RhythmTrace Privacy Policy

Effective date: October 12, 2026. Version: 2026-10-12-v2.

This Policy describes the current practices of RhythmTrace, operated by White Hat Mgmt LLC. RhythmTrace is a private health journal and care-directory aid. It is not a medical device, diagnostic service, emergency service, or substitute for a licensed professional.

Data White Hat receives

RhythmTrace has no account system, White Hat cloud storage, or independent analytics service. White Hat does not receive through its own servers the user’s cycle entries, symptoms, pain, mood, sleep, notes, inferred patterns, medical-directory searches, or map destinations. If a user emails White Hat, White Hat receives only the information that person chooses to send and uses it to provide support and maintain necessary correspondence.

White Hat does not sell personal information. RhythmTrace does not use health-journal information, medical-search terms, or map destinations for advertising.

Data stored on the device

The app stores confirmed journal entries, onboarding choices, interface settings, and the local record that advertising has been removed. Health-journal records are encrypted before being written to the app’s private storage; the encryption key is kept in the operating system’s protected credential storage. These records remain until the user deletes them in RhythmTrace, clears the app’s data, or uninstalls the app, subject to operating-system behavior.

Deleting local data removes the encrypted journal and its local key. Store purchase records remain with Google or Apple and can be restored through the same store account.

Medical-directory search and maps

RhythmTrace does not request the device’s location. Only after the user taps Search, the city or United States ZIP code and selected care category are sent directly to the public CMS NPPES NPI Registry. CMS and its infrastructure receive the normal technical information required for that request under their own policies. The app does not save the query.

NPPES results are public registration records. They do not prove current licensure, credentials, availability, insurance participation, or suitability. When the user taps a public address, RhythmTrace asks the operating system to open a compatible maps or navigation app. If no maps app responds, RhythmTrace opens a Google Maps search for that address in the browser. That chosen provider receives the address and normal connection information under its own policy. RhythmTrace does not receive or store the route.

Advertising and consent

The free version uses Google Mobile Ads and Google’s User Messaging Platform. A single banner may appear on the Today screen; ads do not appear in the journal form, history, medical-directory results, emergency guidance, privacy screen, or purchase screen. RhythmTrace requests a non-personalized ad and asks Google’s consent system for any choices required in the user’s region before requesting an ad.

Depending on device, region, consent, and Google settings, Google and its advertising partners may process IP address, approximate location derived from IP, device or advertising identifiers, app and ad interactions, consent choices, and diagnostic data to deliver and measure ads, prevent fraud, and comply with law. RhythmTrace does not provide journal contents, medical searches, precise location, contacts, microphone, camera, or Health Connect data to the advertising SDK. On Android, Google’s ads SDK adds the advertising-ID permission (com.google.android.gms.permission.AD_ID) to the app, along with Android’s ad-services permissions; RhythmTrace’s own code does not read the advertising ID, and you can reset or delete it in your phone’s settings. On iOS, RhythmTrace does not request App Tracking Transparency permission and does not access IDFA.

Where Google says a privacy-options entry is required, it remains available in RhythmTrace Premium. Users can also use the device and platform advertising controls. Google publishes its own privacy information at policies.google.com/technologies/ads.

Purchase to remove ads

Users may buy the non-consumable product “Remove ads” through Google Play or the App Store. The store processes payment and retains the purchase record under its own terms. RhythmTrace receives product and transaction status needed to unlock the feature and stores a local entitlement; White Hat does not receive full payment-card details. “Restore purchase” asks the store to redeliver that entitlement. The purchase also unlocks visual themes but does not restrict any health feature for free users.

Permissions, security, and retention

This release does not request location, contacts, camera, microphone, Health Connect, or Apple Health permissions. The only permission-related additions beyond Internet access come from the Google ads and store-billing libraries (such as the advertising-ID permission described above); none of them asks you for authorization or gives access to your journal. Internet access supports consent, the Today-screen banner, store purchases, explicit medical-directory searches, external policy links, and addresses opened in a maps app.

White Hat minimizes collection, keeps health records local, encrypts them at rest, and tests release permissions and binaries. No safeguard removes all risk, especially on a compromised, rooted, jailbroken, or shared device. RhythmTrace is intended for adults aged 18 or older.

Rights, changes, and contact

Because White Hat does not receive the app’s local health records, users control and delete them on the device. Depending on location, law may provide additional access, correction, deletion, appeal, or complaint rights for information a business actually holds. White Hat will verify and respond to a valid request as required by applicable law and will not discriminate for exercising privacy rights.

Before adding accounts, White Hat cloud storage, independent analytics, a new advertising provider, or new permissions, White Hat will revise this Policy and the applicable app-store disclosures. Material changes will be presented in the app or store listing as appropriate.

Privacy and support contact: [email protected].