Skip to content

Legal

Privacy policy

What we collect, why, where it is stored and the rights you have, for the Rho app and this website.

Last updated 5 October 2026

Questions about this page

help@rhomovement.com
On this page
  1. Who we are
  2. What data we collect
  3. The website and the beta list
  4. Where your data lives
  5. Legal bases (GDPR)
  6. How long we keep it
  7. Your rights
  8. Age requirement
  9. Changes

Who we are

Rho Movement ("Rho", "the app") and the website rhomovement.com are operated by Loftd Studios AB (org. nr 559337-7541), based in Sweden ("we", "us"). We are the data controller for the personal data described here. Contact: help@rhomovement.com.

What data we collect

We collect only what the app needs to function:

  • Account data — email address, name, username, date of birth, gender, country, and an optional profile picture. Provided by you at signup.
  • Training data — the workouts, exercises, sets, repetitions, and weights you log, and any body measurements (e.g. body weight, lean body mass) you choose to record. This is health-related data you actively enter; we process it on the basis of your explicit consent, to show you your own training history and statistics.
  • Crash and error data — if the app crashes or malfunctions, technical details (device model, OS version, app version, stack trace) are sent to our error-reporting provider (Sentry, hosted in the EU). These reports are scrubbed of your email, name, and IP address; only an internal account identifier is attached.

We do not collect your location, contacts, browsing history, or advertising identifiers. The app contains no advertising and no tracking SDKs, and we do not sell or share your data with data brokers.

The website and the beta list

The beta list. If you leave your email address on rhomovement.com, we store that address, the time you left it, and which version of the sign-up wording you agreed to. We use it to invite you to the Rho beta and to tell you when Rho launches publicly, and we don't share it with anyone. We keep it until the public launch and delete it within 30 days after that, or as soon as you ask: email help@rhomovement.com and we'll remove it.

News. If you also tick "Send me occasional news about Rho", we store that choice, when you made it and the wording you agreed to, and we may send you a few emails a year about Rho. That is optional and separate from the beta list. Every news email has an unsubscribe link, and unsubscribing takes effect straight away. We keep your address for news until you unsubscribe.

Visiting the website. The website sets no cookies and uses no advertising or tracking tools. We measure visits with Vercel Web Analytics and Speed Insights, which count page views and page speed in aggregate without cookies and without identifying you. Like any web host, Vercel processes your IP address and browser details to deliver the pages and keep the site secure.

Where your data lives

Your data is stored with Supabase in the European Union (Stockholm, eu-north-1), and so is the beta list. Crash reports are processed by Sentry in the EU (Germany). The website is hosted by Vercel Inc. (USA); Vercel is certified under the EU–U.S. Data Privacy Framework, and its data processing agreement also includes the European Commission's standard contractual clauses (2021).

  • Performance of a contract — account and training data needed to provide the app.
  • Explicit consent (Art. 9) — health-related data you enter (training logs, body measurements).
  • Consent — the beta list, and separately the optional news. You can withdraw either at any time: unsubscribe from news with the link in any news email, or ask us to remove your address.
  • Legitimate interest — crash reporting to keep the app working, and delivering and securing the website.

How long we keep it

For as long as your account exists. Deleting your account (Settings → My personal data → Delete account) permanently and irreversibly deletes your account, profile, training history, measurements, and profile picture from our systems. Routine database backups age out within 7 days of deletion.

Your rights

Under the GDPR you can access, correct, export, restrict, object to the processing of, or delete your personal data. Most of this you can do directly in the app (edit profile, delete account). For anything else, email help@rhomovement.com — we respond within 30 days. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.

Age requirement

Rho is not intended for children. You must be at least 16 years old to create an account, and the app enforces this at signup.

Changes

We'll update this policy as the app evolves and note material changes in the app. Continued use after an update constitutes acceptance.