Legal
Privacy Policy
Effective 4 October 2026 · replaces the version of 24 March 2026
This policy explains what personal data we process when you use the mobile app Rise: Build Your System (the “app”) and the website rise-app.app, why we do it and what rights you have. Processing is governed by Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on the protection of personal data. The Slovak version is authoritative.
1. Controller
Vassweb s. r. o., Školská 981/36, 931 01 Šamorín, Slovak Republic · Company ID (IČO) 56 921 021 · Tax ID (DIČ) 2122501524 · VAT ID SK2122501524 · registered in the Commercial Register of the District Court Trnava, section Sro, file no. 59422/T · managing director Richard Vass · e-mail vass@vassweb.com · phone +421 918 668 728
We have not appointed a data protection officer (DPO) as we are not legally required to. Please contact us directly at the e-mail above.
2. What data we process and why
2.1 Account
| Data | Purpose | Legal basis |
|---|---|---|
| E-mail and password | Sign-up, sign-in, account communication. The password is stored only as a secure hash, never in readable form. | Performance of a contract (Art. 6(1)(b) GDPR) |
| Confirmation of age 16+ and of consent to this policy (date and version) | Proof that the account was created with consent | Legal obligation and legitimate interest in demonstrating consent (Art. 6(1)(c) and (f), Art. 7(1) GDPR) |
2.2 Content you create in the app
| Data | Purpose | Legal basis |
|---|---|---|
| Habits and their completion, tasks, goals (OKRs) and progress, notes, focus and meditation sessions, mind dumps, books and quotes, saved links, challenges, wins, XP and levels | Running the app — so your data is in your account on every device | Performance of a contract (Art. 6(1)(b) GDPR) |
| Profile (name, age, occupation, values, goals) | Personalising the app and the AI coach | Performance of a contract |
| Journal, mood, energy, stress, sleep and other wellbeing entries | Journal and mood trend | Explicit consent (Art. 9(2)(a) GDPR) — see 2.3 |
2.3 Wellbeing and health data
Entries about mood, energy, stress, sleep and emotional journal entries may be data concerning health (a special category under Art. 9 GDPR). We process them only on the basis of your explicit consent, given by actively ticking the box at sign-up. Without it, no account is created. You can withdraw consent at any time by deleting your account or by e-mail; withdrawal does not affect the lawfulness of processing before it. We never use this data for marketing and never sell it.
2.4 Subscriptions and purchases
Payments for Rise Pro are processed by Apple through the App Store — we never see your card details. To check whether you have an active subscription we use RevenueCat, which receives an anonymous app user identifier and your App Store purchase history. Legal basis: performance of a contract.
2.5 Device data
- Notifications — reminders are scheduled by the app directly on your device; no device identifier is sent to us or any third party to deliver them.
- PIN and Face ID / Touch ID — used only to unlock the app and kept in your device’s secure storage; they never reach us.
- The app does not collect location, contacts, photos or advertising identifiers and uses no third-party advertising or analytics tools.
3. Artificial intelligence (AI coach and AI features)
AI features are part of the Rise Pro subscription; the free version does not use AI. They use the Claude model by Anthropic PBC (USA). Requests go through our server, which verifies sign-in, applies abuse limits and writes a technical record (your user ID, feature name, model used, time, processing time, result and token count) — without the content of the conversation.
Consent: before you first use AI, the app explicitly asks whether you agree to your data being sent to Anthropic. Without consent, AI sends nothing and the rest of the app keeps working. You can withdraw consent at any time in the app: Settings → Artificial intelligence.
| Feature | What is sent |
|---|---|
| AI coach (chat) | Your message, profile, active habits, goals, tasks, recent mood and journal entries, weekly focus |
| Habit insights | Active habits and their completion over the last 30 days |
| Journal analysis and weekly review | The current entry, or the last 7 entries |
| Goals review (OKRs) | Objectives, key results and progress |
| Mind dump sorting | The text you enter |
| Link summary | The address and text of the web page you save |
| Book recommendations | Your reading list and yearly reading goal |
Under Anthropic’s commercial API terms, this data is not used to train models. AI answers are informational — the AI coach is not a psychologist, therapist or doctor and does not replace professional help.
4. Where data is stored
Your account data is stored in a Supabase database in a data centre in the European Union (Frankfurt, Germany). Transfer is encrypted (TLS) and access is restricted so that each user can only see their own data (Row Level Security).
5. Who receives data
We do not sell data. We share it only with processors that help us run the service, and only to the extent necessary:
| Recipient | Purpose | Location |
|---|---|---|
| Supabase Inc. | Database, sign-in, data storage | EU (Frankfurt) |
| Vercel Inc. | Hosting of our AI server and this website | EU/USA |
| Anthropic PBC | AI features (only with consent) | USA |
| RevenueCat Inc. | Subscription verification | USA |
| Apple Inc. | App Store payments — as an independent controller under its own policy | EU/USA |
Transfers to the USA rely on the European Commission’s adequacy decision (EU-US Data Privacy Framework) for certified recipients, otherwise on standard contractual clauses (Art. 46(2)(c) GDPR). We disclose data to public authorities only where required by law.
6. How long we keep data
- Account data and content — for as long as you have an account.
- After you delete your account (in the app: Settings → Account → Delete account) we irreversibly erase your data within 30 days at the latest.
- Technical records of the AI server (without conversation content) — only as long as needed for abuse protection and billing.
- Purchase records — for as long as accounting and tax laws require.
7. Your rights
- access to your data and a copy of it (Art. 15),
- rectification of inaccurate data (Art. 16),
- erasure (Art. 17) — fastest directly in the app,
- restriction of processing (Art. 18),
- portability — an export of your data in machine-readable JSON (Art. 20),
- objection to processing based on legitimate interest (Art. 21),
- withdrawal of consent at any time (Art. 7(3)) — for AI in the app settings, for wellbeing data by deleting your account or by e-mail.
Send requests to vass@vassweb.com. We handle them free of charge, regardless of any subscription, within one month at the latest. You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Galvaniho 7/B, 821 04 Bratislava, dataprotection.gov.sk, or with the supervisory authority in your EU country of residence.
We do not carry out automated decision-making with legal effects or profiling for advertising. The AI coach only makes suggestions; every decision is yours.
8. Age
The app is intended for people aged 16 and over. You actively confirm your age at sign-up. If we learn that an account belongs to a younger person, we delete the data without delay.
9. Security
We use encrypted transfer (TLS), store passwords only as hashes, restrict data access to its owner, and you can lock the app with a PIN or biometrics. We keep software and security patches up to date. No system is 100% secure; if a breach puts you at risk, we will inform you in line with Art. 34 GDPR.
10. This website
The rise-app.app website has no sign-up or forms and uses no analytics or advertising tools. It stores only one strictly necessary cookie with your choice about the cookie notice — see the Cookie Policy. Our hosting provider (Vercel) technically processes your IP address and request data when delivering the page, to keep the service running and protect it from attacks (legitimate interest, Art. 6(1)(f) GDPR). If you e-mail us, we use the content only to reply.
11. Changes
We update this policy when the app, our processors or the law change. We will notify you of material changes in advance in the app or by e-mail. The current version is always at rise-app.app/privacy/en.