Privacy Policy

This version takes effect when Rhevio 4.0 is released on the App Store. Until then, the previous Privacy Policy (effective September 18, 2026) applies.

SOLARTUNE d.o.o. ("SOLARTUNE," "we," "us," or "our") operates the Rhevio mobile application ("Rhevio" or the "App") and the website rhevio.app (the "Website"). This Privacy Policy explains how we handle information in connection with your use of Rhevio and the Website.

Rhevio is built on a privacy-first principle: we do not operate servers that store your personal information and we do not require accounts. Your content is stored on your device, and, if you have Premium and turn on iCloud Sync, in your own private iCloud database so it can appear on your other devices. SOLARTUNE cannot see it either way. We collect limited product analytics, tied only to a random identifier, to improve the App, as described in Section 07, and you can turn them off at any time. We never build personal profiles or track you across apps or websites.

01Personally Identifiable Information We Do Not Collect

Rhevio has no accounts, and none of your tasks, notes, or other content is ever sent to SOLARTUNE. In particular, we do not collect:

Email addresses, names, or user accounts. Rhevio requires no sign-up or authentication of any kind.
Advertising identifiers (IDFA). Rhevio contains no advertising and does not access the Identifier for Advertisers.
Device fingerprints or cross-app tracking data.
Contacts, photos, or camera data.

Crash reports and product analytics (Sections 06 and 07) include technical details such as your device model, a random install or session identifier, and session timing. These are not your name or contact details, but under the GDPR they can still count as personal data, so we treat them that way and describe them below. Your location is evaluated on your device, and SOLARTUNE never receives your coordinates. Location information leaves your device only to Apple, when you search for a place on the map or sync saved places to your own iCloud (Section 05), and PostHog estimates a rough location from your IP address if analytics are on (Section 07).

02Information You Create in the App

All content you create in Rhevio is stored on your device using Apple's SwiftData framework and is never transmitted to SOLARTUNE or any third party. This includes:

Tasks and their attributes (titles, notes, checklist steps, due dates, priorities, energy levels, tags), including tasks you capture in a brain dump
Routines and routine schedules, including routines you mark as medication and when you ticked them off
Mood and energy check-ins and end-of-day reflections
Saved locations used for location-based automation, including any workout activity you tag a place with
Records of time spent at a saved place, used to log workouts and complete place-tied tasks
App settings and preferences
Focus session history

Rhevio decides which task to show you next on your device, using things like the energy level and mood you have entered. This happens only on your device, and nothing about it is sent anywhere.

This data exists within the App's sandboxed storage on your device and, if you have enabled iCloud Sync, in your private iCloud database as described in the next section. We have no ability to access, read, or recover it in either case.

Widgets and Lock Screen. If you add Rhevio widgets, the App copies the small amount of information they display (such as your next task, today's medication routine and whether you ticked it off, routine progress, and a mood check-in shortcut) to a storage area on your device that only Rhevio and its widgets can read. Widgets on your Lock Screen are visible without unlocking your iPhone, so anyone holding it can see what they show. This information never leaves your device.

Spotlight. Rhevio adds your task titles to your iPhone's Spotlight search index so you can find them from the Home Screen. The index is kept on your device by iOS. You can turn this off in the App's Settings, which removes Rhevio's entries from the index.

03iCloud Sync

Rhevio offers optional iCloud Sync as a premium feature. When it is turned on, the content listed in the previous section is also stored in your private iCloud database (Apple's CloudKit private database) so that it can appear on your other devices signed into the same Apple Account.

This data lives in your own Apple Account, under Apple's privacy terms, not on any SOLARTUNE server.
SOLARTUNE has no access to it, cannot read it, and cannot recover it.
Rhevio uses only the private CloudKit database. It never writes your content to a public or shared database.
Sync is a Premium feature and can be turned off at any time under Settings in the App. With sync off, Rhevio works exactly as before with everything stored on your device only.
Records of time spent at a place are tagged with a random per-install identifier so that each device only acts on its own sessions. That identifier is generated on your device, is not linked to you or your Apple Account, and is never sent to SOLARTUNE.

For information about how Apple handles iCloud data, see Apple's Privacy Policy.

04Apple Health (HealthKit)

Rhevio can use Apple Health in two optional ways.

Workouts. If you tag a saved place with an activity, Rhevio can record the time you spend there as a workout in Apple Health. This is optional and off unless you set up a place this way.

Write access is used solely to save those workouts to Apple Health.
Read access to workouts is used solely to check for workouts already recorded by another device, such as an Apple Watch, so that Rhevio does not save a duplicate.

Sleep. If you allow it, Rhevio reads your recent sleep from Apple Health to suggest a starting energy level each morning. The suggestion is calculated on your device. You can always pick a different energy level, and if you do not want the suggestion, you can deny or revoke sleep access in iOS Settings (Health, then Data Access & Devices, then Rhevio).

Health data is used only for these purposes. It is never sent to SOLARTUNE, never used for advertising or marketing, never shared with or sold to any third party, and is never included in crash reports or product analytics. This also applies to anything derived from it: your suggested or chosen energy level, whether you kept the suggestion, and the type or length of a workout are not sent to analytics or crash reports. You may deny or revoke Health access at any time in iOS Settings, and Rhevio continues to work without it.

05Device Permissions

Rhevio may request the following device permissions. None of them send data to SOLARTUNE:

(a) Location (CoreLocation). Rhevio uses location data to trigger task reminders and routine suggestions when you arrive at or leave saved locations (geofencing), and to time workouts at places you have tagged with an activity. Your live position is evaluated on your device and is never sent to SOLARTUNE or anyone else. The places you save, including their names and coordinates, are stored like the rest of your content: on your device, and, if you have Premium and iCloud Sync turned on, in your own private iCloud database, where SOLARTUNE cannot access them. When a place reminder fires, product analytics record only the kind of trigger (for example arriving or leaving). Crash reports may also include a random place ID. Neither includes the place's name, address or coordinates. Rhevio may request "Always" location permission to enable geofencing while the App is in the background. You may deny or revoke this permission at any time in iOS Settings. A brain dump can also tie a task to a saved place (for example "when I get home"). The reminder then works as described above.

(b) Apple Maps (MapKit). While you are adding or editing a saved place, Rhevio uses Apple's Maps services to search for an address and to look up the address of a point you pick on the map. The text you type and the coordinates you select are handled by Apple for that lookup, under Apple's Privacy Policy. This happens only while you are setting up a place, never in the background and never as part of geofencing, and SOLARTUNE receives none of it.

(c) Microphone and Speech Recognition. Rhevio offers voice-to-text task creation using Apple's on-device speech recognition (SpeechAnalyzer). Audio is processed locally and is never sent to SOLARTUNE, Apple servers, or any third party. Rhevio turns what you say into separate tasks, routines, places and times on your device. To recognise the names you use, Rhevio gives the recogniser a list of words taken from your own task titles, place names, and routine titles; this list stays on your device and is never stored separately or logged. iOS may download a speech recognition model from Apple the first time you use dictation; no audio or content is sent as part of that download. If you use the microphone key on the iOS keyboard instead of Rhevio's own mic button, for example in a "Type instead" field, that dictation is Apple's keyboard dictation, handled by Apple under your iOS settings and Apple's privacy terms, not by Rhevio. You may deny or revoke microphone access at any time in iOS Settings.

(d) Notifications. Rhevio uses local push notifications to deliver task reminders, routine nudges, focus session alerts, reminders tied to arriving at or leaving a saved place, and prompts to start or finish a workout at a place you have tagged with an activity. If you allow it, Rhevio can also end a focus session with a system alarm (AlarmKit) that sounds even in silent mode, and shows a running focus session on your Lock Screen as a Live Activity. These notifications, alarms, and Live Activities are generated and scheduled entirely on your device. No notification data is sent to SOLARTUNE. You may disable notifications at any time in iOS Settings.

(e) Apple Health (HealthKit). Rhevio requests permission to save workouts to Apple Health, to read workouts so it does not duplicate a session already recorded by another device, and, if you allow it, to read your sleep to suggest a starting energy level. See the Apple Health section above for the full description. You may deny or revoke this permission at any time in iOS Settings.

(f) Apple Intelligence. On iPhones that support Apple Intelligence, Rhevio uses Apple's on-device language model to suggest smaller steps for a task ("Smaller") and to estimate how long a task will take. The text involved, such as task titles, is processed on your device and is not sent to SOLARTUNE, Apple, or any third party. Rhevio does not use Apple's Private Cloud Compute or any other cloud AI service. If we ever add one, it will be off by default and we will update this policy first.

06Crash Reporting

Rhevio uses Sentry (provided by Functional Software, Inc.) for crash reporting in production builds only. The purpose of crash reporting is solely to identify and fix technical errors that affect App stability.

What Sentry receives:

Technical crash data: stack traces, error messages, device model, iOS version, App version, and available memory at the time of a crash.
Short technical breadcrumbs describing what the App was doing before an error, using fixed labels such as "iCloud sync attempt failed" or "workout save retried". They never contain your content.
Basic session health data: when an app session started, how long it lasted, and whether it ended in a crash.
A randomly generated event identifier.
Some breadcrumbs include random identifiers for a task, session or place so we can follow an error across steps. These identifiers are generated on your device and do not reveal the content or location of the task or place.

What Sentry does not receive:

No names, email addresses, or other contact details. The Sentry SDK is configured with sendDefaultPii disabled.
No task content, routine data, mood or energy entries, reflections, place names, addresses or coordinates, health or workout data, values derived from health data, or any other user-created content.
No device identifiers, advertising identifiers, or account information.

Rhevio also samples 20% of app sessions for performance traces, which measure how long technical operations take. Traces contain timing and technical identifiers only, never your content. Sentry processes this data as a data processor on our behalf, on its European Union servers in Frankfurt, Germany. For Sentry's own privacy practices, see sentry.io/privacy.

Opt-out: Rhevio does not currently provide an in-app toggle for crash reporting. Because crash reports require an internet connection to transmit, you can effectively prevent crash reporting by using Rhevio in airplane mode or by revoking the App's internet access through a device-level firewall or configuration profile.

07Product Analytics

Rhevio uses PostHog (provided by PostHog Inc.) for product analytics. The purpose of analytics is solely to understand how the App is used so we can improve it. Analytics data is processed on PostHog's European Union servers (eu.i.posthog.com).

Your choice. Product analytics are on by default. You can turn them off at any time with "Share Analytics" in the App's Settings. If Premium iCloud Sync is on, your choice is saved in your private iCloud and applies on all your devices signed in to the same Apple Account; otherwise it applies to the device where you set it. Turning it off stops new analytics from being captured, and the App checks your choice each time it starts, before any analytics are sent. A small number of events already queued when you turn it off may still go out.

What PostHog receives, when analytics are on:

Anonymous usage events: screens viewed, features used (e.g., task created, task completed, routine spawned), onboarding progress, and subscription-related events (paywall viewed, purchase started/completed).
Basic device metadata: device model, iOS version, App version.
Anonymous session data: session start/end times and duration.
A randomly generated anonymous identifier (not linked to your Apple Account or any personal identity).
For place reminders, only the kind of trigger (for example arriving or leaving). Rhevio does not send place IDs, names, addresses or coordinates to PostHog.
A rough location (country and city) that PostHog estimates on its servers from the IP address of your connection. Rhevio itself never sends your location to PostHog.

What PostHog does not receive:

No task titles, notes, or content of any kind.
No reflection text, routine names, or mood or energy check-in details.
No place names, addresses or coordinates.
No health or workout data of any kind, and no values derived from it, such as your energy suggestion or the type or length of a workout.
No information about whether Rhevio showed you links to support services.
No email addresses, Apple Account, or any account information.
No advertising identifiers (IDFA) or cross-app tracking data.

Analytics events are not collected in development builds of the App. For PostHog's own privacy practices, see posthog.com/privacy.

07aWebsite Analytics (rhevio.app)

The rhevio.app website uses no cookies, analytics scripts or tracking. Our hosting provider, Cloudflare, processes your IP address and technical request data to deliver the pages and protect the site, and we see only aggregated visit counts. Links to the App Store carry a campaign tag that tells Apple which page you came from; Apple handles this under its own privacy policy.

08In-App Purchases and Subscriptions

Rhevio offers optional premium subscriptions (monthly and yearly auto-renewing) through Apple's App Store. There is no lifetime or one-time purchase. All billing, payment processing, and subscription management is handled entirely by Apple.

SOLARTUNE does not collect, process, or have access to your payment information, credit card details, Apple Account, or billing address. For information about how Apple handles your purchase data, see Apple's Privacy Policy.

Rhevio allows you to share tasks with others via universal links. When you share a task:

The task data (title, notes, due date, and other task attributes) is encoded directly into the URL as a base64url-encoded parameter.
No data is sent to or stored on any server. The shared information exists solely within the URL itself.
Anyone who receives the URL can decode and view the task data contained in it.

You should exercise discretion when sharing task links, as the task content is embedded in the URL in an encoded (not encrypted) format.

10Children's Privacy

Rhevio is rated 9+ on the Apple App Store. Rhevio does not knowingly collect personal information from anyone, including children under the age of 13 (or the applicable age in your jurisdiction). Rhevio asks no one for their name, age, or contact details, and the only data that leaves the device is the technical crash data and the analytics data described above (if analytics are on), which is not linked to who is using the App.

If you are a parent or guardian and believe your child has somehow provided personal information through the App, please contact us at support@rhevio.app and we will investigate promptly.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following applies:

(a) Data Controller. SOLARTUNE d.o.o., a company organized under the laws of the Republic of Slovenia with its registered seat at Trg komandanta Staneta 8, 1000 Ljubljana, is the data controller for any personal data processed through the App and the Website.

(b) Legal Basis.

Product analytics via PostHog in the App are based on our legitimate interest in understanding how the App is used so that we can improve it (Article 6(1)(f) GDPR). We have assessed that this interest is not overridden by your rights, given that analytics events are keyed only to a random identifier and contain no names, contact details, advertising identifiers, content you create, or health data. You can object at any time by turning off "Share Analytics" in the App's Settings, which stops new analytics event transmission.
Crash reporting via Sentry is based on our legitimate interest in maintaining the stability and security of the App (Article 6(1)(f) GDPR). We have assessed that this interest is not overridden by your rights, given that crash reports contain no names, contact details, advertising identifiers, content you create, or health data, and the processing is limited to the technical data described in Section 06.
The Website uses no analytics (Section 07a).

(c) Data Subject Rights. You have the right to:

Request access to personal data we hold about you;
Request rectification or erasure of your personal data;
Object to or request restriction of processing;
Data portability;
Withdraw your consent at any time, where processing is based on consent;
Lodge a complaint with your local supervisory authority. In Slovenia this is the Information Commissioner (Informacijski pooblaščenec, www.ip-rs.si).

In practice, crash reports and analytics events are keyed only to random identifiers, and we hold nothing that links those identifiers to your name or Apple Account. This means we usually cannot find a specific person's records unless you can give us the identifier involved; if you contact us, we will help where we can. All user-created content is stored on your device and, where you have enabled iCloud Sync, in your own private iCloud database. It is under your sole control in both cases.

(d) Sub-processors. Sentry (Functional Software, Inc., San Francisco, CA, USA) acts as a data processor for crash reporting; crash data is processed on Sentry's EU servers in Frankfurt, Germany. PostHog (PostHog Inc., San Francisco, CA, USA) acts as a data processor for product analytics; analytics data is processed on PostHog's EU servers. Apple Inc. acts as a processor for iCloud Sync, storing your content in your own private iCloud database on Apple's infrastructure. Cloudflare, Inc. (San Francisco, CA, USA) hosts the Website and acts as a data processor for delivering and protecting it. Rhevio uses no third-party AI provider; the features in Section 05(f) run on your device. Sentry, PostHog and Cloudflare are US companies. For any access to data from the United States, for example for support or maintenance, we rely on the EU-US Data Privacy Framework and each processor's data processing agreement.

(e) Contact for Data Protection Inquiries. The data controller can be reached at:

SOLARTUNE d.o.o.
Trg komandanta Staneta 8
1000 Ljubljana, Slovenia
Registration number (matična številka): 6729789000
Tax number (davčna številka): 37418220
Email: support@rhevio.app

12Your Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident:

We do not sell your personal information as defined by the CCPA/CPRA.
We do not share your personal information for cross-context behavioral advertising.
We do not use or disclose sensitive personal information for purposes beyond those permitted under the CPRA.
We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects.
Rhevio collects no names, contact details, accounts, or advertising identifiers. The limited technical data described in Sections 06 and 07 is keyed to random identifiers that we cannot link to you, so we may be unable to match a request to specific records. Nevertheless, you may contact us at support@rhevio.app with any privacy-related requests.

13Your Rights Under the Personal Information Protection and Electronic Documents Act (PIPEDA)

If you are a Canadian resident, SOLARTUNE is committed to compliance with PIPEDA. Rhevio collects no names, contact details, or accounts, and limits what leaves your device to the technical crash data and the analytics data described in Sections 06 and 07. You can turn analytics off at any time with "Share Analytics" in the App's Settings. Should you have questions or concerns, you may contact us at support@rhevio.app or file a complaint with the Office of the Privacy Commissioner of Canada.

14Data Retention and Deletion

(a) Your content. All user-created content is stored on your device, and in your private iCloud database if you have enabled iCloud Sync. You control this data entirely. You may delete individual items within the App at any time.

Uninstalling Rhevio removes all App data from that device. If iCloud Sync was turned on, a copy remains in your private iCloud database and will return if you reinstall the App on a device signed into the same Apple Account. To delete that copy, open iOS Settings, tap your name, then iCloud, then Manage Account Storage, and remove Rhevio's data. You can also turn iCloud Sync off in the App before uninstalling.

(b) Crash reports. Crash data transmitted to Sentry is kept for 90 days and then deleted automatically. Crash reports contain no names, contact details, or content you create, and we do not link them to you. For Sentry's own privacy practices, see sentry.io/privacy.

(c) Analytics data. Anonymous analytics data transmitted to PostHog is kept for 12 months and then deleted automatically. Analytics events contain no names, contact details, or content you create, and we do not link them to you. For details, see posthog.com/privacy.

(d) Apple. Apple may retain purchase and subscription records in accordance with Apple's Privacy Policy. SOLARTUNE has no control over or access to this data.

15Security

Your on-device data benefits from the security features built into iOS, including file system encryption and the App sandbox. Content synced through iCloud is encrypted in transit and at rest by Apple, and is stored only in your private CloudKit database. Crash reports transmitted to Sentry and analytics events transmitted to PostHog are sent over HTTPS (TLS encryption in transit). We do not operate any servers that store your data.

While no method of electronic transmission is 100% secure, we believe the privacy-by-design architecture of Rhevio, where your data stays on your device or inside your own Apple Account and never reaches us, provides strong protection for your information.

16International Data Transfers

Crash report data is processed on Sentry's European Union servers in Frankfurt, Germany, and analytics data is processed on PostHog's European Union servers. The Website is hosted by Cloudflare, Inc., which may process request data, including your IP address, in the United States and other countries where it operates. Sentry (Functional Software, Inc.), PostHog Inc. and Cloudflare, Inc. are US companies, so their staff in the United States may access this data, for example for support or maintenance. For any such access we rely on the EU-US Data Privacy Framework and their data processing agreements. If you enable iCloud Sync, the storage location of your iCloud data is determined by Apple and governed by Apple's privacy policy and terms, not by SOLARTUNE. SOLARTUNE ensures that appropriate safeguards are in place for any international transfers in compliance with applicable data protection laws.

17Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example when the App gains a feature that handles information differently. The current version is always published at rhevio.app/privacy and linked from the App's Settings. A revised policy takes effect on the "Effective Date" shown at the top of this document, which is normally the day we publish it.

Where a change materially reduces the protection of information we already hold about you, or where applicable law requires it, we will give you notice before the change takes effect. Where a change needs your consent, we will ask for it in the App and will not apply the change to you until you agree.

18Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: