Privacy Policy

RytNow ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we handle your information in compliance with the General Data Protection Regulation (GDPR) and other applicable laws.

1. Information We Collect

We process the following categories of data:

• Identity Data: Username, email address, password (encrypted), and profile image.
• User Generated Content (UGC): Photos, audio, and videos you post ("Echoes"), along with comments and interactions.
• Technical Data: IP address, device model, operating system, time zone, and unique device identifiers.
• Usage Data: Information about how you use the app, such as dwell time, button taps, and features accessed.

2. Legal Basis for Processing

We process your personal data under the following legal bases (GDPR Art. 6):

• Performance of Contract: To provide the RytNow service, create your account, and enable you to post and view content.
• Legitimate Interests: To improve our app, ensure security, prevent fraud, and analyze usage trends.
• Consent: For specific data uses like accessing your camera, microphone, or photo library. You can withdraw this consent at any time via device settings.

3. App Permissions

RytNow requests access to these device capabilities to function:

• Camera & Microphone: Strictly necessary to record your Echoes.
• Storage / Photo Library: necessary to save or upload media.
• Notifications: To send you service-related alerts.

4. Data Sharing & International Transfers

We do not sell your personal data. We share data with trusted processors:

• AWS (Amazon Web Services): Host for our database, authentication (Cognito), and media storage (S3). Data may be processed in regions outside the EEA (e.g., USA). We rely on Standard Contractual Clauses (SCCs) to ensure data protection.
• Google Firebase: Used for push notifications and analytics.

5. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can correct inaccurate or incomplete data in your profile settings.
• Right to Erasure ("Right to be Forgotten"): You can delete your account and all associated data permanently in the app (Settings > Delete Account).
• Right to Restrict Processing: You can ask us to suspend processing your data in certain scenarios.
• Right to Data Portability: You can request your data in a structured, commonly used format.
• Right to Object: You can object to processing based on legitimate interests.

To exercise any of these rights beyond what is available in the app settings, please contact us.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (SSL/TLS) and at rest (AWS S3/DynamoDB encryption).

7. Children's Privacy

RytNow is not intended for users under 13. We do not knowingly collect data from minors. If we discover such data, we will delete it immediately.

8. Contact Us & DPO

If you have any questions about this policy or wish to exercise your rights, please contact our Data Protection Team:

Email: privacy@rytnow.app

If you believe your rights have been violated, you also have the right to lodge a complaint with your local supervisory authority (e.g., CNIL in France).