ID.
• It is deleted with the account.

Founding tester program

For founding testers we also store:

• the version and time of accepting the program terms and its start;
• the counted entries (habit or measurement and day, with the local day and time of the entry);
• the times the conditions were met and the Lifetime licence was granted (with the internal ID of the administrator).

This data:

• serves only to evaluate the program;
• is visible only to administrators;
• is in the data export (without the administrator's ID);
• is deleted with the account.

The program runs only for its existing participants and is not open to new ones. More in the program terms.

Earlier requests to join the beta and Lifetime Access

• Until 21 October 2026 it was possible to ask to join the beta testing with a form. We no longer accept new requests.
• For earlier requests we stored the e-mail address, the optional name and reason, the chosen language, the confirmation of interest in active testing and the times of submission and handling.
• Only the operator sees them, and they are deleted according to the retention overview below.
• Lifetime Access is granted manually by an administrator, never automatically. The account records the time and who granted it.

Feedback

When you send feedback (Profile → Feedback):

• we store its type, text, time, app version, language and the page of the app you are writing from (without parameters);
• we do not store your IP address, browser, device or location with it;
• only the operator sees it in the internal administration and uses it only to improve RYTAVO (legitimate interest, Art. 6(1)(f) GDPR);
• you will find it in your data export, and it is deleted together with the account.

Notifications and the app icon

What we store. When you turn on notifications in the browser (Profile → Notifications), we store the data the browser needs for delivery:

• the address of the notification delivery service and the encryption keys of the device;
• the time zone of the device (for the time of the reminder);
• when we last sent a reminder or a message about a new version.

With the account we store your notification settings and which What's new version you last opened.

Who delivers the notifications.

• Notifications are delivered by the service your browser uses for this. RYTAVO sends them only through these services:
  • Google (Google LLC, USA) – Chrome and other browsers that use Google's service;
  • Microsoft (Microsoft Corporation, USA) – Edge;
  • Apple (for users in the EEA Apple Distribution International Limited, Ireland) – Safari.
• In other browsers, for example Firefox, we do not offer notifications yet.
• We pass the message to the service encrypted so that only your device can read its content.
• The service sees only the data needed for delivery: the delivery address it created itself for your device, and the time and size of the message.
• Notifications contain no habit names, notes, measurements or health data.

Purpose and legal basis: notifications you turned on and the number on the icon (performance of a contract, Art. 6(1)(b) GDPR).

When we delete the data:

• when you turn notifications off on the device;
• when you sign out;
• when the service cancels the device;
• when you delete your account.

You will find it in your data export.

Notifications in the iPhone app.

• When you turn on the evening summary or news in the app (Profile → Notifications), we store with your sign-in in the app the device token that Apple issues for RYTAVO and whether it is the regular or a development version of the app. We also store the app language, these notification settings of the device and when we last sent a summary or a message about a new version.
• The notifications are delivered by the Apple Push Notification service, whose controller for users in the EEA is Apple Distribution International Limited (Ireland). We pass it the device token and the text of the notification, which Apple sees during delivery.
• We send only what you turn on: the evening summary with the number of things left for today, and a message about a new version of RYTAVO. Never habit names, notes, values or health data.
• If you have notifications turned on in the app, we may also send you a generic alert “You have a new group invitation”, without the name of the group and without the name of the person inviting. You will see the invitation even without notifications in your invitation inbox (see Group invitations).
• You turn them off in the app (Profile → Notifications) or in iOS Settings → RYTAVO → Notifications.
• We delete the token and the settings when you turn both notifications off in the app, when you sign out of the app (also remotely) or your sign-in expires, when Apple reports that the token is no longer valid, and when you delete your account. You will find them in your data export (without the token itself).
• The purpose and legal basis are the same as above: notifications you turned on (performance of a contract, Art. 6(1)(b) GDPR).

Sign-in in the mobile app

When you sign in in the RYTAVO mobile app, we create a session record for this sign-in.

What it is for. For signing in and securing the account:

• to verify that the sign-in is still valid;
• for the overview of signed-in devices (Profile → Sign-in and security → Mobile app);
• so that you can sign out a lost or someone else's device remotely.

What we store:

• the platform (e.g. iPhone), the device model, the version of the operating system and of the app;
• the time of sign-in, of the last activity (at most once every 5 minutes), of expiry and of sign-out;
• a pseudonymous identifier of the app installation. The app creates it randomly at first use; it is not a hardware identifier and the server stores it only as a hash.

What we do not store: access tokens, IP address, location, serial number, IMEI, MAC address, advertising identifier or device fingerprint.

We do not use the data for advertising, profiling or tracking across apps and websites of other companies, and we do not pass it to anyone.

Legal basis: performance of a contract (sign-in) and legitimate interest in securing the account (Art. 6(1)(b) and (f) GDPR).

You will find the data in your data export, and it is deleted when the account is deleted.

Data in the mobile app

Storage on the device.

• The RYTAVO mobile app also stores your data directly on the device, so that you can use it without a connection.
• The data on the device is encrypted with a key kept in the system's secure storage (the Keychain on iPhone). Each account has its own file and its own key.
• Changes made without a connection are sent to the server by the app once the connection is back.

Longer loss of connection. When the app has not connected to the server for 30 days, the data on the device becomes read-only.

When the app deletes the data from the device:

• when you sign out;
• when you sign out the device remotely;
• when you delete your account.

On remote sign-out and account deletion this happens at the device's next connection to the server. Until the device connects, the data stays stored in it encrypted. You also delete it by uninstalling the app. The settings of the Apple Health connection have their own rules (see Health data).

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Group invitations, RYTAVO code and blocking

Invitations. You can invite someone to a group with a link, an e-mail address or a private RYTAVO code, or invite a person you already share another group with. For each invitation we record:

• the group, who invited and in what way;
• when the invitation was created, until when it is valid and how it ended (accepted, declined, revoked, expired).

Inviting a specific RYTAVO user (by e-mail, by code or from the list of people you know):

• We store their identifier with the invitation so that they see it in their invitation inbox and can accept or decline it.
• We send them a short notice by e-mail with the name of the person inviting and the name of the group.
• No one becomes a member of a group without accepting it themselves. Until they accept, the invited person sees only the name of the group and the name of the person inviting.

E-mail address without an account. If the address entered does not belong to a verified RYTAVO account and inviting people without an account is available in RYTAVO, we send a one-time e-mail with the invitation to it. We store the address only until the invitation is handled (accepted, declined, revoked) or expires (7 days), then we delete it. When this option is not available, we do not deliver the invitation and do not store the address.

Protection against abuse.

• For an e-mail invitation we keep a one-way hash of the address entered, at the latest until the invitation expires (7 days). It lets us recognise that an invitation has already been sent to the same address, and we do not create another one for it within 24 hours.
• We process an invitation request automatically in the background. The address entered stays in it only until it is processed (usually a few seconds).
• We never tell the sender whether the address or code entered belongs to an existing account. The response and the overview of sent invitations always look the same.
• We limit the number of invitations and of attempts with codes. Records of failed attempts with a code do not contain the code itself.

Private RYTAVO code.

• You can turn on a private code (and its QR code) for your account. Whoever gets it from you can invite you to their group; you decide whether to accept.
• The code is off by default. You can turn it off or replace it with a new one at any time; the old one stops working immediately.
• The code reveals neither your name nor your profile to anyone.

People you know.

• When you invite, we offer you people you currently share a group with (only their name in RYTAVO).
• We do not store this list. It is always calculated anew from current memberships, so leaving a group, deleting it or deleting an account takes effect at once.
• In the settings you can turn on “Don't suggest me to people I know”. Others will then not see you in their list of people they know; they can still invite you by e-mail or by code, if you have it turned on.

Blocking.

• You can block a person who sent you an invitation, or someone from the people you know. We record whom you blocked and when.
• A blocked person cannot send you a personal invitation and does not find out that they are blocked.
• You can lift a block at any time.

Purpose and legal basis.

• We process invitations, the code, the list of people you know and blocking to provide you with the sharing you use (performance of a contract, Art. 6(1)(b) GDPR).
• We process the e-mail address of a person without an account on the basis of the legitimate interest of you and the invited person in delivering one specific invitation you asked for (Art. 6(1)(f) GDPR). We use it for nothing else and do not send advertising to it.
• The address hash and the limits on the number of invitations serve to protect against abuse (legitimate interest).

You will find the data about invitations, the code and blocking in your data export. The retention periods are in the overview below.

Payments for RYTAVO Plus

What we store for the subscription:

• the period and price of the subscription, its status and renewal dates;
• the time and version of your consent to recurring payments;
• our order number and the payment identifier at Comgate;
• the amount, status and time of each payment and the time the confirmation was sent.

Payment gateway.

• Payments are processed by the payment gateway Comgate, a.s. For this we pass it your e-mail address, name and order details.
• You enter card details only into the Comgate gateway. RYTAVO never sees or stores them.
• Recurring payments are always started by RYTAVO. After the subscription or the account is cancelled, we do not start any further one.

Legal basis: conclusion and performance of a contract (Art. 6(1)(b) GDPR). We also keep records of real payments because of legal obligations (Art. 6(1)(c) GDPR).

Accounting record. After each real (not test) paid payment we also store a separate accounting record:

• our order number and the payment identifier at Comgate;
• the type of payment, period and price, currency;
• the time of payment and the paid period;
• the version of the terms and the time of consent;
• the request to start immediately after payment;
• a possible withdrawal with the amount to be refunded.

The record contains no e-mail address, name or link to the account and stays even after the account is deleted. The reasons are:

• accounting and tax obligations (Art. 6(1)(c) GDPR);
• handling complaints, disputed payments and legal claims (Art. 6(1)(f) GDPR).

Purchases in the iPhone app (App Store).

• When you buy RYTAVO Plus in the iPhone app, the payment is processed by Apple as an independent controller under its own privacy policy; for users in the EEA this is Apple Distribution International Limited (Ireland). We do not see your payment details or your Apple ID.
• When you buy, the app gives Apple the internal ID of your RYTAVO account so that the purchase is assigned to the right account.
• After the purchase, the app sends us the transaction number. We use it to check the subscription status directly with Apple. Apple also sends us notifications about changes of the subscription (renewal, end, refund).
• We store the original and the latest transaction number, the product (monthly or yearly), whether it is a real or a test purchase, the purchase time, the end of the paid period, any grace period after a failed payment, refunds and whether the subscription renews.
• Legal basis: entering into and performing the contract (Art. 6(1)(b) GDPR).
• You will find the data in your data export, and it is deleted when you delete your account. Deleting your RYTAVO account does not cancel the subscription itself at Apple.

Health data

RYTAVO is not a health app.

• RYTAVO is for habits, personal goals and measuring your own progress. It does not diagnose, does not treat and gives no health advice.
• Habits and measurements, such as steps, distance, duration, drinking, sleep or your own measurements that you name yourself, serve your goals. RYTAVO derives nothing about your health from them.
• We process health data with consent only for the optional Apple Health connection in the iPhone app (see below). Without it we do not ask for such consent.

What you write is your content.

• We do not read, evaluate or sort names, notes, the journal or your own measurements, and we protect them like the rest of your data.
• We process them only to provide you with the service (Art. 6(1)(b) GDPR).
• We do not use them for advertising, profiling or assessing your health, and we pass them only to people you share them with yourself.

Apple Health in the iPhone app

It is optional. Only you switch the connection on, in the iPhone app: Profile → Apple Health. Without it RYTAVO works the same. We do not use Apple Health on the web.

What RYTAVO reads from Apple Health. Only these daily totals, and only if you allow reading them in iOS:

• steps;
• walking and running distance;
• cycling distance;
• exercise minutes.

We do not read any other data from Apple Health. We write nothing to Apple Health.

Consent and the iOS permission are two separate steps.

• First you confirm in RYTAVO your explicit consent to the processing of this data. We store a record of the consent: the time, the version of the consent text and that it was given in the app.
• Only then does iOS show its own Apple Health window in which you allow reading the individual data. Data you do not allow never reaches RYTAVO.
• You change or remove the permission in iOS at any time in Settings → Health → Data Access & Devices → RYTAVO. Removing the permission in iOS alone does not withdraw the consent in RYTAVO; RYTAVO just stops receiving the data.

What we use it for. Only to write the daily totals into the measurements, habits or challenges you choose for each item yourself (or into a measurement RYTAVO creates at your request). The app reads the totals when you save the connection, when the app opens (at most once every 10 minutes) and at your request, for at most the last 31 days.

What is stored on the server.

• The written daily totals as your ordinary entries in RYTAVO: the day's value of a measurement or habit; for a done/not done habit only that it was done. They synchronise with your account like other data.
• The record of granting and withdrawing the consent.
• Individual records from Apple Health (for example single workouts, times, the source or the device) do not go to the server – only the daily total.

What stays only on the device. That the connection is switched on, where each item is written (for a habit also the threshold) and which values the app has already written in the last 31 days. The app keeps this in the app's settings on the iPhone (not in the app's encrypted database), separately for each account, and deletes it when you switch Apple Health off or uninstall the app.

Who sees the written values. The same as the rest of your content:

• We never share measurements.
• If you write totals into a habit or challenge that you share in a group, the group members see their state just as with values entered by hand. A follow link does not show values.
• In a public challenge with a shared goal your values count towards the total of all participants. Others see only the total, not your values.
• We pass data from Apple Health neither to Apple nor to anyone else.

What we never do. We do not sell data from Apple Health, we do not use it for advertising, profiling, tracking or assessing your health, and we do not pass it to advertising or analytics services.

Switching off and withdrawing consent. In the app: Profile → Apple Health → Switch off Apple Health. This withdraws the consent and RYTAVO stops reading Apple Health. You choose:

• Switch off and keep the values – the written values stay as your ordinary content;
• Switch off and delete the values from Health – the measurements RYTAVO created for Apple Health are deleted, as are the values the app wrote into other measurements and habits in the last 31 days. You delete older values by hand.

Withdrawing the consent does not affect the processing before it. You revoke access in iOS in Settings → Health.

Legal basis: your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR). The record of the consent is evidence under Art. 7(1) GDPR.

How long. Written values until you delete them or delete the account. The record of the consent and its withdrawal while the account exists. You will find both in your data export, and deleting the account deletes them.

Earlier health features. RYTAVO previously offered the optional features weight, body measurements, body fat, heart rate and the Medication habit with a separate consent. We have discontinued these features. The measurements and habits you created with them remain as ordinary ones. We keep the record of the earlier grant and withdrawal of the consent as evidence while the account exists; you will find it in your data export.

Why and on what basis

Performance of a contract (Art. 6(1)(b) GDPR). On this basis we process everything necessary to provide the service you signed up for:

• the account and sign-in, including sign-in with Apple, Google or Facebook;
• the features of the app and the data in the mobile app;
• the sharing you set up yourself, including group invitations, the RYTAVO code, suggestions of people you know and blocking;
• account e-mails: confirmation, password reset, welcome, security alerts and notices about changes of the service and the terms.

Legitimate interest (Art. 6(1)(f) GDPR). This is the interest in a secure, reliable and improving operation of RYTAVO. On this basis we process:

• security;
• server logs;
• backups;
• the record of deleted accounts;
• historical beta invitations and requests, until they are deleted;
• delivering an invitation you asked for to the e-mail address of a person without an account, and protecting invitations against abuse (address hash, limits);
• an internal overview of operation – numbers and metadata of accounts including a summary by country, without content;
• aggregate traffic statistics of the website rytavo.com;
• the encrypted Apple refresh token, so that we end RYTAVO's access at Apple when the account is deleted or Apple is disconnected.

You can object to processing based on legitimate interest.

Explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR). On this basis we process only data from Apple Health, if you switch the connection on. You can withdraw the consent at any time (see Health data).

What we never do:

• We do not sell data.
• We do not use it for advertising or profiling.
• We do not make automated decisions about you.

The e-mail address is required to create an account; everything else is voluntary.

Who has access to the data

Operator and hosting.

• Within RYTAVO only the operator has access to your data. We let no one else access it.
• Technically, the services listed below also process it, only to the extent necessary for their work.
• The server, database, backups, sending of e-mails and the RYTAVO mailboxes run in the Czech Republic at a hosting provider of the WEDOS group (WEDOS, a.s., Hluboká nad Vltavou).
• WEDOS processes the data only for RYTAVO, as a processor under its data processing agreement.
• Payments are processed by Comgate, a.s. (see Payments).
• Purchases in the iPhone app are processed by Apple (see Payments).

Transfers outside the EU/EEA. We store data in the Czech Republic. It can leave the EU/EEA only as follows:

• Sign-in and disconnecting at Apple, Google or Facebook.
  • We exchange a one-time code with the provider. When you disconnect Apple or delete the account, we pass it the refresh token.
  • For users in the EEA the provider is a company established in Ireland (see Position of the providers).
  • Any further transfer, for example to the USA, is ensured by the provider as an independent controller. Apple states standard contractual clauses. Google LLC and Meta Platforms, Inc. participate in the EU–US Data Privacy Framework.
• Notifications.
  • Google LLC and Microsoft Corporation participate in the EU–US Data Privacy Framework. The transfer to them relies on the European Commission's adequacy decision (Art. 45 GDPR).
  • For Safari we pass the message to Apple's service, whose controller for users in the EEA is Apple Distribution International Limited (Ireland). According to Apple, further transfers to the USA are governed by standard contractual clauses.
  • In the iPhone app we pass the device token and the text of the notification to the Apple Push Notification service, whose controller for users in the EEA is Apple Distribution International Limited (Ireland). According to Apple, further transfers to the USA are governed by standard contractual clauses.
  • We send notifications to no other delivery services (see Notifications).
• Purchases through the App Store.
  • We check the subscription status with Apple and receive its notifications about changes; we only give Apple the transaction number.
  • According to Apple, further transfers to the USA are governed by standard contractual clauses.

Sharing with other users.

• Content you share is seen only by people in the group you share it with. Copies they take of it are theirs.
• A person you send an invitation to sees, before accepting, only the name of the group and your name. People you share a group with may see you in suggestions of people they know unless you turn this off (see Group invitations).

Follow link.

• When you create one, anyone who has the link sees the progress of the chosen habit, challenge or rhythm – without notes, values and measurements.
• You can protect the link with an access code. We store the code only as a secure hash.
• Your sharing name is shown only if you turn this on for the link. Your e-mail address never.
• You can cancel the link or replace it with a new one at any time.

How long we keep data

• Account, profile and content: until you delete the account; deletion is immediate.
• Profile photo: until you change or remove it or delete the account; a replaced photo is deleted at once.
• Age confirmation, acceptance of the Terms of Use and the records of consent to the processing of health data (Apple Health and the earlier features) and of its withdrawal: while the account exists.
• Apple refresh token (only for an account connected to Apple, encrypted):
  • until Apple is disconnected or the account is deleted, then we delete it at once;
  • if Apple is unavailable, we keep it only in the server's memory for at most about an hour because of repeated attempts;
  • it may remain encrypted in database backups for up to 30 days.
• Sign-in history: 180 days.
• Record of days of use: 400 days.
• Sign-ins in the mobile app: while valid (30 days from the last use of the app); signed-out and expired ones at most 90 days, then they are deleted.
• Data in the mobile app (on the device): until sign-out, uninstalling the app or the next connection to the server after the account is deleted or the device is signed out remotely; the settings of the Apple Health connection until it is switched off or the app is uninstalled.
• Group invitations: the e-mail address of an invited person without an account until the invitation is handled or expires; the address hash at the latest until the invitation expires (7 days); the address in an invitation request only until the request is processed, and the record of the request (without the address) at most 2 days; records of failed attempts with a RYTAVO code (without the code) at most 2 days; the record of the invitation itself (without the address) 30 days after its validity expires. Deleting the account of the sender or of the invited person also ends their invitations.
• RYTAVO code: while you have an account; a replaced code ends immediately.
• Blocking and the “Don't suggest me to people I know” setting: until you cancel them or delete the account; deleting the account of either party ends the blocking.
• Historical beta invitations: used, cancelled and expired ones 180 days.
• Earlier requests to join the beta: 90 days from the last change (submission, decision, sending of the invitation); the account does not end with them.
• Feedback: until you delete the account.
• RYTAVO Plus subscription and payments with the account: until you delete the account; unpaid and unfinished payments at most 400 days, test payments 90 days.
• App Store subscription with the account: until you delete the account.
• Accounting record of a real payment (without e-mail address and link to the account): 10 years from the end of the year in which the payment took place, even after the account is deleted.
• Server and application logs: at most 15 days.
• Aggregate traffic statistics of the website rytavo.com (only daily totals, without IP addresses and identifiers): at most 24 months.
• Backups of the database and uploaded files: daily backups 7 days, backups before an update at most 30 days.
• Record of a deleted account (only the internal ID and time, without e-mail address and content): 45 days, so that the account does not come back with a restore from a backup.
• E-mails you send us: for the time needed to handle them.

Cookies and browser storage

Cookies in the app. We use only:

• cookies necessary for sign-in and protection of forms;
• cookies that remember the language and appearance you chose;
• a technical cookie by which notifications on this device are turned off when you sign out.

Browser storage. We remember whether you hid the offer to add the app to your home screen. The app stores its files for working offline (without your data).

No cookie consent. We do not use analytics, advertising or tracking cookies, so we do not ask for cookie consent.

The public website rytavo.com uses no cookies. In browser storage it remembers only the light or dark appearance you chose and the language you select on the website yourself.

Protected follow link. Whoever opens it and enters the correct code gets a necessary technical cookie for 12 hours, which remembers this for that link.

Your rights

The rights you have:

• access to your data;
• rectification;
• erasure;
• restriction of processing;
• portability;
• objection to processing based on legitimate interest;
• withdrawal of the consent to the processing of data from Apple Health (see Health data).

Correcting and downloading data.

• You correct most data directly in the app.
• You download an export of the data and content RYTAVO stores for your account as a ZIP file (machine-readable JSON) in Profile → Privacy and data → Download my data.
• The export also contains invitations you sent or received (group, method, status, dates), whether you have the RYTAVO code turned on, whom you blocked and whether you hide yourself in suggestions. The code itself is not in the export; it is shown to you in the app.
• The export does not contain security secrets: the password hash, the two-factor keys and the encrypted Apple token. On request we will confirm which such secrets we hold for the account.
• It also does not contain server logs, backups and data not linked to the account (for example e-mails you sent us). If they concern you, you can ask for them at privacy@rytavo.com.

Other requests and complaints.

• With other requests, write to us at privacy@rytavo.com. We will reply within one month at the latest.
• You can lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz) or with the supervisory authority of the country where you live.

Deleting the account and data

How to delete the account.

• You delete the account with all data yourself: on the web in Profile → Sign-in and security → Danger zone → Permanently delete account, in the iPhone app directly in the app: Profile → Delete account permanently.
• Before deletion we verify your identity again – on the web with your password or through a connected Apple, Google or Facebook account, in the app with a code we send you by e-mail.

What is deleted.

• The deletion is immediate and cannot be undone.
• The sign-in history, the record of days of use, the history of the health data consent and two-factor authentication are deleted too.
• Invitations you sent or received, your RYTAVO code and blocks are deleted too.
• Copies that others took earlier of your shared content stay with them.

Backups.

• Database backups are deleted gradually, after 30 days at the latest.
• A deleted account would not come back even after a restore from a backup. For 45 days we remember only its internal ID and the time of deletion.

Mobile devices. Data on mobile devices is deleted at their next connection to the server.

Account connected to Apple.

• When you delete the account or disconnect Apple, we ask Apple to end RYTAVO's access. The account deletion does not wait for Apple's reply and always takes place.
• If Apple is unavailable, we repeat the attempt several times within about one hour.
• If it does not succeed, RYTAVO no longer holds any of your data or token at Apple. The app may still be shown in the list of apps of your Apple ID, though. You remove it there yourself: on iPhone Settings → [your name] → Sign-In & Security → Sign in with Apple, or at account.apple.com.
• You can also end RYTAVO's access at any time in the settings of your Apple, Google or Facebook account.

RYTAVO Plus. Deleting the account also ends the RYTAVO Plus subscription, and we do not start any further payments.

When you cannot get into the account. Write from its e-mail address to privacy@rytavo.com. We will delete the data within 30 days.

Accounting records of payments. Accounting records of real payments for RYTAVO Plus remain for the period stated in the retention overview, without e-mail address and without a link to the account.

Changes of this information

• We will inform you about material changes in advance by e-mail and in the app.
• This information is not a contract or a consent. You do not confirm it; you only take note of it.

Contact

Controller of personal data: Mgr. David Zažímal. Send questions about data protection to privacy@rytavo.com.