Privacy Policy

RiseWell (“we”, “us”, “our”) is a mental wellness application operated by RiseWell Inc. We provide tools to support emotional wellbeing, not clinical mental health treatment. If you are experiencing a mental health emergency, please call or text 988.

Questions about this policy: privacy@risewell.app

Information you provide directly:

• Account details — email address, nickname, pronouns, date of birth (for age verification only)
• Mood check-in data — mood level, emoji selections, body sensations, mood words
• Journal entries — text and voice recordings you create
• Community posts — anonymous content shared in support groups
• Consent and preference settings — tone preference, notification frequency

Information collected automatically:

• Usage data — which features you use, how often you check in (no keystroke logging)
• Device token — for push notifications only (not linked to advertising IDs)
• Anonymous analytics — aggregate feature usage via PostHog (opt-out available)
• Error reports — crash data via Sentry, stripped of personal content

Information we do NOT collect:

• Precise location data
• Contact lists or address book
• Social media profiles
• Advertising or tracking identifiers

• To provide the service — saving check-ins, generating AI insights, sending reminders
• AI-generated reflections — your mood and journal data is sent to OpenAI to generate personalized wellness insights. OpenAI processes this under their data processing agreement; it is not used to train their models.
• Push notifications — to send daily check-in reminders and streak milestones you opt into
• Service improvement — anonymized, aggregated usage patterns to improve features
• Safety — detecting crisis indicators to surface the 988 helpline (automated, not human review)

We never use your mental health data to train AI models, build advertising profiles, or sell to data brokers.

We share your information only with:

• Supabase — database and authentication (hosted in the US, EU data residency available on request)
• OpenAI — AI insight generation (mood + journal data, under a data processing agreement; zero data retention policy)
• Stripe / RevenueCat — payment processing (we never see your full card number)
• Resend — transactional emails (welcome, streak milestones)
• Cloudflare R2 — voice recording storage (encrypted at rest)
• Firebase (Google) — push notification delivery (device token only)
• Sentry / PostHog — error monitoring and anonymized analytics

We may disclose information if required by law, to prevent harm to you or others, or in connection with a sale or merger of our company (with advance notice to you).

Community posts are visible to other Premium members in the same support group. They are anonymous — no account information is displayed.

• Active account — data retained while your account is active
• Deleted account — personal data deleted within 30 days; anonymized aggregate data may be retained
• Voice recordings — stored for 90 days after creation, then automatically deleted unless you explicitly save them
• Journal entries — retained until you delete them or close your account
• Analytics — PostHog data retained for 12 months

Depending on your location, you may have the right to:

• Access — request a copy of your data (email us)
• Correction — update inaccurate information in your Profile settings
• Deletion — delete your account and all associated data from Settings → Account → Delete account
• Portability — request an export of your mood data in JSON format
• Opt-out of analytics — toggle in Settings → Privacy → Analytics

California residents (CCPA) and EU/UK residents (GDPR) have additional rights. Contact privacy@risewell.app to exercise any of these.

RiseWell is available to users aged 13 and older. Users under 18 have restricted access to community features, voice journaling, and AI avatar interactions. We do not knowingly collect data from children under 13. If you believe a child under 13 has an account, contact us immediately.

Parents of teen users (13–17) may contact us to request access to or deletion of their child's account.

We protect your data with industry-standard measures: TLS encryption in transit, encryption at rest, row-level security on all database tables, and regular security reviews. No method of transmission over the internet is 100% secure — if you discover a vulnerability, please report it to security@risewell.app.

We may update this policy from time to time. We will notify you of material changes by email and with an in-app notice at least 30 days before they take effect. Your continued use of RiseWell after changes take effect constitutes acceptance of the revised policy.

RiseWell Inc.
Privacy Team: privacy@risewell.app
General support: hello@risewell.app