Legal
Privacy Policy
How Rymot collects, uses, stores, and protects data across Rymot Workforce, Rymot Enterprise, and Rymot Local.
- Last updated
- October 1, 2026
- Sections
- 11
§01Overview
Rymot operates three related products: Rymot Workforce and Rymot Enterprise (cloud-based workforce intelligence platforms deployed by an employer or organization), and Rymot Local (a free, local-first desktop application). Because these products handle data differently, this policy explains each separately where the distinction matters.
This policy is a general description of our current data practices and will evolve as the product does. It is not a substitute for a signed data processing agreement, which enterprise customers can request by contacting us.
§02Rymot Workforce & Rymot Enterprise
These products are deployed by an organization (the "Customer") to monitor activity on devices and accounts it owns or authorizes for work use. The Customer is the data controller for its employees' data; Rymot acts as a data processor operating the platform on the Customer's behalf.
Depending on the Customer's configuration, data processed may include:
- Application and website usage (active window titles, domains, categories)
- Activity and idle-time signals used to compute productivity and focus metrics
- Periodic screenshots, where enabled by the Customer
- Attendance, clock-in/out, and timesheet data
- Account and profile information (name, work email, team, role)
If you are an employee of a Rymot Customer and have questions about what is collected or how it is used, please contact your employer directly — they control the configuration and retention settings for your account.
§03Rymot Local
Rymot Local is designed so that activity data never leaves your device. It stores its database locally (SQLite) in your user data directory and makes no network calls to transmit your activity, screenshots, or usage data to Rymot or any third party. We do not have access to this data and cannot retrieve, view, or restore it on your behalf.
Downloading Rymot Local does not require an account or email address. If we later introduce optional cloud features (such as encrypted backup or cross-device sync), they will be opt-in and disclosed clearly before you enable them, and this policy will be updated accordingly.
§04Information We Collect Directly
We collect limited information when you interact with rymot.io or our apps:
- Contact form, demo request, and waitlist submissions (name, work email, company, message)
- Basic website analytics (pages viewed, referrer, approximate location, device type)
- Support communications you send us directly
§06Third-Party Subprocessors
We work with a limited set of vetted service providers to operate Rymot, such as hosting and infrastructure, data storage, email delivery and website analytics. They process data only on our instructions and only to provide their services to us, under contractual confidentiality and security obligations.
§07Data Retention & Deletion
For Rymot Workforce and Rymot Enterprise, retention is configured by the Customer and enforced through policy settings in the product. Enterprise customers can request full account and data deletion by contacting us. For Rymot Local, deletion is entirely in your hands — the local database can be inspected or deleted at any time from your device's user data directory.
§08Security
We use industry-standard measures to protect data in transit and at rest, including encrypted connections (TLS) for all traffic to our platform and access controls limiting who inside Rymot can reach production systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
§09Children’s Privacy
Rymot is a workplace product not directed at children, and we do not knowingly collect data from anyone under 16.
§10Changes to This Policy
We may update this policy as the product evolves. Material changes will be reflected by updating the "Last updated" date above; significant changes affecting how Customer data is handled will be communicated directly to affected Customers.
§11Contact
Questions about this policy or a request related to your data can be sent to [email protected], or via our contact page.