RhythmTrace Data Handling Notice

Last updated: October 12, 2026

This notice explains, plainly and specifically, what data RhythmTrace touches, what leaves your device, who receives it, and how to delete it. RhythmTrace is a private health journal published by White Hat Mgmt L.L.C. Because it holds information about reproductive health, this notice is written to be exact: it describes what the current app does, not what it might do. It supplements the RhythmTrace Privacy Policy and the Terms of Use; if anything seems to conflict, the Privacy Policy controls.

RhythmTrace is not a medical device, a diagnostic service, a contraceptive method or an emergency service.

1. First: your health journal does not leave your device

RhythmTrace has no account, no White Hat cloud storage and no analytics service. Your cycle entries, symptoms, pain, mood, sleep, notes and any patterns the app shows are kept only on your device. White Hat does not receive them.

• Encrypted at rest. The journal is written to the app’s private storage as a single file encrypted with AES-256-GCM. The encryption key is kept separately in the operating system’s protected credential storage (Android Keystore or Apple Keychain).
• Excluded from Android backups. On Android, the app turns off automatic backup and excludes its files from cloud backup and device-to-device transfer, so the journal does not travel to a Google backup.
• iPhone and iPad backups. We do not claim that the encrypted journal file is excluded from an iCloud or computer backup of your device. If it is included, it remains encrypted, and the key is held in the Keychain rather than in that file.

2. What does leave, and why

Care-directory search (CMS NPPES)

The app does not request your device location. Only when you tap Search, the city (optionally with a two-letter state) or the U.S. ZIP code you typed, plus the care category you selected, are sent directly from your device to the public NPPES NPI Registry run by the U.S. Centers for Medicare & Medicaid Services (npiregistry.cms.hhs.gov). Nothing from your journal is included. CMS receives the normal technical information of any internet request, such as your IP address, under its own policies. The app does not save the search.

Directory results are public registration records. They do not prove current licensure, availability, insurance participation or suitability.

Opening an address in maps

When you tap a provider’s public address, the app asks your phone to open a maps app with that address. If no maps app responds, it opens a Google Maps search in your browser. The maps provider you end up using receives the address and normal connection information under its own policy. RhythmTrace does not receive or store the route.

Advertising (Google AdMob)

The free version may show one banner on the Today screen, and nowhere else. The app requests non-personalized ads and, before requesting any ad, asks Google’s User Messaging Platform (UMP) for any choices required where you are. Even for non-personalized ads, Google may process your IP address, approximate location derived from it, device identifiers, ad interactions and diagnostic data to deliver and measure ads and to prevent fraud. On Android, Google’s ads SDK adds the advertising-ID permission to the app. RhythmTrace never gives the ads SDK your journal, your searches or your location. On iPhone and iPad, RhythmTrace does not request App Tracking Transparency permission and does not access the IDFA. Google acts as an independent controller: how Google uses information in advertising.

«Remove ads» purchase

The non-consumable «Remove ads» product is sold through Google Play or the App Store, which process the payment. The app receives the product and transaction status needed to unlock it and stores that entitlement on the device. We never receive full payment-card details.

Links

Our privacy policy, terms and product page, and Google’s ad-help page, open in your browser.

3. Your controls

• Delete your journal: deleting local data in RhythmTrace removes the encrypted journal file, its temporary copies and its key. Clearing the app’s data or uninstalling also removes it.
• Ad privacy choices: where Google says a privacy-options entry is required, it is available in the app. You can also reset or delete your advertising ID in your phone’s settings (on Android, Settings → Google → Ads).
• Stop ads: buy «Remove ads», or use the app offline; the journal works without a connection.

4. Cookies

The mobile app does not use cookies; it is not a web page. Our website does use cookies, as explained in the site cookie notice.

5. How long each thing is kept

• Your journal and settings on the device: until you delete them, clear app data or uninstall.
• Care-directory searches: not saved by RhythmTrace; CMS handles its request data under its own policies.
• Purchase records: kept by Google or Apple under their terms, and restorable through the same store account.
• Advertising data held by Google: on Google’s schedule; we have no copy.
• Emails you send us: as long as needed to answer you and keep necessary correspondence.

6. Law enforcement and legal requests

Because White Hat does not receive or store your journal, we have no copy of it to hand over to anyone, including in response to a subpoena or other legal demand. The protection of the copy on your phone depends on your device’s own security, such as your screen lock.

7. Where we offer the Service, and your rights

White Hat Mgmt L.L.C. is in the United States. We do not offer or direct our products and services to people located in the European Economic Area, the United Kingdom or Switzerland. If the app is used from there anyway, the technical data described above travels to the United States and to the providers named here.

Depending on where you live — including U.S. states with consumer-health-data laws — you may have rights to access, correct or delete information a business actually holds. Email us at the address in section 9. Because we do not receive your health records, in most cases we hold nothing about you. We do not sell personal information and we do not use health information for advertising.

8. Age

RhythmTrace is intended for adults aged 18 or older and is not directed to children.

9. Contact

White Hat Mgmt L.L.C. — [email protected]

Bug reports: [email protected]

Mailing address and phone number:

10. Changes to this notice

Before adding accounts, cloud storage, analytics, a new ad provider, health-platform integrations or new permissions, we will update this notice before that change ships, not after, and the date above will reflect it.