Privacy Policy ยท Last updated April 2026
Your data.
Plain and simple.
You're uploading sensitive documents - your photo, your signature, your ID. We get that. This page explains exactly what we do with them, written for humans, not lawyers.
Our commitments to you
Section 2
What we collect - and why
Here's every piece of information we collect, in plain terms.
Phone number
To verify it's you when you sign in (OTP only).
Never used for marketing. Never shared.
Your documents
To process and store them in your vault.
Original deleted after processing. Only the enhanced output is kept, encrypted.
Document text (OCR)
To help you fill forms faster.
Text extracted from ID cards and certificates is stored as part of your job record.
Quality feedback (optional)
Only if you explicitly report a problem.
Tapping "Something looks wrong?" archives your upload for review. Deleted after 90 days.
Job metadata
To show you processing history in the app.
Document type, status, timestamps, quality scores. Not the document content itself.
Section 3
How we protect what you store
Your documents are some of the most sensitive files you own. Here's the stack of protections we have in place.
Encryption at rest
AES-256-GCM. Every file gets its own unique encryption key.
Originals destroyed
Raw uploads are wiped from our servers the moment processing completes.
Your vault, your data
Masters and previews sit in cloud storage that only your account can access.
Row-level access controls
Your account data is stored with strict access controls - no other user can query your records.
Section 4
Who else touches your data
We use specialist services to run the app. We've listed every one of them here - no surprises.
Supabase
Sign-in and account database
Google Cloud
Image processing and text extraction (Vision API, Document AI)
DigitalOcean Spaces
Encrypted document storage
Google Cloud Storage
Quality feedback archival
Expo / EAS
App distribution and over-the-air updates
Section 5
How long we keep things
We keep data only as long as it's needed to serve you. Here's the exact timeline.
Raw upload (your original)
Deleted immediately after processing
Processed master + preview
Until you delete the job
Job metadata
Until you delete the job
Quality feedback archive
90 days
Account data
Until you delete your account
Section 6
What you can do
You have full control over your data.
Access
View all your documents and account data at any time through the app.
Delete
Remove any document or your entire account whenever you want. It's gone immediately.
Export
Request a copy of your personal data by contacting us at the email below.
Section 7
Children
Rythmiq One is for students and applicants, not children under 13. We do not knowingly collect data from children.
Section 8
Policy updates
If we make a significant change, we'll let you know through the app or via email. The date at the top of this page will always show the latest version.
Section 9 ยท Your rights
How to delete your account
You can permanently delete your account and all associated data directly from the app - no forms, no waiting.
Deleted immediately
Your account, all jobs, documents, and processed files are permanently deleted the moment you confirm. Raw uploads are also removed from our servers immediately after processing and are never retained beyond that point.
Within 90 days
Quality feedback reports (if any were submitted) are permanently deleted within 90 days.
Section 10 ยท Contact
Questions? Just ask.
If anything here is unclear, or you want to make a request about your data, reach out directly. A real person will reply.
founder@rythmiq.in โ