Privacy Policy
Effective date: [DATE] Last updated: [DATE]
App: Rise with Gratitude for Android (com.risewithgratitude.app), version 1.0
1. Who we are
Rise with Gratitude is published by FARMOUR VENTURES PRIVATE LIMITED ("we", "us"), Ambady Thellukuzhi, Perumkadavila P.O., Thiruvananthapuram, Kerala 695124, India. We decide why and how the data described here is processed, so we are the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023 (DPDP Act).
- Support and privacy questions: [email protected]
- Grievance Officer: Adv. Swapna S S, [email protected], Ambady Thellukuzhi, Perumkadavila P.O., Thiruvananthapuram, Kerala 695124, India ⚖
2. The short version
- Your journal stays on your phone. It is stored only on your phone, never uploaded, and protected by your phone's own security.
- No account. We never ask for your name, e-mail address or phone number to use the app.
- No analytics, no advertising, no tracking in version 1.0. We do not sell data.
- No AI reads what you write. Version 1.0 has no AI chat or AI coach. Coach replies come from a fixed, pre-written set inside the app.
- Some technical data does leave your phone: purchase records, anonymous IDs, crash reports and content requests (section 5).
3. What stays on your phone
The following data is created and stored only on your device. We cannot see it.
| Data | Notes |
|---|---|
| Journal entries (gratitude, wins, sankalpa, letters, reflections, mood) | Kept until you delete them or uninstall the app |
| Wins wall and the coach replies you see there | Replies come from a set built into the app; nothing is sent |
| Promises ("Today I will…") | The last 60 are kept |
| Drafts | Kept so you don't lose your typing; the RISE draft is dropped automatically after 20 hours |
| Streaks, badges, progress, language, theme, reminder times, goals | Used only to run the app |
| Reminders | Scheduled by your phone. We use no push service and no push tokens |
Phone backups. Your journal and other private app data are excluded from Android's automatic backup and device-to-device transfer. This keeps them off cloud servers, but it also means they are not restored automatically on a new phone. To keep a copy, use the export feature (section 4).
How it is protected. Your data lives inside the app's private storage and is protected by your phone's own security (screen lock and the storage protection your phone provides). The app also hides private screens from screenshots and the recent-apps view. Anyone who can unlock your phone, or a phone that has been rooted or compromised, may be able to read this data, so please keep your phone locked.
Voice typing. If you speak your journal, the app uses your phone's built-in speech-recognition service to turn speech into text. The app receives only the text; it never records, stores or sends your audio. Depending on your phone and its settings, that service may run on the device or may send audio to its provider (for example Google) under that provider's own terms. ⚖
Spoken affirmations. Affirmations read aloud use your phone's text-to-speech engine. Nothing is sent to us.
Support check (crisis scan). When you save a journal entry, the app checks the text on your phone for phrases that may mean you are going through a very hard time. If it finds one, it gently shows the Support screen with helpline numbers. The text is never sent, logged or shared. To avoid showing this more than once a day, the app stores only the date it was last shown, on your phone. This date could hint that a hard day happened, so we mention it here; it never leaves your phone and is excluded from backups.
4. Your export file
You can export your journal, wins, promises and sealed letters as a file (rise-journal-<date>.json) and import
it again later. The export file is not encrypted. Anyone who opens it can read everything in it, including
sealed letters. Once you save or share it, it is in your control, handled by whichever app you choose. We never receive it.
5. What leaves your phone, and who receives it
All of these connections are protected in transit with HTTPS (TLS).
| What | Who receives it | Why | How long it is kept |
|---|---|---|---|
Purchase records — subscription status, purchase history, and a random anonymous ID created by RevenueCat (app_user_id) |
Google Play (billing platform) and RevenueCat, Inc. (our subscription processor, USA) | To sell, confirm and restore your subscription, and to check you are entitled to paid audio | While your subscription record exists; deleted on request (section 8). Google keeps its own records under its terms |
| Activation codes (Android only) — the code you type and a random install ID created by the app | Cloudflare (our server host) | To redeem gift, tester or organisation codes and prevent misuse | The code record for the code's lifetime plus 30 days ⚖ |
| Paid audio downloads — your anonymous RevenueCat ID, your IP address | Cloudflare, which checks your entitlement with RevenueCat | To give paid audio only to subscribers, using short-lived signed links | IDs and IP addresses are stored only as one-way hashes. Rate-limit counters are kept for up to 1 day, usage counters for up to 35 days, security alert records for up to 90 days ⚖. Our server does not log request contents |
| Crash reports — error details, device model, Android version, app version, a random Sentry install ID | Sentry (Functional Software, Inc.), EU data region (Germany) | To find and fix crashes | Up to 90 days |
| Content updates — a normal web request (your IP address and device type are visible to the server) | Cloudflare (content delivery), or Google if content is published from a Google Sheet ⚖ | To download new affirmations, lessons and settings | Not stored by us; the provider's standard short-term logs apply |
| Support e-mails you choose to send | Our e-mail provider [E-MAIL PROVIDER] | To answer you | [e.g. 2 years] ⚖ |
Crash reports never contain your journal. Before a report leaves your phone, the app removes messages, breadcrumbs, user and request details, and keeps only an allowed list of technical fields. Sentry is set not to store IP addresses, screenshots or screen layouts.
What we do not use. No analytics or product-tracking tools, no advertising ID, no advertising networks, no social log-in, no location, no contacts, no photos. Fonts are built into the app, so no font service is contacted. The narration audio was created in advance by us using AI text-to-speech (see section 11); none of your data is sent to any AI service.
6. Why we process data (purposes) and our legal basis
We process the data in section 5 only to: provide the app and its paid features, process and restore purchases, redeem activation codes, prevent fraud and abuse, fix crashes, and answer your messages. Under the DPDP Act we rely on your consent, which you give when you accept this notice in the app, and on legitimate uses permitted by the Act where they apply ⚖. You can withdraw consent at any time (section 7); withdrawal does not affect processing already done, but some features (such as purchases or crash reporting) may then stop working.
The DPDP Act lets you ask for this notice in English or any language in the Eighth Schedule of the Constitution; the app's content is in English, Hindi and Malayalam. ⚖
7. Your rights
Under the DPDP Act (and similar laws) you can:
- Access — ask for a summary of the personal data we hold about you and who we shared it with.
- Correction and completion — ask us to correct or update it.
- Erasure — ask us to delete it.
- Withdraw consent — at any time, as easily as you gave it.
- Grievance redressal — complain to our Grievance Officer, and then to the Data Protection Board of India.
- Nominate someone to exercise these rights if you die or cannot act yourself.
How to exercise them. E-mail [email protected]. Because we have no accounts, we do not know who you are. To find your server-side data, please include your RevenueCat ID (shown in the app under Profile › Support ID) or your Google Play order number, and any activation code you used. We will reply within [30] days ⚖. Your journal is never on our servers, so you manage it directly in the app.
8. Deleting your data
- Data on your phone: delete entries in the app, or uninstall the app (or clear its storage in Android settings). This removes everything the app stored on your phone. Export files you saved elsewhere are not affected — delete those yourself.
- Data on servers: e-mail [email protected] with the details in section 7. We will delete your RevenueCat customer record, any activation-code bindings and any crash reports linked to your IDs, except records we must keep by law (for example tax records of purchases) ⚖. Google Play keeps its own purchase records under Google's policies.
- Cancelling a subscription does not delete data; do that in Google Play › Payments & subscriptions.
9. International transfers
Our service providers may process data outside India: Sentry in the European Union, RevenueCat in the United States, Cloudflare on its global network, and Google worldwide. We only transfer data to countries not restricted by the Government of India under the DPDP Act, and we use providers with appropriate contractual safeguards. ⚖
10. Security and breaches
We use HTTPS for every connection, one-way hashing of IDs and IP addresses on our server, strict limits on what crash reports contain, and access controls on our systems. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the DPDP Act and its Rules require ⚖, explaining what happened, the likely impact and what you can do.
11. AI-generated voice
The guided meditation and lesson narration is generated with AI text-to-speech. It is not a recording of a human narrator. No user data is used to create it.
12. Children
Rise with Gratitude is intended for adults aged 18 and over and is not directed at children. We do not knowingly process children's personal data. If you believe a child has sent us data, contact us and we will delete it. ⚖
13. Not medical advice — and where to find help
Rise with Gratitude is a wellness app. It is not a medical or mental-health service and does not diagnose or treat any condition. It is not an emergency service. If you are in crisis or thinking about harming yourself:
- India: Tele-MANAS 14416 or 1-800-891-4416; emergency 112
- USA: 988 · UK: Samaritans 116 123
- Elsewhere: your local emergency number.
These numbers are also on the Support screen in the app.
14. Changes to this policy
We will update the "Last updated" date when this policy changes. For important changes — for example if a future version adds analytics, an AI coach or encrypted backups — we will tell you in the app before the change applies and, where required, ask for your consent again.
15. Contact
FARMOUR VENTURES PRIVATE LIMITED, Ambady Thellukuzhi, Perumkadavila P.O., Thiruvananthapuram, Kerala 695124, India E-mail: [email protected] · Grievance Officer: Adv. Swapna S S, [email protected]