Our approach
Avero Systems LLC (“Avero Systems,” “we,” “us,” or “our”) provides Rhythm, a Windows-first family activity application. This policy explains how Rhythm and the Rhythm pages on averosystems.io access, use, store, and share information.
Rhythm is designed around local collection and local reporting. Activity records and the parent dashboard are stored and served on the Windows computer where Rhythm is installed unless a user deliberately enables a feature that sends information elsewhere, such as an email digest.
Information Rhythm processes locally
Depending on product configuration and enabled features, Rhythm may process:
- Windows user and session identifiers needed to associate activity with a local profile;
- foreground application activity, including application names and active-time intervals;
- browser activity made available to Rhythm, including website addresses, page titles, and activity intervals;
- idle, active, lock, and unlock state;
- settings, locally generated summaries, license state, service health, and diagnostic records; and
- email recipients, schedules, and report content configured by an authorized parent or administrator.
This information is used to provide the product’s local dashboard, activity views, summaries, scheduling, diagnostics, safety features, and support workflows.
Google user data and Gmail
Connecting a Google account is optional. Rhythm requests the following Google OAuth permissions:
openidandemail, used to identify and display the connected Google account; andhttps://www.googleapis.com/auth/gmail.send, used only to send emails configured by the user through that account.
Rhythm uses Gmail access to send configured test messages, activity digests, and related product emails to recipients selected by an authorized user. Rhythm does not request permission to read, search, modify, or delete messages in the connected Gmail account.
Email subject lines, recipients, and message bodies are transmitted directly from the installed Rhythm application to Google’s Gmail API for delivery. Google and the recipient’s email provider process the message as part of ordinary email delivery. Recipients selected by the user receive the contents of messages sent to them.
Google credential storage and deletion
The connected account email address, OAuth refresh credential, OAuth client information, and short-lived access credentials are used to maintain the Gmail connection. The refresh credential is encrypted using Windows Data Protection API machine protection and stored on the computer where Rhythm is installed. Access credentials are used transiently to call Google’s API. Rhythm does not transmit OAuth credentials to Avero Systems’ servers.
When an authorized user selects “Disconnect Gmail,” Rhythm requests revocation from Google and deletes the locally stored Gmail credential. A user can also revoke Rhythm from the security settings of their Google Account.
Google Limited Use: Rhythm’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
When information leaves the local computer
Information may leave the computer only as needed for enabled functionality, support requested by the user, security, or legal compliance. Examples include:
- report content sent to Google and user-selected recipients when Gmail delivery is enabled;
- system health or lifecycle notifications sent through a separately configured notification service;
- diagnostic information an authorized user deliberately provides to Avero Systems for support; and
- information required to comply with law or protect users, the public, Avero Systems, or the integrity of the product.
We do not sell Google user data, use it for advertising, use it to determine creditworthiness, or use it to train generalized artificial-intelligence or machine-learning models.
Retention and user choices
Local activity records, configuration, diagnostics, and summaries remain on the computer according to the product’s configuration and maintenance choices. An authorized administrator can remove local data through product or uninstall workflows. Choosing to preserve data during an upgrade, repair, or uninstall keeps that data on the machine until it is removed by an authorized user.
Users control whether Gmail is connected, which recipients receive digests, and when Gmail is disconnected. Copies of emails already delivered may remain in the sender’s Sent folder, recipients’ mailboxes, and email-provider systems under their respective retention practices.
Security
Rhythm uses technical and administrative safeguards appropriate to the nature of the information, including Windows-backed protection for locally stored Gmail credentials and local access controls for application data. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
Children and authorized use
Rhythm is provided to parents, guardians, and other authorized adults. The person installing or administering Rhythm is responsible for using it only on devices and accounts they are legally authorized to manage, providing notices and obtaining consent where required, and complying with applicable child-privacy, monitoring, employment, education, and communications laws.
Website information
When you visit averosystems.io, hosting and network providers may process standard technical information such as an IP address, browser type, requested page, timestamp, and security logs. Emailing us provides the address and contents you choose to send. We use this information to operate and secure the website, respond to inquiries, and maintain business records.
Service providers and legal disclosures
We may use service providers for website hosting, email delivery, product infrastructure, and support. They may process information only as needed to provide their services to us and subject to appropriate obligations. We may disclose information when reasonably necessary to comply with law, enforce our agreements, address fraud or security, or protect rights and safety.
Changes to this policy
We may update this policy as Rhythm changes. We will post the updated version at this URL and change the effective date. If a change materially affects how Rhythm uses Google user data, we will provide appropriate notice and obtain consent when required before using that data in the new way.
Contact us
Questions, privacy requests, and deletion requests may be sent to hello@averosystems.io.
Avero Systems LLC
3500 Oak Lawn Ave., Suite 460
Dallas, TX 75219
United States