Retoma Privacy Policy
Retoma ("Retoma: routine without guilt") is an iPhone (with Apple Watch) and Android app that helps you keep a workout, sleep and food routine. This policy explains which data the app uses, where it is kept and what is never done with it.
Summary: Retoma has no server, no sign-up, no ads and no usage analytics. None of your data is sent to the developer.
1. Data the app uses
Health app (Apple Health) data. Only with your permission, Retoma reads from the Health app: workouts, with each workout’s active calories, heart rate (average and maximum) and distance, used to show how the workout went, include it in reports and suggest the effort (light, moderate or hard); sleep analysis; exercise minutes; State of Mind (mood), on iOS 18 or later; heart rate variability, used only to suggest a lighter day when it is well below your normal (a suggestion, not a diagnosis); alcoholic drinks; menstrual cycle (flow and spotting); water, caffeine and weight; steps, resting heart rate and time in daylight; and medications and doses logged in the Health app (iOS 26 or later, only if you allow it in the Medications card). Also with your permission, and with “Save to the Health app” on, Retoma writes to the Health app only what you log by hand: drinks, hobby sessions (as workouts) meditation (as mindful minutes), menstrual flow, water, caffeine and weight; never mood, sleep or medications. Reading is used to show whether the workout happened, how the night went, the day’s mood and patterns across this data. You can change these permissions at any time in iPhone Settings → Health → Data Access & Devices → Retoma.
Data you enter in the app: planned workout times and rest days; manual workout confirmations; food log (on plan, partly, off plan, ate out, ordered delivery); days marked as a "hard day"; the effort of each workout (light, moderate or hard), if you log it; pauses (travel, illness, injury); the reason a workout didn’t happen, if you answer; one-tap mood (1 to 5), if you log it; the name of a trusted person, if you turn that option on; habits you want to quit or cut down and their log; medications you add and your dose log; menstrual cycle (flow and symptoms), if you choose to track it; lab results (name, date, lab, values you type and attached files, which stay in the “Exames” folder of the Files app on the device and are included in your iPhone’s own iCloud backup if it’s on); notes you write; hobby discovery answers and hobby experiment sessions; voice notes and meal photos, if you use them (the microphone, camera and photos are only accessed when you tap to record, take or pick a picture; these files stay on the device only, outside iCloud and backups); and app settings.
2. Where the data is kept
On your iPhone. All of the data above is stored on the device itself.
In your iCloud (automatic backup). The data you enter in the app, except written notes, habits, medications, menstrual cycle, lab results and weight (which stay on the device and in the file backup), is copied to your iCloud storage, in your Apple account, so it isn’t lost if the app is deleted or you switch iPhones. The developer has no access to this backup.
Health app data never goes to the app’s iCloud storage or to any server. It is read from the Health app when the app opens and is not copied off the device.
3. When data leaves the device
Only when you decide. The report for AI contains a summary of your workouts, sleep, mood, food and notes for the chosen period; it opens in the iPhone share sheet and goes only where you choose (for example an AI app, Files or Notes), and from then on it is handled under the rules of the service you chose. The file backup contains the data you entered in the app and goes only where you save it. A card’s spreadsheet (CSV file, from its history) contains only that card’s logs and also goes only where you choose.
Calendar (optional). If you turn on “Evening chain in calendar”, the app creates a “Retoma” calendar on your phone with dinner, screens, bedtime and workout times for the next days. These events live in the device’s calendar app and follow whatever sync you already use there (for example iCloud or Google). Turning the option off deletes that calendar.
Asking for support (optional). If you turn on the trusted person, the app offers a ready message to them after two days without a workout. It only leaves through your phone’s share sheet, if you tap, and goes to whoever you choose.
Retoma+ purchases (optional). Payment for a subscription or the lifetime purchase is handled by the App Store or Google Play, with your account there; Retoma never sees or stores payment details. To check whether a purchase is active, the app uses RevenueCat, a subscription management service, which receives an anonymous code created on the device (no name, email or health data), the purchase details (product, date and expiry) and technical device information (system, app version and country). The code is shown in Settings → Retoma+; to ask for this data to be deleted, send it to the contact at the end of this page.
Weather forecast (optional). If you turn on "Rain on outdoor workouts", the app sends Open-Meteo, a free weather service that requires no account, the city name you type (to find it) and then only its coordinates (to get the hourly forecast). None of your personal, health or usage data goes with it. Turning the option off stops these requests.
4. What Retoma does not do
It does not send data to the developer or to third parties beyond what section 3 describes; does not use its own server, sign-up or login; does not show ads or use advertising tools; does not use analytics or tracking tools; does not sell, rent or share data; and does not use Health app data for advertising or any purpose beyond the features described here.
4.1 On Android
Retoma also has an Android version. There, the app uses Health Connect instead of the Health app: with your permission, it reads workouts (with each workout’s active calories, heart rate and distance), sleep, heart rate variability and, if you turn on the matching cards, weight, steps, resting heart rate, water, caffeine and menstrual cycle; it writes, if allowed, water, caffeine, weight, menstrual flow, hobby sessions and meditation. None of it is sent to a server. Instead of iCloud, the Android system’s own automatic backup (Google account) applies: it is made by the system, encrypted with your phone’s screen lock, and includes all of Retoma’s data (including notes, habits, medications, cycle, lab results and weight). The developer has no access to it; to leave it out, turn off phone backup in Android settings. Health permissions: Health Connect → App permissions → Retoma.
5. Notifications, widget and lock screen
Diagnostics and sharing. App errors stay on the device. In Settings, “Send diagnostics” creates a file with recent errors, app and iPhone versions and counts, with no text, names or health data; it only leaves the device if you send it. “Tell them I’m back” opens the share sheet with a ready message, only if you tap it.
Lock and deleting data. In Settings, you can turn on Face ID lock (the app uses your iPhone’s own Face ID only to unlock; Retoma never receives or stores face data) and delete whole categories of data without deleting the app. The appointment report is a PDF created on your iPhone and only leaves the device if you share it.
Reminders (dinner, screens off, bedtime, pre-workout snack and leaving for the workout, plan request, medications, reviews, hobby experiment and a question about pausing when the app goes unopened for days; you choose which ones you get) are scheduled on the iPhone itself; no notifications are sent from a server. The widget and lock screen countdown show the next step and the workout time and may appear on the lock screen and on Apple Watch. On Android, the home screen widget has buttons to log a workout and water; what you log there stays in the app’s data on your phone. You can turn the countdown off in the app’s settings and remove the widget at any time.
6. Your rights and how to delete your data
Your data is under your control. To view and export: the report for AI or the file backup, in the app’s settings. To delete it from the device: delete the app. To delete the iCloud backup: iPhone Settings → [your name] → iCloud → Manage Storage → Retoma. To revoke Health access: iPhone Settings → Health → Data Access & Devices → Retoma. Since the developer receives no data, there is no data of yours stored anywhere else to correct or delete.
7. Children
Retoma is not directed at children and does not collect data from anyone.
8. Health
Retoma organizes a routine and shows patterns in your own data. It does not diagnose and does not replace medical, nutritional or psychological care.
9. Changes to this policy
If this policy changes, the new version will be published at this same address with an updated effective date. Changes that affect how data is used will also be announced in the app.
10. Contact
Privacy questions: afonsohlc@gmail.com