Privacy policy

Effective September 26, 2026. My Algo Rhythm is operated by Modu LLC. Contact rhythm@modudahakkoya.com about privacy, billing, or account deletion.

What the app uses

Google sign-in on Android, and Google or Apple sign-in on iPhone, verify your identity. Apple and Google create separate app accounts and are not merged automatically. Its signed identity token may include your name and email address; we process that token to verify sign-in and do not copy those profile fields into our account ledger. Our server derives an opaque app account identifier from your chosen provider identity. For Apple sign-in, the server keeps an encrypted Apple refresh token so it can revoke access when you delete the app account; it does not copy your Apple profile fields into the reading ledger. On Android, you may select YouTube History or Home screenshots with the system Photo Picker for a Quick Snapshot. Text recognition runs on your phone; the app saves extracted, source-labeled video titles and minimal capture details, not the selected image bytes. History screenshots show visible watched items; Home recommendations show what YouTube displayed and do not prove what you watched or liked. You can also request your broader YouTube history from Google Takeout in your browser and choose the downloaded file in the app. The app reads recognized history records locally and does not automatically collect your signed-in YouTube pages. Imported histories, selected reading sources, saved previews, saved readings, and exported backups remain on your phone or in a location you select. A file import does not verify who created that file.

After you select screenshots and sign in, an eligible free preview begins automatically. For a full reading you explicitly choose to use a reading credit. Only the extracted or cleaned YouTube titles, temporary row IDs and the chosen History or Recommendations source label are sent over HTTPS through our Google Cloud Run server to Alibaba Cloud Model Studio (Qwen), using its Singapore API endpoint, to produce the reading. Raw screenshots, image files, your YouTube login and video URLs are not sent. This is an online processing step. The relay does not maintain a reading library or save your title list or generated report. Alibaba states that it does not use this data for model training and retains data from model calls under its applicable terms and legal requirements. This is not a zero-retention service. See Alibaba Cloud Model Studio privacy information.

RevenueCat and the relevant app store process purchases, app-account purchase identifiers, and reading-credit balances. RevenueCat may retain an approximate country derived from the connection IP address when purchase-country information is unavailable. Operational logs can include IP address, browser or device information, request status and latency. We do not request GPS location or advertising-ID access. Store records and Google account or YouTube history are separate from your app account. My Algo Rhythm does not sell personal data or integrate its own advertising network. Google Takeout opens in your external browser. Google handles that browser session and its cookies and identifiers under its policies; the app does not receive your Google password or browser cookies through the file import.

Support correspondence is kept in our support mailbox while handling the request and necessary follow-up. Contact the same address to request removal of that correspondence.

Abuse prevention

Before a reading request, Cloudflare checks the connection IP address and a cryptographic fingerprint of the request to limit repeated requests from the same network. Cloudflare receives neither the history titles nor the app sign-in token in this check. It returns a short-lived signed admission ticket that our Google Cloud server verifies before processing the reading. The app does not store raw IP addresses for this check; short-lived rate counters use keyed fingerprints. Cloudflare also processes network information under its security and privacy terms.

App usage analytics

The US Android release sends basic app steps and outcomes to PostHog in the United States. On iPhone, usage sharing starts off and sends these events only after you choose to turn it on; you can turn it off again in Settings so we can understand where importing, creating, saving, loading, or purchasing a reading succeeds or fails. Events include the app version, a fixed step or outcome, and a random identifier held only for the current app session. The identifier is not derived from your Google account, app account, device or installation. We do not include history titles, exports, portraits, names, email addresses, file paths, advertising identifiers or report comments. We do not record your screen, automatically capture clicks, create person profiles, or use these events for advertising or model training.

PostHog is configured to discard client IP addresses from events; location enrichment is disabled. Its selected plan retains usage events for up to one year. Usage events are not linked to your app account, so account deletion cannot locate past usage events by account identity. Network requests still pass through the providers' infrastructure and security systems. Learn more in PostHog's privacy policy.

Optional reports

Report this reading sends the selected reason, a reading fingerprint, a keyed account reference, and any comment you type to a private developer report record. History and reading text are not attached automatically. Do not include passwords or payment details. A received report means it was recorded; it does not mean a human has reviewed it yet.

Protection and retention

App-server communication uses HTTPS. Server records are in access-controlled storage with public access prevention. Account deletion removes server sign-in families, revokes retained Apple sign-in tokens when applicable, requests RevenueCat customer deletion, and removes the account's identifiable reading reports and comments. Remote processing may remain pending while failures or financial operations are resolved.

Minimal pseudonymous free-preview or legacy free-reading claims, duplicate-charge, and spending records remain while needed to enforce the one-time free offer and cumulative spending cap. Unresolved financial records remain until reconciled. Minimal keyed report-write markers remain to prevent delayed uploads from recreating deleted reports; these markers contain no comment or reading fingerprint. They do not contain emails, history titles, reports, or sign-in credentials. Request logs are retained for 30 days. Deleted Cloud Storage objects remain recoverable under the configured seven-day soft-delete policy. Provider and store records may follow their own retention requirements.

Your choices

Use Delete account in the app or the web deletion page. In-app deletion also asks you to clear all app data on that phone, including other app accounts' local records. Web deletion cannot erase an offline phone or a backup you exported. Clear the app's data or uninstall it on those devices, and delete unwanted exported backups separately. Account deletion does not delete your Google or Apple account or YouTube history. Unused reading credits may be lost; deletion does not itself request or guarantee a store refund.