Ritma Privacy Policy

Last updated: 15 August 2026. Ritma is operated by Baroze Labs Ltd. This page applies to the Ritma mobile application and supplements the general Baroze Labs website policy.

Information Ritma stores

Ritma can store the information you choose to record, such as period dates, symptoms, mood, energy, sleep, pain, notes, medication reminders, contraception or fertility observations, pregnancy context, preferences and notification settings. The app is designed to keep the journal on your device and encrypt it at rest.

Optional account and cloud sync

You can use Ritma offline without an account. If you enable an account or cloud sync, your account identifier and encrypted journal payloads are sent to the configured service. Health payloads are encrypted on the device before upload; the recovery key is not sent to the server. You can stop syncing and request deletion of cloud data from the app.

Health assistant and personalisation

The health assistant is an educational feature, not diagnosis, treatment, contraception or emergency care. It requires sign-in and Premium or the trial. Ritma asks for a separate permission before sending selected cycle context, symptoms, calculated estimates, pregnancy context and up to six recent assistant messages. Private notes and medication names are excluded by the app. If you do not allow personalisation, the assistant receives only the question and language needed to answer it.

When enabled, the assistant request is processed by our configured secure service and an AI provider to generate a response. Do not include names, contact details or other information you do not want processed. The assistant does not sell health data or use it for targeted advertising.

Subscriptions and payments

Ritma uses Google Play billing and RevenueCat to verify subscription access. Google Play and RevenueCat may process purchase identifiers, account identifiers and subscription status. Ritma does not receive your full payment-card number.

Sharing

Ritma does not sell health data or share it for targeted advertising. If you create a partner or clinician share link, only the categories and time period you select are included, and the link expires according to your choice. You can revoke active links from the app.

Retention and deletion

Local records remain on your device until you edit or delete them, uninstall the app, or use the in-app deletion controls. For account and cloud deletion requests, contact privacy@barozelabs.com from the account email where possible. We may retain a minimal transaction or security record when required by law or to prevent fraud.

Your choices

You can use Ritma offline, disable cloud sync, decline assistant personalisation, change notification permissions, revoke shares, export available reports and delete your account or cloud data. Device backups and operating-system services are controlled by your device settings and their providers.

Children and safety

Ritma is intended for people aged 16 and over. It is not a medical device and does not replace a clinician. Seek urgent local help for an emergency.

Contact

Questions or privacy requests: privacy@barozelabs.com. General support is available at barozelabs.com/support/ritma.