Privacy policy

1. Who we are

Rise is a trading name of rosannalie.com, a sole proprietorship registered in the Netherlands. rosannalie.com is the controller of the personal data described in this policy.

2. Age requirement

Rise is intended for people aged 18 and older. If we learn that someone under 18 has created an account, we delete the account and its data.

3. What we collect

Account

Your name, email address, username, password (stored only as a secure hash), language and, if you add one, your profile photo.

What you put into Rise

The answers you give when you set up the app (such as your interests, how you want to be reminded and which rewards motivate you), your to do's, goals and milestones, gratitude moments and moods, favorite quotes, your future me vision and letters, and the points, streaks and badges you earn. Some of this, such as your moods, can say something about how you feel. You choose what you enter, and we use it only to run Rise for you.

Conversations with the AI coach

If you have Premium and use the coach, we process your questions, the coach's answers and the parts of your Rise data the coach needs to give a personal answer, such as your goals, habits and recent moods.

Subscription

Whether you have Premium, which plan, when it started and when it renews or ends. Payment is handled entirely by Apple or Google; we never see your card details.

Notifications

If you allow notifications, a push token for your device, so that we can send you reminders and motivation.

Technical data

Your IP address and requests in our server logs, and, when the app crashes, a crash report with your device model, operating system, app version and what went wrong.

We do not use advertising, we do not track you across other apps or websites, and this website sets no cookies and loads nothing from other parties.

4. Why we use it, and on what basis

• To provide Rise: your account, your plans and progress, the coach, Premium and the emails you need (such as confirming your address or resetting your password). Basis: performance of our contract with you.
• To send notifications, only after you allow them on your device. Basis: your consent, which you can withdraw at any time in the app or your phone's settings.
• To keep Rise working and secure: fixing crashes, preventing abuse and scanning uploaded photos for malware. Basis: our legitimate interest in a reliable and safe service.
• To meet legal obligations, such as keeping financial records. Basis: legal obligation.

The coach and the personal suggestions in Rise are there to support you. They are not professional, medical or psychological advice, and Rise does not make automated decisions with legal or similarly significant effects on you.

5. Who we share it with

We never sell your data. We share it only with the service providers we need to run Rise, under agreements that oblige them to protect it and use it only for us:

• Hetzner Online (Germany): the servers and database Rise runs on.
• JAM-IT (the Netherlands): builds and maintains Rise, including the malware scan of uploaded photos.
• Anthropic (United States): the AI model behind the coach. It receives what a coach answer needs, does not use it to train its models and deletes it after a short period.
• RevenueCat (United States): manages Premium subscriptions.
• Apple and Google: app distribution, payments and delivery of push notifications.
• Expo (United States): passes our notifications on to Apple and Google.
• Google Firebase Crashlytics (United States): crash reports.
• Microsoft: sends the emails about your account.

We may also disclose data when the law requires it, to protect our users or our rights, or as part of a sale or reorganisation of the business, always within the limits of the law.

6. Transfers outside the EU

Our servers are in the EU. Some providers above are based in the United States. Where data goes there, we rely on the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

7. How long we keep it

• Your account and everything in it: for as long as you have your account.
• After you delete your account: removed or anonymised within 30 days.
• Crash reports: up to 90 days.
• Server logs: a short period, for security and troubleshooting.
• Financial records: as long as tax law requires (in the Netherlands, seven years).
• Backups: overwritten in their normal cycle.

8. Security

All connections to Rise are encrypted, passwords are stored only as secure hashes, and access to the data is limited to the people who need it to run Rise. No system is perfectly secure, so please keep your password to yourself.

9. Your rights

You have the right to access your data, correct it, have it deleted, restrict or object to its processing, receive it in a portable format and withdraw any consent you gave. You can change most of your data yourself in the app and delete your account at any time. For everything else, email support@gorise.app. We may ask you to confirm your identity, and we reply within one month.

If you think we handle your data unlawfully, you can complain to a data protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens. We'd appreciate the chance to solve it with you first.

10. Changes

We update this policy when Rise or the law changes. The date at the top shows the latest version; if a change matters to you, we tell you in the app.