Privacy policy
This is the privacy policy for the DeskRhythm iPhone app. If you use the web app at deskrhythm.com, the web privacy policy applies instead.
DeskRhythm is a workday-rhythm app that runs on your iPhone. It has no user accounts, no login, and no DeskRhythm server — there is no DeskRhythm backend that your data is sent to or kept on. What you set up and track — your Rooms, your movement durations, your day's history — lives on your device and is yours. This page describes each thing the app does that touches your data, and the choices you have over it.
Local storage on the device
Everything you set up and track in DeskRhythm is stored locally on your iPhone. The app works fully offline, and this data is never sent to DeskRhythm. To remove it, delete the app — or use Delete all data in the app (see Deleting your data below).
iCloud sync
If you're signed in to iCloud, DeskRhythm syncs your Rooms and history across your Apple devices through your own private iCloud account — the same account your device is already on. There's no DeskRhythm account and no DeskRhythm server in the path: the data goes to your iCloud, never to us. It is encrypted in transit and in iCloud. It is not end-to-end encrypted unless you've turned on Apple's Advanced Data Protection for your account — that's a device-wide Apple setting, not something the app controls.
Apple Health
If you connect Apple Health, DeskRhythm writes your walking-pad sessions to Health as workouts, and can write a step estimate. It only writes to Health — it does not read your Health data. You grant access one data type at a time, and you can change or withdraw it at any time in the Health app (Health ▸ Sharing ▸ Apps ▸ DeskRhythm), which is also where you remove anything DeskRhythm has written. The steps DeskRhythm writes are a calibrated estimate, never a measured value.
Location
If you turn on switching Rooms by location, DeskRhythm checks your location only when you open the app, to switch to the Room you set for a place like home or the office. Where you are stays on your phone and is never sent to us or anyone else. DeskRhythm doesn't track you, and keeps no location history off the device.
Analytics
DeskRhythm can measure anonymous, aggregate usage — for example, that the app was opened or a workday was started — to understand how the app is used. This is on by default, and you can turn it off at any time in Settings; when it's off, no usage data is sent. When it's on, there's no account, no advertising ID, and no cross-app tracking, and it never includes your Apple Health data, your location, your Room names, or anything you type. It is cookieless and doesn't fingerprint your device. Each install is counted using a pseudonymous per-install identifier — a random id that isn't your name or account and isn't used to identify you or track you across apps. Usage data is processed by OpenPanel, a privacy-focused analytics provider; as with any internet request, OpenPanel may receive standard technical metadata such as your IP address and basic device or network information, which is not used to identify you or to track you across apps. Where OpenPanel processes this data outside the EU/EEA, the transfer is covered by appropriate safeguards such as the European Commission's standard contractual clauses.
No accounts, no third-party SDKs
DeskRhythm has no user accounts, and bundles no third-party advertising, social, crash-reporting, or tracking SDKs. The only data that ever leaves your device is your own iCloud sync and, unless you turn analytics off, the anonymous usage data described above. Nothing else is sent anywhere.
Legal basis (GDPR)
Under the GDPR, here is the basis for each thing the app does with data. Local storage on your device and on-device location checks involve no transfer to DeskRhythm — they never leave your device, so there is nothing for us to process. iCloud sync is carried out to provide the cross-device sync you asked for (Article 6(1)(b)); the data sits in your own iCloud, under Apple's privacy policy. Apple Health access is used only with your explicit consent, granted per data type (Article 6(1)(a)), which you can withdraw any time in the Health app. Analytics rests on our legitimate interest in understanding how the app is used so we can improve it (Article 6(1)(f)); it is on by default, and you can opt out at any time in Settings.
Your data, and your rights
Because DeskRhythm has no accounts and no backend, almost everything is already in your hands: your data is on your device and in your own iCloud, and you can see, change, or remove it directly. Under the GDPR you have the right to access, correct, and erase your personal data, and to object to processing. For the on-device and iCloud data you exercise these rights yourself (see below); for analytics, you can opt out in Settings. If you believe your data has been handled improperly, you can lodge a complaint with your local data protection authority — in Sweden, the Swedish Authority for Privacy Protection (IMY).
Deleting your data
You can remove your data per place it's stored. On your device: delete the DeskRhythm app, or use Delete all data in the app — both clear the local store. In iCloud: Delete all data removes your synced Rooms and history from iCloud and this device (your other devices lose it the next time they sync); you can also manage it at iCloud.com or in iOS Settings ▸ [your name] ▸ iCloud. Apple Health: DeskRhythm can't remove what it has written to Health — you control that in the Health app (Health ▸ Sharing ▸ Apps ▸ DeskRhythm), where you can also revoke access. Analytics: turning it off — or Delete all data — stops any further data being sent and resets the per-install identifier on your device, so use from then on starts fresh. Counts already sent to OpenPanel use a pseudonymous id, aren't tied to your identity, and can't be recalled — there's no DeskRhythm server to delete them from.
Changes to this policy
If the app's data practices change — for example, if anything new is ever added — this page will be updated to say so clearly.