This Privacy Policy explains what data Riselo (“Riselo”, “we”, “our”, “us”) collects when you use the Riselo mobile application (the “App”) and the website riseloapp.com, how we use it, who we share it with, and the rights you have over your data.
We built Riselo as a self-improvement tool for health, sport, business and social skills. Personal data is necessary to run the App. We aim to collect only what we need and to be honest about what we do with it.
Plain-language summary: We store your account, your goals, your training and meal logs, and your conversations with the AI Coach. We use Firebase (Google) for accounts and sync, Anthropic for AI, and Apple In-App Purchase via RevenueCat for subscriptions, plus an internal analytics layer with optional Mixpanel forwarding. We do not sell your data. You can delete your account at any time from inside the App.
1. Who we are
Riselo is operated by Maxim Khabakhpashev and Yoann Wolf, private individuals based in Switzerland. They are jointly responsible for your personal data as data controllers. You can reach us at Riseloapp@outlook.com.
2. Information we collect
Account information
- Email address, display name, and account provider when you sign in (Apple, Google, or email/password) via Firebase Authentication.
- A username you choose for leaderboards.
- Apple / Google user identifier (an opaque token from the auth provider).
Profile and onboarding data
- Your answers in the onboarding quiz: age, primary goal, identity target, focus areas, time and commitment preferences.
- How you found Riselo — used for analytics only.
Health and fitness data
- Weight, height, age, sex, activity level, dietary style, allergies and excluded ingredients you enter.
- Water intake, meals, and mood / energy ratings you log.
- Workouts, exercises, sets, reps, and personal records you log.
- If you enable Apple HealthKit, the categories you authorize (e.g. step count, sleep analysis, active calories). See Section 6.
Activity and engagement data
- Streaks, lessons completed, daily missions completed, XP earned, levels, achievements.
- App-internal events such as page views, feature interactions, and milestones.
Photos and barcodes
- If you use the AI Food Scanner, the photo you take is sent to our AI processor (see Section 7) for nutrition estimation. Barcode scans query public food databases.
- Photos are processed in transit and are not stored by us beyond the immediate request. The AI provider may briefly retain the request for safety review (see Anthropic’s policy below).
AI Coach conversations
- The questions you send to the AI Coach and the responses you receive.
- Stored locally on your device for conversation continuity.
- The provider (Anthropic) processes the request to generate a response. See Section 7.
Subscription and payment data
- If you purchase Riselo Pro, payment is processed by Apple In-App Purchase.
- We never receive your payment card details. We receive a transaction identifier and subscription status from RevenueCat.
Device and usage information
- Anonymous session and user identifiers (generated locally on your device).
- A short user-agent string (browser / device summary).
- If you allow notifications, your device’s push token — revocable anytime in device settings.
3. How we use your information
- Operate the App: display your stats, calculate scores, save your progress, sync across devices.
- Personalize your experience: tailored plans, recommendations and daily missions based on your goals.
- Provide AI features: send your messages and (optionally) photos to our AI provider to generate responses.
- Manage your subscription: verify entitlements, restore purchases, send renewal reminders.
- Improve the App: aggregated and anonymous analytics about which features are used.
- Send notifications you have enabled (streak reminders, mission reminders).
- Respect your settings: dietary restrictions, allergies and excluded ingredients filter recommendations.
- Comply with legal obligations.
We do not sell your data. We do not use your data to train third-party AI models on your personal records.
4. Legal basis (Switzerland / EU / UK)
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). If you are in the European Economic Area or the United Kingdom, we process your data on the following GDPR bases:
| Purpose | Legal basis |
|---|---|
| Operating the App, providing your account | Performance of a contract |
| Personalization, analytics, App improvement | Legitimate interests |
| AI processing of your messages and photos | Performance of a contract + consent |
| Push notifications | Consent (opt-in only) |
| Apple HealthKit data | Explicit consent |
| Compliance with legal obligations | Legal obligation |
5. Service providers and third parties
We use the following service providers. They process data strictly on our behalf and are bound by data processing agreements where required.
| Provider | Purpose | Region |
|---|---|---|
| Firebase (Google LLC) | Authentication, Firestore database sync, Cloud Messaging | USA / EU |
| Cloudflare, Inc. | API proxy (Workers) hosting our AI gateway — API keys stay server-side | USA / EU |
| Anthropic, PBC | AI Coach and AI Food Scanner (Claude models) | USA |
| Apple Inc. | App distribution, In-App Purchases, Sign in with Apple, HealthKit | USA / EU |
| RevenueCat, Inc. | Subscription management | USA |
| Mixpanel, Inc. (optional, off by default) | Aggregated product analytics | USA |
6. Apple HealthKit
Per Apple’s Health and HealthKit guidelines, we explicitly state:
- Riselo reads only the HealthKit data categories you explicitly authorize (typically: step count, sleep analysis, active energy, heart rate, body mass, workouts).
- We do not share your HealthKit data with third parties for advertising or any data-broker purpose.
- We do not use HealthKit data for advertising, marketing, or to train AI models.
- HealthKit data is used only to display your stats inside Riselo and to compute your Health score. It may sync to your private Riselo account on Firestore for cross-device continuity if you are signed in.
- You can revoke Riselo’s access to any HealthKit category at any time in iOS Settings → Privacy & Security → Health → Riselo.
- If you delete your Riselo account, any HealthKit data we cached is deleted. HealthKit data on your device is unaffected and stays under your control.
7. AI features
Riselo uses Anthropic’s Claude models via a Cloudflare Worker proxy operated by us — API keys never leave the server. When you use an AI feature:
- Your message and any required context (your goals, current streak, recent activity) are sent through our proxy to Anthropic.
- Anthropic processes the request and returns a response.
- Anthropic’s policy states that API requests are not used to train their models by default and are retained briefly for safety review (see Anthropic’s Privacy Policy).
- For the AI Food Scanner, the photo you take is included in the request. We do not store the photo on our servers; it exists only in transit.
AI is not a doctor. The AI Coach and the AI Food Scanner are educational tools. They are not medical advice, not a substitute for a qualified clinician, and not a substitute for verifying ingredients yourself if you have a medical allergy.
8. Data retention
- Local data on your device persists until you uninstall the App, clear app storage, or sign out. This includes your logs, streaks, and AI conversation history.
- Account data on Firebase is retained while your account is active. When you delete your account, we delete the data within 30 days (backups may persist up to 90 days for technical recovery purposes).
- Analytics events stored locally are capped on the device.
- AI requests are not retained by us. Anthropic retains them briefly for safety review per their policy.
- Subscription records are retained as required by tax and accounting law (typically up to 10 years in Switzerland).
9. Your rights
Depending on your jurisdiction (Swiss FADP, GDPR, UK GDPR, CCPA / CPRA), you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data (you can edit most fields directly in the App).
- Delete your data and account: open Profile → Manage Profile → Delete Account in the App, or email us.
- Portability — request an export of your data in a machine-readable format.
- Object to processing based on legitimate interests, including a right to opt out of analytics.
- Withdraw consent at any time for processing based on consent.
- Lodge a complaint with your data protection authority — in Switzerland the FDPIC, in the EU your local authority.
- California residents have additional rights under the CCPA / CPRA, including the right to know what categories of data are collected and the right to opt out of any sale (we do not sell data).
To exercise any of these rights, email Riseloapp@outlook.com. We respond within 30 days.
10. International data transfers
Some of our service providers (Anthropic, Cloudflare, RevenueCat, Mixpanel) are based in the United States. When your data is transferred from Switzerland, the EEA or the UK to the U.S., we rely on the Swiss–U.S. / EU–U.S. Data Privacy Framework where applicable, Standard Contractual Clauses, or equivalent legal mechanisms.
11. Security
- HTTPS / TLS for all network traffic.
- Firebase Authentication for identity (we never see your password for Apple / Google sign-in).
- Firestore security rules restricting users to their own data.
- AI API keys are kept server-side behind our Cloudflare Worker proxy.
- Server-side validation for subscription entitlements.
No method of transmission or storage is 100% secure. If we become aware of a breach affecting your data, we will notify you in line with applicable law.
12. Children
Riselo is not intended for users under 16 in the European Union and the United Kingdom, or under 13 in the United States. We do not knowingly collect data from children under those ages. If you believe a child has provided personal data to us, please email Riseloapp@outlook.com and we will delete it.
13. Changes to this policy
We may update this Privacy Policy. When changes are material, we will notify you in-app and update the “Effective” date at the top. Continued use of the App after the change means you accept the new policy.
14. Contact
For all questions — privacy, support, or anything else — email Riseloapp@outlook.com.