RiseArc legal

Privacy Policy

Last Updated: October 21, 2026

Effective Date: July 13, 2026

This Privacy Policy explains what RiseArc (“we,” “us,” or “our”) collects, why it is needed, how it is protected, and the choices available to you when you use the RiseArc mobile application (the “App”).

1. Guest-First Accounts

RiseArc automatically creates a guest account after you accept the Privacy Policy and EULA. A guest account uses a random user identifier and does not require an email address.

You may later connect that same account to email and password, Sign in with Apple, or Google Sign-In. Connecting an identity is designed to preserve the guest account ID and its progress rather than create a separate profile.

If you connect an account, we and our authentication providers may process:

• Email address
• Username, name, or display name
• Account and authentication-provider identifiers
• Profile details you choose to add
• Timezone, used for daily activity and streak calculations

We do not receive your Apple ID password, Google password, contacts, calendars, files, or unrelated account content.

2. Content and Activity

We store information you choose to create or generate in RiseArc, including:

• Focus sessions, modes, durations, completion status, and timestamps
• Targets and their progress
• Habits, check-ins, and streaks
• Daily wins and completion history
• Journal entries
• Profile details, preferences, and an optional avatar image
• Progress scores, daily grades, attributes, and achievements
• Subscription tier, Founder status, and Founder badge preference
• Onboarding choices and legal-acceptance records

This information provides the App, synchronizes progress, restores your account, and displays your history. Journal entries and other personal content are not used for advertising or marketing.

Optional Apple Health Activity

On iOS, if you choose to connect Apple Health, RiseArc requests read-only access to steps, walking and running distance, and workouts for your activity summary, the lifetime totals on your profile, and Physical XP. Lifetime totals since you joined are calculated on your device when you view your profile; they are not saved or uploaded. This is optional and is not required for focus timers or manual Body Focus. We do not request location, routes, heart rate, medical records, or permission to write health data.

With your separate agreement to save movement history, daily steps, workout names, start times, durations, last-import times and imported XP are saved in your account's local storage on this device and shown in Day View. Existing connections do not begin saving history without your agreement. Native record identifiers and other raw Health metadata are not saved. Movement history is not uploaded to our servers or sent to advertising or analytics services. Only the resulting daily Physical XP total and its date are stored with your account in Supabase to synchronize progress and prevent duplicate awards. Health-derived information is never used for advertising, sold, or shared with data brokers.

Disconnecting in Physical stops further reads and clears the live activity summary, but keeps saved Day View history. Use Clear movement history in Physical to remove that account's saved movement details on this device and stop saving new history. You can also revoke permissions in Apple Health. Resetting progress or deleting the account clears its local history and associated daily XP ledger. Clearing movement history or disconnecting does not revoke earned XP. Health data is not used for medical diagnosis or treatment.

3. Purchases and Subscriptions

Apple App Store and Google Play process payments. RevenueCat helps RiseArc validate Premium and Founder access across devices.

We and these providers may process:

• Product, plan, and store identifiers
• Purchase and entitlement status
• Renewal, cancellation, refund, revocation, and expiration information
• Store country or region and transaction identifiers supplied by the store

We do not receive or store your full payment-card or bank-account details.

4. Technical and Security Data

RiseArc and the service providers listed below may process limited technical data needed for authentication, purchases, compatibility, fraud prevention, security, and reliability. Depending on the feature and provider, this may include:

• App version, operating system, device type, and device-level identifiers
• Timezone and general locale
• Approximate location inferred from an IP address or provider request; RiseArc does not request precise GPS location
• Product interaction and other usage data, such as app activity needed to save progress and restore state
• Security events, network information, and limited diagnostic information

RiseArc does not request the iOS advertising identifier (IDFA), does not use this information for cross-app tracking, and does not use third-party advertising SDKs.

Optional target and habit reminders are scheduled locally on your device. Reminder settings are stored with your local account data. Active timer timestamps are saved locally so sessions can recover after backgrounding or a restart. You can change notification permission in device settings.

5. How We Use Information

We use information to:

• Provide focus, habit, target, journal, history, and progress features
• Create and maintain guest or connected accounts
• Synchronize and restore progress across devices
• Authenticate users and protect accounts
• Confirm subscription access and restore purchases
• Prevent abuse, investigate security events, and keep the service reliable
• Respond to support, privacy, and deletion requests
• Meet legal and app-store obligations

We do not use personal data for third-party advertising, our own advertising, data-broker activity, or cross-app tracking.

6. No Ads, Tracking, or Sale of Data

RiseArc does not display third-party advertising. The App does not include Google Mobile Ads or AdMob and does not collect advertising identifiers for ad delivery.

We do not sell personal information, share personal information with data brokers, or combine RiseArc data with third-party data for targeted advertising or advertising measurement.

7. Service Providers

We use the following providers only as needed to operate RiseArc:

These providers process data under their own terms and privacy policies. They may retain security, authentication, or transaction records where required by law or platform rules.

8. Storage and Security

We use safeguards designed to protect your information, including:

• Encryption in transit
• Secure device storage for authentication tokens where available
• Password hashing by our authentication provider
• Database row-level access controls tied to account identity
• Restricted server functions and authenticated data access

No service can guarantee absolute security. You are responsible for protecting permanent account credentials and device access.

9. Retention and Deletion

Data is retained while your account remains active and as needed for security, legal, backup, and service-continuity purposes.

You can:

• Delete individual content in the App
• Reset progress from Settings
• Permanently delete your account and synchronized data from Settings > Delete Account
• Request deletion at [email protected] if you cannot access the App

See the dedicated Account and Data Deletion page for details.

To prevent accidental loss during sync and app upgrades, private recovery copies of progress and changed synced content may be retained for your account. Conflicting uploads from older app versions are saved separately instead of overwriting newer progress. Reset All Data clears active progress but does not erase these recovery copies; deleting the account removes its server-side recovery records and locally stored recovery copies on the device used for deletion. Local copies on other devices may remain until app data is removed on those devices. Movement details imported from Apple Health are excluded from these recovery copies.

Protected backups may retain deleted data for a limited period before routine expiration. Minimal security, fraud-prevention, accounting, dispute, or legal records may be retained only for the necessary period. Deleting a RiseArc account does not cancel an Apple App Store or Google Play subscription.

10. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, export, restrict, object to, or delete personal data. You can disconnect third-party identities through the relevant provider and manage store subscriptions through Apple App Store or Google Play.

To submit a privacy request, contact [email protected]. We may need the account username, connected email, or other limited information to verify that the request relates to your account. Guest users can delete their account directly in the App.

11. Children’s Privacy

RiseArc is not directed to children under 13 or under the applicable age of digital consent in their jurisdiction. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and delete it where required.

12. International Processing

Our service providers may process information in countries other than your own. Where required, we rely on appropriate contractual or legal safeguards for international transfers.

13. Changes to This Policy

We may update this policy as RiseArc changes. Material updates will be presented in the App for renewed acceptance when required. The current version and effective date will remain available on this website.

14. Contact

For privacy questions or requests:

Email: [email protected]

Developer: Burak Furkan Koken, individual developer