Last updated: September 9, 2026
To run your account and personalize your fitness plan, we collect: your email and username; profile details you provide (age, gender, height, weight, goals, activity level, and any health notes you choose to enter); a profile photo and progress photos if you choose to upload them; workout, weight, body measurement, sleep, water, and food (including anything logged via barcode scan) activity you log in the app; messages you send to friends and to your Guild's shared discussion within the app; and basic subscription/payment status.
Some optional features involve more sensitive health data, and are off unless you turn them on: menstrual cycle tracking (last period date, cycle/period length) — you can additionally choose to keep this data only on your device instead of syncing it to our servers, from the Fitness Plan page; sleep logs used for recovery suggestions; and, on Android, step counts and workout/exercise session data read from Google Health Connect (see below). We only request read access to step count and exercise/workout session data from Health Connect — we never request write access, and we do not read any other Health Connect data type (heart rate, weight, sleep, nutrition, or anything else). We don't use any of this to advertise to you, infer anything beyond what's needed for the feature you turned on, or share it with advertisers.
On Android, if you turn on step sync in Settings, RISE UP reads your daily step count from Google Health Connect to display it in the app and to credit progress toward step-based in-app quests. If you allow workout sync, RISE UP also reads recent workout/exercise sessions (e.g. a run or lift logged by a paired watch or another fitness app) from Health Connect to import them into your activity log and credit relevant quests. Both are read-only — RISE UP never writes any data back to Health Connect. This data is stored in our database (Supabase) associated with your account, used solely to power the features described above, is never sold, and is never used for advertising. You can revoke Health Connect access at any time from Android Settings → Apps → RISE UP → Permissions → Health Connect, or from within the Health Connect app itself.
RISE UP uses your camera in two optional, in-the-moment features: barcode scanning for food logging, and the experimental Form Check tool, which analyzes your body position (pose) to give rough exercise-form feedback. Both run entirely on your device — video and any detected pose/body-position data are processed locally in the moment and are never uploaded, stored, or sent to us or anyone else. For barcode scanning, only the scanned barcode number (not the image) is sent to Open Food Facts to look up nutrition info.
Solely to run the app's features: generating your personalized calorie/water/protein plan, giving recovery- and cycle-aware training suggestions, tracking quests and XP, showing you on leaderboards and to friends and Guild-mates (unless you turn this off in Settings), and processing subscription payments. We do not sell your data, and we do not use it for advertising.
Your data is stored with Supabase, our database/hosting provider. Payments are processed by Paddle (web) or Google Play Billing (Android in-app purchases, via RevenueCat) — see "Subscriptions & payments" below. If you sign in with Google, Apple, or Facebook, that provider handles authentication and we only receive your name/email/avatar from them. If you scan a barcode, the barcode number is sent to Open Food Facts, a third-party public nutrition database — no other personal data is included in that request. On Android, if you turn on step or workout sync, we read that data from Google Health Connect, which is controlled by Android's own permission system — you can revoke that access at any time from your device's Health Connect settings. Anything you post in a Guild's shared discussion is visible to that Guild's other current members. On Android, we also register your device with Firebase Cloud Messaging (FCM), Google's push notification service, storing a device push token so we can deliver real-time notifications (e.g. a Guild message or friend request) even when the app is closed — this token identifies your device for push delivery only, not you personally, and Google's standard FCM terms apply to that service. None of these providers are permitted to use your data for their own purposes.
On the web, subscription and one-time purchases are processed by Paddle, our Merchant of Record — we never see or store your card details. On Android, in-app purchases are processed through Google Play Billing (via RevenueCat); Google handles that payment relationship directly, and Google's own privacy policy and payment terms apply to those transactions. We only receive purchase/subscription status, not your payment details, from either provider.
In Settings and your Fitness Plan, you can: hide your profile from public leaderboards at any time; turn cycle tracking, sleep logging, or Health Connect step/workout sync on or off at any time; keep cycle data local-only on your device instead of syncing it to our servers; download a copy of your weight and workout history as a CSV export (Premium); and permanently delete your account and all associated data (workouts, messages, weight logs, everything) with one action. Account deletion is immediate and cannot be undone.
Data is transmitted over encrypted connections (HTTPS) and access to your account data is restricted at the database level so that only you can read or modify your own records, with narrow, audited exceptions for features like friend referrals that require verified cross-account updates.
RISE UP is not directed at children under 13, and we do not knowingly collect data from children under 13.
If this policy changes meaningfully, we'll update the date above and, for significant changes, notify you in the app.
Questions about your data? Contact us at thepromptvault.store@gmail.com.
← Back to RISE UP