Privacy Policy
1. Who is responsible
Kramer Consulting BV, Utrecht, the Netherlands, is the controller of personal data processed through Rime Family. Contact: support@rimedata.nl.
2. What we process
- Account data: your name, email address, a hashed password (we never keep the password itself) and sign-in times. If you use Google sign-in we receive your name and verified email address from Google, nothing else.
- Household data: the people in your household and their roles; calendar events, school or work notices, chores, projects, plans, budget lines, notes and check-ins that you enter, connect or forward; files you upload to Dump It and what we read from them.
- Children's data: a parent creates each child's profile (name, age, school, schedule). Check-ins and notes about children are visible only to the parents and to caregivers the parents have chosen. A child signs in with a PIN a parent sets.
- Billing data: Stripe processes payments. We keep the subscription status and Stripe's customer reference, not card numbers.
- Technical data: IP address and request logs for security, and cookies that keep you signed in.
3. Why, and on what basis
To provide the service you asked for (contract); to keep it secure and prevent abuse (legitimate interest); to send service emails such as invitations, sign-in links and payment notices (contract); and to meet legal obligations. Where a child's information is involved we rely on the consent and responsibility of the parent who created the profile. We do not use anyone's data for advertising or tracking, and we do not sell data.
4. Who else sees it
We use service providers who process data on our behalf: hosting (Render), payments (Stripe), email delivery (Resend or a similar provider), Google (only if you sign in with it or connect a Google service), and, if switched on for this server, Anthropic to read the files and messages you give us. They may only use the data to provide their service to us. Inside your household, what each person sees depends on the roles and permissions a parent sets.
5. Where it is kept and for how long
Data is stored on a server in the region configured by the operator. We keep household data while the household exists. When a parent deletes the household, its data is removed from the live database right away; backups roll off within a short period. Support tickets are kept for a reasonable time to help you.
6. Your rights
You can ask to access, correct, export or delete your data, to object to processing, and to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). Parents can export or delete everything themselves in Settings; for anything else write to support@rimedata.nl.
7. Security
Passwords are stored as salted scrypt hashes; connections use HTTPS; each household's data is separated from all others. No system is perfectly secure; tell us at once if you suspect a problem.
8. Changes
If we change this policy in a way that matters we will tell you. The date at the top shows the latest version.