Rhythm is a weekly planning tool for pastors, ministry teams, and the staff of ministry-adjacent non-profits. Ministry work involves genuinely sensitive material — counselling notes, member, donor and volunteer details, financial plans — so this page tries to be specific rather than reassuring. Where something is a limitation, it says so.
The short version. We store what you put into Rhythm so we can show it back to you. We do not sell your data, we do not advertise, we run no third-party tracking or analytics, we take no payment information, and we do not use your content to train AI models. Private notes and private meetings stay private to you. Rhythm is in beta and free.
Who we are
Rhythm is operated by Tim Nicolette and reaches you through pastorsrhythm.com, nonprofitrhythm.com, and the app at app.pastorsrhythm.com. You can reach us any time at timnicolette5@gmail.com with a question, a correction, or a request to delete your data.
What we collect
Your account
Your email address and the name you choose to display. Passwords are handled by our authentication provider and stored only as a cryptographic hash — nobody at Rhythm can see or recover your password.
What you create in Rhythm
Tasks, notes, meetings and their follow-ups, projects and milestones, sermon plans and series, weekly recaps, team messages, and files you upload. This is your working material, and it is stored so the app can show it back to you and to the teammates you have shared it with.
Data from services you connect
Only if you choose to connect them, and only what the feature needs:
- Google Calendar — events from the calendars you sync, so your week shows what is already scheduled. If you let Rhythm add events, it also writes the ones you ask it to.
- Google Maps (place suggestions) — when you type a place into a calendar entry or a meeting, the letters you type are sent to Google to suggest matching addresses, together with your approximate location only if your browser has been allowed to share it (it is asked once, and declining is fine — suggestions just won't be nearby-first). Rhythm keeps only the address you choose; your location is never stored.
- Google Drive — Rhythm requests the narrowest Drive permission Google offers
(
drive.file). It can only reach files it created for you, or files you hand it explicitly through Google's own file chooser. Your wider Drive is invisible to Rhythm by construction, not by policy. We store only a file's name, its Drive id and its link — never its contents. - Planning Center, Zoom, Rock RMS — the specific records needed to publish a service, create a meeting link, or file a note.
You can disconnect any of these at any time in Settings, which deletes the stored connection.
Voice capture
If you record a meeting, the audio is held on your own device and sent to our transcription provider to be turned into text. The resulting transcript is stored on your device. Audio is not kept on our servers as a matter of course.
Notifications
If you turn on push notifications, we store the subscription token your browser issues so the reminder can reach your device. Turning notifications off removes it.
What we deliberately do not collect
No advertising identifiers, no third-party analytics or tracking pixels, no location history, and no browsing activity outside the app. We do not build a profile of you.
How your data is protected
- Access tokens never reach your browser. When you connect Google or another service, the tokens are held server-side and used only by our own server functions.
- Sharing is enforced by the database, not just the interface. Row-level security rules decide what each account can read, so a teammate cannot reach another team's data by manipulating the app.
- Private stays private. A note or meeting you mark private is not visible to teammates, team leaders, or anyone granted oversight of your work.
- Uploaded files live in a private storage bucket and open through short-lived signed links rather than public URLs.
No system is perfectly secure, and we will not pretend otherwise. If we ever discover a breach affecting your data, we will tell you promptly and plainly.
Who else touches your data
We use a small number of providers to run the service. They process data on our behalf under their own security commitments, and we share only what each one needs to do its job.
| Provider | What it handles |
|---|---|
| Supabase | Database, sign-in, and file storage |
| Netlify | Website hosting and server functions |
| Calendar and Drive for accounts you connect; Maps for place suggestions as you type | |
| Anthropic | The AI features — sorting your week, drafting, summarising. Content sent for these tasks is not used to train models. |
| AssemblyAI | Turning recorded audio into text |
| Planning Center, Zoom, Rock RMS | Only if you connect them |
No payment processing. Rhythm is free while it is in development. We collect no card details, no billing address, and no payment information of any kind. If that changes we will update this page first and tell you before it affects you.
We do not sell your data, and we never share it for advertising. We would disclose data outside this list only if legally required — and where we are permitted to tell you, we will.
How long we keep things
Your content stays until you delete it or close your account. Deleting an item in the app removes it from our database; deleting an uploaded file removes the file itself, not just its listing. Calendar events pulled from a connected account are refreshed on sync and removed if you disconnect.
When you ask us to close your account, we delete your content and connections. Backups may retain copies for a short period before rotating out.
Your choices
- See your data — most of it is visible in the app; ask us for anything else.
- Correct it — edit it in the app, or ask us.
- Export it — ask and we will send you a copy.
- Delete it — delete items yourself, or ask us to remove your account entirely.
- Disconnect a service — any time, in Settings, without losing the rest.
Email timnicolette5@gmail.com and we will act on any of these. Depending on where you live you may have additional rights under laws such as the GDPR or CCPA; we honour those requests regardless of where you are.
Teams and shared work
Rhythm is built for teams, so some things are shared by design: a team project, a shared schedule, a team channel. Anything you place in a shared space is visible to that team. Your personal week, your private notes, and meetings you mark private are not — including to a team leader or an overseer.
Children
Rhythm is a tool for ministry and non-profit staff and is not directed at children under 13. We do not knowingly collect their information. If you believe a child has given us data, contact us and we will delete it.
Where data is stored
Our providers operate in the United States, so your data is stored and processed there. Using Rhythm from elsewhere means your information is transferred to the United States.
Changes to this policy
If we change how we handle your data, we will update this page and its date. For anything significant, we will tell you in the app rather than expecting you to notice.
Contact
Questions, corrections, deletion requests, or anything that feels wrong: timnicolette5@gmail.com.