Privacy Policy

Rymot operates three related products: Rymot Workforce and Rymot Enterprise (cloud-based workforce intelligence platforms deployed by an employer or organization), and Rymot Local (a free, local-first desktop application). Because these products handle data differently, this policy explains each separately where the distinction matters.

This policy is a general description of our current data practices and will evolve as the product does. It is not a substitute for a signed data processing agreement, which enterprise customers can request by contacting us.

These products are deployed by an organization (the "Customer") to monitor activity on devices and accounts it owns or authorizes for work use. The Customer is the data controller for its employees' data; Rymot acts as a data processor operating the platform on the Customer's behalf.

Depending on the Customer's configuration, data processed may include:

• Application and website usage (active window titles, domains, categories)
• Activity and idle-time signals used to compute productivity and focus metrics
• Periodic screenshots, where enabled by the Customer
• Attendance, clock-in/out, and timesheet data
• Account and profile information (name, work email, team, role)

If you are an employee of a Rymot Customer and have questions about what is collected or how it is used, please contact your employer directly — they control the configuration and retention settings for your account.

Rymot Local is designed so that activity data never leaves your device. It stores its database locally (SQLite) in your user data directory and makes no network calls to transmit your activity, screenshots, or usage data to Rymot or any third party. We do not have access to this data and cannot retrieve, view, or restore it on your behalf.

Downloading Rymot Local does not require an account or email address. If we later introduce optional cloud features (such as encrypted backup or cross-device sync), they will be opt-in and disclosed clearly before you enable them, and this policy will be updated accordingly.

We collect limited information when you interact with rymot.io or our apps:

• Contact form, demo request, and waitlist submissions (name, work email, company, message)
• Basic website analytics (pages viewed, referrer, approximate location, device type)
• Support communications you send us directly

We use a small number of cookies and local-storage entries required for the site to function (session state, theme preference) and, where enabled, privacy-respecting analytics to understand aggregate traffic. We do not sell data collected through cookies to third parties.

We use a limited set of vetted service providers to operate Rymot, including infrastructure/hosting providers, our database provider, and Resend for transactional email delivery (e.g. demo confirmations, waitlist notifications). Each subprocessor is contractually bound to only use data to provide the service to us and not for its own purposes.

For Rymot Workforce and Rymot Enterprise, retention is configured by the Customer and enforced through policy settings in the product. Enterprise customers can request full account and data deletion by contacting us. For Rymot Local, deletion is entirely in your hands — the local database can be inspected or deleted at any time from your device's user data directory.

We use industry-standard measures to protect data in transit and at rest, including encrypted connections (TLS) for all traffic to our platform and access controls limiting who inside Rymot can reach production systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Rymot is a workplace product not directed at children, and we do not knowingly collect data from anyone under 16.

We may update this policy as the product evolves. Material changes will be reflected by updating the "Last updated" date above; significant changes affecting how Customer data is handled will be communicated directly to affected Customers.

Questions about this policy or a request related to your data can be sent to [email protected], or via our contact page.