🧠 Ryzo Privacy Policy

ℹ️ 1. About Ryzo

Ryzo ("we", "us", "our") is an AI-powered personal performance and mental wellness application developed by an independent developer. The app is available on Google Play (Android) and the Apple App Store (iOS).

Ryzo helps users track mood, energy, sleep, workouts, nutrition, habits, and goals — and provides AI-generated coaching, weekly performance scores, and insights to support personal growth.

Developer Contact: privacy@getryzo.app

🚨 2. Medical Disclaimer

• The AI coach provides motivational guidance, coaching prompts, and educational content only.
• It does not diagnose conditions, prescribe treatments, or replace licensed therapy.
• Mood, energy, and stress scores are self-reported by the user — not clinical measurements.
• The Weekly Performance Score™ is an engagement metric, not a medical or psychological assessment.
• If you are experiencing a mental health crisis, please contact a licensed professional or emergency services.

Ryzo complies with Google Play's Health & Wellness category guidelines and does not make clinical claims.

📋 3. Data We Collect

3.1 Account Data (Required)

3.2 Wellness & Performance Data (User-Entered)

3.3 Technical Data (Automatic)

⚙️ 4. How We Use Your Data

• Provide the service: authentication, AI coaching, progress charts, performance scores.
• Personalisation: tailor AI prompts based on your mood history, assessment scores, and goals.
• Weekly Performance Score™: compute your weekly score from check-ins, mood, sleep, workouts, and streak. Used for in-app display and optional social sharing (text-based — no image of personal data).
• Push notifications: send scheduled check-in reminders and streak alerts (opt-in only).
• Safety & security: detect abuse, enforce rate limits, prevent fraud.
• Service improvement: aggregated, anonymised analytics to improve features.
• Subscription management: verify active plan, enforce usage tiers.
• Transactional emails only: password reset, billing confirmation, streak milestone notifications (opt-in). No unsolicited marketing.

Legal basis (GDPR Art. 6): performance of contract (Art. 6(1)(b)), legitimate interests (Art. 6(1)(f)), and explicit consent for sensitive wellness data (Art. 9(2)(a)).

🔗 5. Third-Party Services

🤝 6. Data Sharing

We never sell your personal data to any third party.

• Service providers listed above, under strict data-processing agreements.
• Shareable Performance Score: when you tap "Share Weekly Score", only a text-based summary (score, grade, week label, app link) is shared — no account data, email, or personal identifiers.
• Legal obligations: if required by law, court order, or to protect user safety.
• Business transfers: if acquired, users will be notified 30 days in advance with option to delete.

🔒 7. Data Storage & Security

• Primary database: Supabase in EU (Frankfurt, Germany) — GDPR-compliant region.
• Local storage: Non-sensitive app data (habits, daily logs, gamification) stored locally on device via AsyncStorage — never leaves the device unless synced.
• Encryption in transit: TLS 1.2+ for all API communications.
• Encryption at rest: AES-256 on Supabase. Device storage encrypted by Android/iOS OS-level encryption.
• Passwords: hashed via bcrypt — never stored in plain text.
• Access control: Row-Level Security (RLS) — users access only their own data.
• API security: JWT authentication, rate limiting, input validation on all endpoints.
• Payment data: processed entirely by Google Play / Apple — never stored on our servers.

📅 8. Data Retention

⚖️ 9. Your Rights (GDPR)

As a user in the European Economic Area, you have the following rights:

To exercise any right: privacy@getryzo.app — we respond within 30 days.

👶 10. Children's Privacy

Ryzo is intended for users aged 13 and older.

• We do not knowingly collect data from children under 13.
• Users aged 13–17 require parental or guardian consent.
• If we discover a child under 13 has an account, we will delete it immediately.
• Report: privacy@getryzo.app

💳 11. Subscriptions & Billing

• Billed via Google Play Billing (Android) or Apple In-App Purchase (iOS).
• Auto-renews unless cancelled 24+ hours before renewal date.
• Cancel anytime via Google Play → Subscriptions or iOS Settings → Subscriptions.
• Refunds handled by Google/Apple per their policies.
• We receive only a subscription token — never your card details.

🗑️ 12. Account Deletion

You can delete your account and all data at any time:

• In-app: Settings → Account → Delete Account
• By email: privacy@getryzo.app

Upon deletion we permanently erase: email, name, all wellness data, chat logs, performance scores, habits, journal entries, and assessment history. Anonymised aggregated stats may be retained. Billing records retained 7 years (legal requirement).

📝 13. Policy Changes

When we update this policy:

• The "Effective Date" at the top will be updated.
• Material changes: in-app notification or email at least 14 days before taking effect.
• Continued use after the effective date = acceptance of the updated policy.

Version history: v1.0 (Feb 24, 2026) — initial release. v1.1 (Mar 4, 2026) — added Google Sign-In (planned), Weekly Performance Score™, local AsyncStorage data, Expo/EAS, nutrition & workout tracking details. v1.2 (Mar 5, 2026) — added RevenueCat, annual subscription plan, clarified Google Sign-In as coming soon, updated third-party table.

📬 14. Contact Us