RiseUp
← Tillbaka till startsidan

Data privacy in the RiseUp App

This is an English translation. The legally binding version is the German original at rise-up.store/pages/datenschutz-app.

Last updated: 17 September 2026. This policy applies to the RiseUp app for iOS and Android. The online shop rise-up.store has its own privacy policy.

1. Controller

RiseUp, owner: Tristan Häseker, c/o Adressgeber #2175, An der Alten Ziegelei 38, 48157 Münster, Germany. Email: info@rise-up.store

2. The key points first

We learn nothing about how you use the app. There is no account, no sign-in and no server run by us. The app contains no advertising, no analytics tool for us and no crash reporter, and it sends us nothing.

What the app needs is stored on your device. There are three exceptions, and we explain each of them in detail below: the backup to your own cloud account with Apple or Google, a single request to Apple’s map service when you save your home location on iPhone, and, on Android, technical usage data that Google’s ML Kit library sends to Google for the camera exercise. Camera images never leave your device.

3. What is stored on your device

  • Your alarms with their time, the label you gave them, weekdays, alarm sound and the identifier of the assigned RiseUp Tag
  • Your tag list: for each paired tag, its identifier, the name you give it and when it was last used
  • Your streak: days in a row, longest run, last scan, where your tag is placed, the last morning on which your streak paused without a scan, how many emergency stops and camera exercises you have used in the current month and when that month began, purchased streak restores and the goals you selected during onboarding
  • Your rest days: which days without an alarm do not break your streak, and on which weekdays an alarm was last set
  • How often you have snoozed so far, as you stated during onboarding, so that the app can calculate how much time you have saved
  • A log of your mornings: when an alarm rang, how it was ended and how many seconds passed from the alarm ringing to your first scan. Your “Time to tag” is calculated from this. On iPhone, the app deletes completed entries after 60 days
  • Your settings such as language, appearance, volume and the number of wake-up confirmations
  • On iPhone, a copy of your next alarm times, weekdays, streak and rest days for the Home Screen widgets. It stays on the device
  • On Android, also alarm sounds that you import yourself. This feature no longer exists on iOS

4. The NFC tag

When you scan, the app reads the tag’s fixed serial number (UID) and the web address stored on the tag. This address contains the serial number and a check value. The app checks on your device, without an internet connection, whether the two match, and in this way recognises a RiseUp Tag. The app does not write anything to the tag.

The serial number belongs to the piece of plastic, not to you and not to your phone. It is stored with the alarm and in your tag list so that the app can tell whether you have scanned the right tag.

If you hold your phone to the tag while no alarm is ringing, the operating system uses this address to open the app. If the app is not installed, your phone opens the address in the browser. The page behind it is hosted on GitHub Pages, and like any web server, GitHub processes your IP address when this happens. GitHub’s privacy policy applies to this.

5. Location

You can switch on away detection. It detects that you are not at home and asks you in the evening whether your tag has come with you. If you say no, your alarm ends without a scan the next morning. The feature stays off unless you switch it on, and you can switch it off again at any time.

For this, the app needs location permission, on both platforms also in the background, because otherwise detection would only work while the app is open.

What happens:

  • You choose a place as your home yourself. The app stores its coordinates, the time zone there, when you set it and the bedtime you enter. On iPhone, it also stores the address, see below.
  • The app compares your phone’s time zone with that of your home. It does not need location access for this.
  • When you open the app, it compares your current location with your home once. A distance of more than two kilometres counts as away.
  • There is also a circle with a radius of 400 metres around your home. The operating system tells the app when you leave it or enter it again. All that is stored from this is a yes or no with a timestamp, which expires after seven days.
  • Your current location is never stored anywhere. No history and no movement profile are created.

Differences between the platforms:

iPhone: When you tap “Remember this place as home”, the app sends this one set of coordinates to Apple’s map service and receives the address back, so that it can show you which place it has saved. This happens at exactly that moment and at no other time. The address is stored on the device. Apple’s privacy policy applies to this. If you switch off detection, the saved place remains stored until you save a new one or delete the app.

Android: The circle around your home is monitored by Google Play services, a system service on your device. For this, the coordinates and the radius are passed to this service. Google’s privacy policy applies to this. There is no address lookup on Android. If you switch off detection, the app deletes the saved place.

6. Morning routine

You can have the app block apps that you choose yourself, for a period that you set yourself, after your morning scan. The feature stays off unless you switch it on. Any block can be lifted immediately.

The two platforms handle this very differently:

iPhone: The app uses Apple’s Screen Time (Family Controls) for your own device. You choose the apps in Apple’s own selection screen. RiseUp only receives unreadable identifiers and never learns which app is behind them. The blocking is done by the operating system, not by us. The app does not see which app you have opened.

Android: Android offers no interface for this. The app therefore needs two permissions that you grant in the system settings: usage access and permission to display over other apps. While a block is running, the app checks several times per second which app is in the foreground and, if it matches, places a blocking screen over it. The name of the running app is only compared and not stored. The only thing stored is the list of apps you have chosen to block. When no block is running, the app checks nothing.

7. Camera exercise (beta)

If the alarm rings and you cannot get to your tag, you can end it up to three times a month by doing squats in front of the front camera. You start the exercise yourself on the alarm screen. Only then does the app ask for access to the camera. If you decline, you can still use the emergency stop if you have one left, and the rest of the app works as usual. Older versions of the app do not include the camera exercise yet.

What happens:

  • The front camera delivers a live image of about 720 by 1280 pixels. In it, your phone looks for 13 body points such as shoulders, hips and knees and uses them to count your squats. The app does not identify who is standing in front of the camera and does not recognise anyone.
  • Each image is discarded immediately after it has been analysed. No photo or video is saved, nothing is recorded, and no image leaves your device. Only you see the live image, on your screen.
  • During the exercise, the app reads the orientation and motion sensor to detect whether the phone is standing still and which way is up, and it measures the average brightness of the image. Both are used only for counting and are not stored.
  • While the exercise is running, the app sets the screen to full brightness and restores it afterwards.
  • All that is stored is how many times you have completed the exercise in the current month and when that month began. This is part of your streak and goes into the backup along with it, see section 8. An alarm ended this way appears in your log like an emergency stop.

iPhone: Detection is handled by Apple Vision, a part of iOS. It runs entirely on the device. No data is sent in the process.

Android: Detection is handled by ML Kit, a library from Google. The detection model is included in the app, and the images are processed entirely on the device. However, ML Kit does send technical data to Google: the device’s manufacturer, model and Android version, the app’s package name and version, an identifier for this installation which, according to Google, does not uniquely identify any user or device, and information about the performance, settings and errors of the detection. For this, ML Kit also uses the Google services Firebase Installations and Firebase Remote Config. Images and detection results are not included. The transfer is encrypted. According to Google, it uses this data to operate, measure and improve ML Kit and to detect misuse, and does not share it with third parties. The library is an integral part of the Android app. We cannot rule out that it sends such data even if you never start the exercise. Data may be transferred to the USA in the process; Google LLC is certified under the EU-US Data Privacy Framework. Google’s privacy policy applies. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is detection that works on the device without a server of our own.

8. Backup in your own cloud account

iPhone: The app stores your alarms, your tag list, your streak including rest days, your statistics and the log of your mornings in your private iCloud database via CloudKit. This also includes the labels of your alarms, the names of your tags, your goals and what you stated about how often you have snoozed so far. Your settings, your home details, the copy for the widgets and your selection of blocked apps are not stored in iCloud. We have no access to this database and cannot view any of it. You can switch off synchronisation for RiseUp at any time in the iOS settings under iCloud.

Android: The app uses Android’s automatic backup. The app’s data is backed up to your Google account, including your settings, your home details, the list of blocked apps and the identifiers of your Google Play purchases. Crash reports and technical logs are excluded. We have no access to this backup either. You can switch off automatic backup in the Android settings.

On both platforms, the data is also included in a device backup if you create one. In both cases, the terms of Apple or Google respectively apply to the storage. The legal basis is Art. 6(1)(b) GDPR, because the feature is part of the app you want to use.

9. Permissions and what they are needed for

On both platforms:

  • NFC: to scan the tag and end the alarm
  • Notifications: to show the alarm, the evening question and the night check
  • Alarms and exact alarms: to trigger the alarm to the minute, even when the app is closed
  • Location, including in the background: only for away detection, see section 5. If you do not use this feature, the app does not ask for it
  • Camera: only for the camera exercise while the alarm is ringing, see section 7. The app only asks when you start the exercise for the first time

iPhone only:

  • Screen Time: for the morning routine, see section 6
  • The app may play audio in the background so that the alarm keeps ringing, and receive silent system messages that iCloud synchronisation runs on

Android only:

  • Start after reboot: to restore set alarms after a restart
  • Foreground service, full-screen notification, keeping the screen on, vibration, bypassing the lock screen: so that the alarm appears reliably and can be used
  • Usage access and display over other apps: only for the morning routine, see section 6. You grant both yourself in the system settings
  • Billing through Google Play: for the in-app purchase
  • Internet access and network state: The app itself does not connect to us. These permissions come with Google’s libraries: Play Billing for the in-app purchase and ML Kit for the camera exercise, see section 7

The app does not request contacts, microphone, photos or health data. It uses the camera only for the camera exercise. It reads the orientation and motion sensor only during the exercise, and iOS and Android require no permission for that. It accesses neither Apple Health nor Health Connect. On Android, it cannot read the list of your installed apps; it can only check whether the apps on a fixed list of eleven well-known apps are present, so that the selection for the morning routine works.

10. Crash reports

The app does not create crash reports of its own. Reports that older versions of the app saved on your device are deleted the next time the app starts.

Independently of this, Apple and Google collect their own crash and performance data at operating system level. This happens according to their rules and your settings, not through us. On Android, error codes from the detection are part of the data that ML Kit sends to Google, see section 7.

11. In-app purchases

The “Restore streak” feature can be purchased in the app. Payment is handled entirely by the App Store or Google Play. We receive no payment data and store none.

On Android, the app keeps the identifier of your purchase that Google Play returns to it, so that a purchase is not accidentally credited twice. The app stores this identifier on your device, and it is included in the automatic backup to your Google account, see section 8.

12. No tracking, no advertising

The app uses no advertising ID, no tracking across apps and websites and no ad networks. In the privacy manifest of the iOS app, tracking is explicitly set to “no”.

13. If you write to us

If you write to us via “Send feedback” in the app or directly by email, we receive your email address and your message. The app only opens your email app for this and sends nothing itself. We use both only to reply to you and delete them once your request has been dealt with and no statutory retention obligation applies. The legal basis is Art. 6(1)(b) GDPR if it concerns your purchase, otherwise Art. 6(1)(f) GDPR.

14. Deleting your data

You can reset your data in the app settings. This deletes your alarms, your streak including emergency stops, camera exercises and rest days, your statistics and your tag list. On iPhone, a paid credit that has not yet been redeemed is kept so that your purchase is not lost. The log of your mornings, your settings, your selection of blocked apps and your home location remain, and on Android also the identifiers of your purchases. On Android, you delete your home location by switching off away detection.

If you uninstall the app, all local data is removed. You delete copies in your iCloud or Google backup through the settings of the respective account.

15. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority. The competent authority is the Landesbeauftragte für den Datenschutz Niedersachsen (Data Protection Authority of Lower Saxony), Prinzenstraße 5, 30159 Hannover.

Apart from emails you send us, we hold no data about you, and we have no access to your device or cloud data. You therefore handle access to or deletion of your app data yourself, in the app and in your cloud account. For data that ML Kit sends to Google, please contact Google.

16. Contact

Questions about privacy in the app: info@rise-up.store