App Privacy Notice
Effective date: 25 April 2025
Last updated: 6 November 2025
This Privacy Notice ("Policy") explains how we collect, use, and protect your personal data when you use the RIZOM mobile application (“RIZOM app”, “we”, “us”, “our”).
The RIZOM app is designed around the principle that your words and your voice belong to you. All personal reflections and inputs are processed locally on your device, unless you explicitly choose to share them. You have full control over what you share, and you may revoke your consent at any time.
Please note:
-
This Privacy Notice applies solely to the RIZOM app and not to the RIZOM website, which is governed by a separate policy available here.
-
Also, by using the RIZOM app you agree to abide by the app’s Terms of Use, which set out the rules, rights and responsibilities for using the service.
1. Who We Are
The RIZOM app is developed and managed by Us (RIZOM Ltd), the data controller under applicable data protection laws (EU GDPR and UK GDPR).
For key infrastructure services, we work with a data processor, CarPal Enterprises, acting under our instructions and contractual safeguards.
If you have any questions about this notice or how we process your data, contact us here.
2. Why We Collect Data
The RIZOM app is designed to explore how metaphorical, mood-based journaling can support emotional expression for individuals and circles. We collect minimal data, strictly for the following purposes:
-
To allow you to log in and return to your session
-
To enable core features such as mood reflection and voice input
We do not use your data for profiling, commercial targeting, or third-party marketing.
3. What Data We Collect
We only collect what is strictly necessary to operate the app and support your experience. The RIZOM app is designed around edge computing principles:
-
your optional personal data is stored on your device, except for your email address
-
your input (mood entries, voice/text reflections...) is stored and processed locally on your device and is never transmitted unless you choose to share it. If you do so, it is anonymised before we store it in aggregated form.
-
If you submit feedback, it is also fully anonymised before any analysis.
We must collect your email address to register your account, maintain session continuity, and provide support if needed. This is the only piece of personal data stored on our servers.
In addition, you may choose to provide the following optional information to personalise your experience and help the app’s interface and voice agent better understand your context:
-
First name or alias: for a more personalised interface
-
Preferred language: to adjust the app’s interface and prompts accordingly
-
Year of birth or age group: to help tune the tone and rhythm of the interaction
-
Gender: to enable respectful and inclusive dialogue
-
Location (e.g. country or region): to support cultural relevance in metaphors and prompts.
You are free to use the RIZOM app without entering any optional data.
4. Legal Basis for Processing
We rely on the following lawful bases to process your data:
-
Consent: when you voluntarily share content or provide optional info
-
Contract: to enable login, app functionality, and performance
-
Legitimate interest: to improve the app and ensure service continuity
You may withdraw your consent or request deletion of your data at any time.
5. Data Storage and Security
-
Personal content is stored locally on your device unless explicitly shared
-
Login email is stored securely on our servers
-
Shared feedback is anonymised before storage or use
-
We apply encryption and industry-standard safeguards
-
Our processor, CarPAl Enterprises, operates under GDPR-compliant agreements
6. International Transfers
If any data is processed outside the EU or UK, we ensure appropriate safeguards are in place (e.g. standard contractual clauses) in compliance with applicable law.
7. Your Rights
Under the GDPR and UK GDPR, you have the right to:
-
Access your data
-
Correct or update inaccurate information
-
Request deletion of your account and associated data
-
Withdraw consent for optional processing
-
File a complaint with your local data protection authority
To exercise any of these rights, please contact us here.
8. Retention
We retain your email address and account-related data only as long as needed to provide app functionality, or until you request deletion.
If you choose to share symbolic outputs or feedback with us, these will be anonymised and aggregated for research, development, or insight generation.
Once fully anonymised — meaning the data can no longer be linked back to you in any way — it may be used by RIZOM or its partners (including BtB clients or in the context of data philanthropy initiatives) to support emotional insight, societal research, and wellbeing-oriented innovation.
To prevent re-identification, symbolic data is only included in aggregate analyses when a minimum threshold of user inputs is reached.
In accordance with GDPR, fully anonymised and de-identified data is no longer considered personal data, and as such, it cannot be revoked or deleted, since it contains no identifiable information.
9. Change to this Notice
This Privacy Notice may be updated as the RIZOM app evolves. We will inform you of any significant changes within the app or via the email you registered with.
