Privacy Policy

1. About this policy

This Privacy Policy explains how RiseDare handles personal data. It is written to be read by ordinary people, not only by lawyers. If anything here is unclear, write to us at [email protected] and we will explain it.

RiseDare is an alarm clock app. The alarm keeps ringing until you complete a real-world mission, which we call a dare, such as taking a photo of the sky, making your bed, doing push-ups, solving maths or scanning a QR code. Around that core, RiseDare offers optional features such as sleep tracking, groups, the Chuzi AI coach, Hardcore Mode, streaks, badges and rewards.

This policy applies to the RiseDare apps for iOS and Android, the companion apps for Apple Watch and Wear OS, the website risedare.com, and any support, email or chat channel we run (together, the Service). It should be read together with our Terms of Service, Cookie Policy, App Permissions and Data Safety page, Children's Privacy page, Chuzi AI Terms and Data and Account Deletion page.

By using the Service you acknowledge that your personal data will be handled as described here. Where the law requires your consent for a particular use, we ask for it separately and clearly, and you can withdraw it at any time.

2. Who we are

RiseDare (we, us, our) is operated by (to be added), with its registered office at (to be added).

For the purposes of India's Digital Personal Data Protection Act 2023 we are the Data Fiduciary, and you are the Data Principal. For the purposes of the EU General Data Protection Regulation and the UK GDPR we are the data controller. In both cases this means we decide why and how your personal data is processed, and we are responsible for it.

You can reach our privacy team at [email protected] and our Grievance Officer, (to be added), at [email protected]. Full contact details are in the final section of this policy.

3. Principles we follow

• We collect only what a feature needs. If you do not turn a feature on, we do not collect the data that feature would use.
• Photo and body-pose checks for missions run on your device. Mission photos are not uploaded to our servers unless you choose to share them.
• We do not sell your personal data, and we do not use advertising trackers on our website.
• Sensitive features are optional and are switched off until you turn them on: sleep tracking, location, health and step data, contacts, Chuzi AI and Hardcore Mode.
• You can see, correct and delete your data, and you can withdraw consent as easily as you gave it.
• We tell you before we make a material change to how we use your data.

4. Account and profile data

When you create an account or set up the app we collect the information needed to identify you and run your account.

• Name or display name, and an avatar if you choose one.
• Email address or phone number used to sign in, and the one-time passwords or sign-in tokens needed to verify you. If you sign in through Apple or Google, we receive the basic profile details that provider shares with us, such as your name and email address.
• Language, time zone and country or region, so that alarms ring at the right local time and the app appears in your language.
• Age or date-of-birth information and, for users under 18, the information needed to obtain and record a parent's or guardian's consent.
• Preferences and settings, such as alarm sounds, mission choices, notification choices and whether optional features are on or off.
• Messages you send us through support, email, the contact form or in-app feedback, and our replies.

5. Alarm, mission and activity data

To ring your alarm, check that a dare was completed and show your progress, we process data about how you use the app.

• Alarms you set: times, repeat days, labels, sounds and the missions attached to each alarm.
• Mission results: which mission was shown, whether it was completed, how long it took, whether a backup mission was used, and whether the alarm was snoozed, missed or dismissed.
• Progress data: streaks, streak freezes, badges, the growth stage of your Chuzi mascot, statistics and history.
• Content you create in the app, such as custom alarm sounds, custom dares, phrases to type, affirmations and QR codes you register for the scan mission.
• Signals used to protect the integrity of alarms, for example that the app was force-closed, uninstalled or that the device time was changed while an alarm was due. These matter particularly where Hardcore Mode is on.

6. Camera, microphone and on-device checks

Several missions use your camera or microphone. These are used live, only while the mission is on screen, and only after you grant the relevant permission to the app.

Photo missions (such as the sky photo, make-your-bed and object missions), exercise missions (push-ups and squats counted by pose detection) and spoken missions (an affirmation or verse said aloud) are checked on your device. The image, the body-pose points and the audio used for the check are processed in the device's memory to decide whether the mission was completed. They are not uploaded to our servers. What we receive is the result, for example that the mission passed and how long it took.

A photo or recording leaves your device only if you choose to share it, for example by posting it to a group or sending it to our support team. If you share it, the people you share it with can see it and it is handled as described in the sections on groups and sharing below.

The QR scan mission reads a code you registered earlier; it compares what the camera sees with that code on your device.

If you refuse or later withdraw camera or microphone permission, missions that need it will not work and the app will offer a different mission instead.

7. Sleep tracking data

Sleep tracking is optional and is off unless you turn it on. When it is on, the app uses your device's motion sensors and microphone during the night to estimate how you slept.

The app processes motion and sound levels to produce a sleep score, estimated sleep phases, a smart wake window and snoring detection. Snoring clips and other night audio are stored on your device and are not uploaded to our servers. Summary results, such as your sleep score, sleep and wake times and estimated phases, may be synced to your account so that you can see your history across devices and restore it if you change phone.

Sleep information can reveal things about your health. We process it only because you have chosen to turn the feature on, and you can turn it off at any time in the app settings. Turning it off stops further collection; you can also delete your sleep history.

8. Steps, health and location data

These are used only for the optional features that need them, and only after you grant permission.

• Steps and motion: for the walk-steps mission and for sleep tracking, the app reads step counts and motion data from your device, Health Connect on Android or Apple Health on iOS. We read only the data types the permission screen shows you, and we do not write health records about you to third parties.
• Approximate location: used to show the weather in your morning briefing and for location-based missions. We ask for approximate rather than precise location. You can refuse and still use the rest of the app.
• Contacts: if you choose to invite friends to a group from your address book, the app reads the contact you pick in order to send the invitation. We do not upload your contact list to our servers.

9. Groups and social features

Groups are optional. If you create or join a group, other members of that group can see a limited set of information about you: your name, your avatar and your wake-up status, together with what follows from that status on the group's live board, leaderboards, group streaks and challenges.

We also process what you do inside a group: nudges you send and receive, reactions, messages, invitations, group names and anything you deliberately post. Content you post in a group is visible to its members, and they may save or share it outside RiseDare. Please think before posting, and follow our Community Guidelines.

Members of a Family plan do not see each other's alarms, sleep data or Chuzi chats merely because they share a plan. That information stays private between members unless a member shares it in a group.

If someone reports you or your content, we process the report, the reported content and related account information in order to review it and to act on it.

10. Chuzi AI

Chuzi is our AI morning coach. Chuzi's features include the morning briefing, coaching chat, the AI dare generator, the wake-up predictor, sleep stories, the personal wake-up voice and group roasts and hype messages. These features are optional and can be turned off in Settings → Chuzi AI.

To produce a reply, we send the text of your message together with the minimum context needed, such as your first name, wake-up time, weather and streak, to a third-party AI provider that runs the language model. The provider processes that text on our behalf and returns the reply. We do not allow our AI providers to use your data to train their models.

We keep your Chuzi chat history and personalisation so that conversations make sense over time. You can clear Chuzi's memory in Settings → Chuzi AI, and it is deleted when you delete your account. Chats may be reviewed in anonymised form to keep the feature safe and to improve it.

Please do not share sensitive information with Chuzi, such as health conditions, passwords, identity numbers or financial details. Chuzi does not make decisions about you that have legal or similarly significant effects. More detail is in the Chuzi AI Terms.

11. Payments, Hardcore Mode, referrals and rewards

Paid plans can be bought through the Apple App Store, Google Play or our website. Website purchases are processed by a payment gateway that supports UPI, UPI AutoPay, cards and net banking.

Payment details are handled by Apple, Google or our payment gateway. We do not receive or store your full card number, card security code or UPI PIN. We receive what we need to give you what you paid for and to keep proper accounts: a transaction or order identifier, the plan bought, the amount, currency, tax, date, payment status, the status of any mandate or renewal, and refund or dispute information.

If you turn on Hardcore Mode, we additionally process the stake amount you chose, whether you chose for missed-alarm charges to be kept by RiseDare or donated, each confirmed miss, charges made, grace passes used, appeals you submit and any evidence you give us in support of an appeal, and the outcome. Hardcore Mode is available only to adults, so we also process the information needed to confirm that you are 18 or older.

We keep invoices and payment records as required by tax and accounting law (see the Retention section).

If you take part in the referral programme or earn streak rewards, we process your referral code, which accounts used it, whether the conditions for a reward were met, the rewards and wallet credits issued to you, and coupons delivered to you in the app.

When you redeem a partner coupon with a partner outside RiseDare, that partner handles your data under its own privacy policy. We share with a partner only what is needed to issue or validate the reward.

We also use this data to detect abuse of the programme, such as self-referrals and fake accounts, as described in the Rewards and Referral Terms.

12. Device, diagnostic and permission data

The permissions the apps request, and the reason for each, are listed on the App Permissions and Data Safety page. That page also summarises what we declare in the Google Play Data Safety section and in Apple's App Privacy labels.

• Device model, operating system version, app version, language and time zone settings.
• Diagnostic data: crash logs, error reports and performance information that help us keep alarms reliable on different phones.
• Push notification tokens, so that we can deliver alarms, nudges and reminders to your device.
• The state of permissions and system settings that affect whether an alarm can ring, such as notification, exact alarm, battery optimisation and display-over-other-apps settings on Android.
• Advertising identifier, only if you allow it. On iOS we do not track you across other companies' apps and websites unless you opt in through the App Tracking Transparency prompt.
• Security information, such as sign-in times and signals that help us detect unauthorised access or misuse.

13. Data collected through the website

You can browse risedare.com without an account. When you do, we process the following.

• Newsletter: the email address you enter, the language of the page and the page you signed up from. We use this to send you the newsletter until you unsubscribe.
• Contact form: your name, email address, the topic you chose and your message, so that we can reply.
• Group invitations: if you enter a group code on the website, the code and the email address or phone number you give, so that we can help you join.
• Chuzi chat bubble: the messages you type are sent to our server and to our AI provider to generate a reply. Recent messages are also kept in your browser's local storage on your own device so the conversation is still there when you return; you can clear it from the chat.
• First-party analytics: page views and clicks on buttons and links (for example on a pricing plan or a store badge), the page address, any UTM campaign parameters in the link you arrived through, your approximate country, your language, and a random session identifier that lasts for the browser session. This tells us which pages work, not who you are. We do not use third-party advertising trackers or advertising pixels.
• Language preference: a cookie that remembers the language you chose.
• Web purchases: the information described in the payments section above, plus the email address used to activate your plan in the app.

14. Why we use your data and our legal bases

Under the Digital Personal Data Protection Act 2023 we process your personal data on the basis of your consent or for the legitimate uses the Act permits, such as where you have voluntarily given us data for a specified purpose, or where processing is needed to comply with law. Under the GDPR and UK GDPR we rely on the legal bases shown in brackets below.

• To create and run your account, ring your alarms, verify missions, and show stats, streaks, badges, groups and the morning briefing (performance of our contract with you).
• To provide optional features you turn on, including sleep tracking, step and location missions, contacts invitations and Chuzi AI (your consent, which you give by turning the feature on and granting the permission, and performance of contract).
• To process purchases, trials, renewals, refunds, referral rewards and Hardcore Mode stakes, charges and appeals (performance of contract and legal obligation).
• To keep tax, accounting and transaction records and to respond to lawful requests from authorities (legal obligation).
• To keep the Service reliable and secure, fix crashes, prevent fraud and abuse, and enforce our terms and Community Guidelines (legitimate interests in running a safe and dependable service).
• To understand in aggregate how the app and website are used so that we can improve them (legitimate interests, or consent where the law requires it).
• To send service messages about your account, alarms, billing, security and changes to our policies (performance of contract and legal obligation).
• To send the newsletter, product news and offers (your consent; you can unsubscribe at any time).
• To answer your questions, complaints and requests to exercise your rights (performance of contract and legal obligation).

15. Consent and how to withdraw it

Where we rely on your consent we ask for it with a clear notice that says what data is involved and what it will be used for. You are free to refuse. Refusing an optional feature does not stop you from using the alarm.

You can withdraw consent at any time, as easily as you gave it:

• Turn the feature off in the app settings, for example sleep tracking or Settings → Chuzi AI.
• Withdraw a device permission (camera, microphone, location, health data, contacts, notifications) in your phone's system settings.
• Use the unsubscribe link in any marketing email.
• Write to [email protected].

16. Who we share data with

We never sell your personal data. We share it only in the following cases, and only as far as needed.

• Service providers that process data on our behalf under contract: cloud hosting and storage, analytics and crash reporting, email and notification delivery, customer support tools and similar providers. They may use the data only to provide their service to us.
• Payment providers: Apple, Google and our payment gateway and its banking partners, to process purchases, mandates, refunds and disputes.
• AI providers, for Chuzi features, as described in the Chuzi AI section.
• Group members: your name, avatar, wake-up status and what you post, if you join a group.
• Reward partners and donation partners, to the limited extent needed to issue a reward you earned or to pass on and account for a donation you chose in Hardcore Mode.
• Professional advisers, auditors and insurers, under duties of confidentiality.
• Courts, regulators, law enforcement and other authorities, where we are required to do so by law or where it is necessary to protect the rights, safety or property of our users, the public or RiseDare.
• A successor business, if RiseDare is involved in a merger, acquisition, restructuring or sale of assets. We will tell you before your data becomes subject to a different privacy policy.

17. Third-party services and international transfers

The Service works with services we do not control, such as the Apple App Store, Google Play, Apple Health, Health Connect, sign-in providers, your UPI app or bank, and the websites of reward partners. When you use them, their own terms and privacy policies apply to what they collect. We encourage you to read them.

Our website and emails may contain links to other sites. We are not responsible for the privacy practices of sites we do not operate.

We are based in India. Some of our service providers store or process data on servers outside India, and people outside India use the Service. Your personal data may therefore be processed in a country other than the one you live in.

When we transfer personal data outside India we do so with contractual safeguards, and only to countries that the Government of India has not restricted for such transfers. Where the GDPR or UK GDPR applies to your data, transfers out of the European Economic Area or the United Kingdom are made under a mechanism those laws recognise, such as an adequacy decision or standard contractual clauses. You can ask us for more information about these safeguards at [email protected].

18. How long we keep data

We keep personal data only for as long as it is needed for the purpose it was collected for, or for as long as the law requires.

• Account, alarm, mission, streak, group and Chuzi data: kept while your account is active.
• Mission photos and the camera, pose and audio data used to check missions: not stored on our servers.
• Sleep audio and snoring clips: kept on your device, under your control. They are removed when you delete them or uninstall the app.
• Payment and invoice records: kept for 8 years, as required by Indian tax law.
• Hardcore Mode transaction logs: kept for 8 years.
• Newsletter subscriptions: kept until you unsubscribe.
• Contact and support messages: kept for as long as needed to deal with your request and to keep a record of how it was handled.
• When you delete your account: your account is deleted immediately and your other data is erased within 30 days, which is also the period within which backups are purged.
• Anonymised, aggregated statistics that cannot identify you may be kept without limit.

19. Deleting your account and data

You can delete your account in the app at Settings → Account → Delete account. If you no longer have the app, you can request deletion through the website or by email. The steps, what is deleted and what we must keep are set out on the Data and Account Deletion page.

Deleting your account does not cancel a subscription bought through the App Store or Google Play. Cancel the subscription in the store first.

Data stored only on your device, such as sleep audio, is removed when you uninstall the app.

20. Security and data breaches

We use technical and organisational measures that are appropriate to the data we hold. Personal data is encrypted in transit using TLS 1.2 or higher and encrypted at rest. Access to personal data is limited to staff and service providers who need it to do their work, and they are bound by confidentiality obligations.

No system is completely secure, and we cannot guarantee that a breach will never happen. You can help by keeping your sign-in details private, protecting your phone with a screen lock, and telling us straight away at [email protected] if you suspect unauthorised access to your account.

If a personal data breach occurs, we will notify affected users and the relevant authorities, including the Data Protection Board of India and, where applicable, supervisory authorities in other countries, in the manner and within the time the law requires.

21. Your rights

Under the Digital Personal Data Protection Act 2023 you have the following rights in relation to your personal data.

• Access: to obtain a summary of the personal data we process about you, what we do with it, and the identities of those we have shared it with.
• Correction and updating: to have inaccurate or incomplete data corrected, completed or updated. Much of this can be done directly in the app.
• Erasure: to have your personal data erased when it is no longer needed for its purpose, unless we must keep it by law.
• Withdrawal of consent: to withdraw consent at any time. Withdrawal does not affect processing done before you withdrew.
• Grievance redressal: to have a complaint dealt with by our Grievance Officer.
• Nomination: to nominate another person to exercise your rights if you die or become unable to act.
• Complaint to the regulator: to complain to the Data Protection Board of India. The law expects you to raise the matter with us first so that we have the chance to resolve it.

22. Additional rights for users in the EEA and the United Kingdom

If the GDPR or UK GDPR applies to our processing of your data, you also have the following rights, subject to the conditions and exceptions in those laws.

• To receive a copy of your personal data and information about how it is processed.
• To have inaccurate data rectified and, in certain cases, to have data erased.
• To ask us to restrict processing in certain circumstances.
• To object to processing based on our legitimate interests, and to object at any time to direct marketing.
• To receive data you gave us in a structured, commonly used, machine-readable format and to have it sent to another controller where this is technically feasible.
• Not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you. We do not make decisions of that kind.
• To withdraw consent at any time where processing is based on consent.
• To lodge a complaint with the data protection supervisory authority where you live or work, or in the United Kingdom with the Information Commissioner's Office.

23. How to exercise your rights

Many choices are available directly in the app settings. For anything else, write to [email protected] from the email address registered on your account and tell us what you would like us to do. We may need to verify your identity before acting, so that we do not give your data to someone else. There is no charge for making a request, unless a request is clearly unfounded or excessive.

If you are not satisfied with our reply, you can escalate to our Grievance Officer at [email protected]. We acknowledge complaints within 24 hours and resolve them within 15 days. The full process is on the Grievance Redressal and Contact page.

We will not treat you less favourably for exercising any of these rights.

24. Children and teenagers

RiseDare is not directed at children under 13, and we do not knowingly collect personal data from them. Users aged 13 to 17 may use RiseDare only with the verifiable consent of a parent or guardian, as required under the Digital Personal Data Protection Act 2023 for users under 18.

For users under 18 we do not carry out targeted advertising or behavioural tracking, Hardcore Mode and paid rewards are disabled, and groups are limited to invite-only.

If you are a parent or guardian and believe that a child has given us personal data without your consent, write to [email protected] and we will delete it. More detail is on the Children's Privacy page.

25. Changes to this policy

We may update this policy as the Service or the law changes. The date at the top of the page shows when it was last updated. If we make a material change we will notify you in the app or by email at least 15 days before it takes effect, and where the change needs your consent we will ask for it.

This policy is published in English and may be made available in other languages for convenience. If there is any difference between versions, the English version prevails to the extent permitted by law.

26. Contact and grievance redressal

If you have a question, a request or a complaint about your personal data, contact us using the details below. Our Grievance Officer is available Monday to Friday, 10:00 to 18:00 IST. If you are not satisfied with our response, you may approach the Data Protection Board of India, and users in the EEA or the United Kingdom may contact their supervisory authority.

• Data Fiduciary and controller: (to be added)
• Registered office: (to be added)
• Privacy questions and rights requests: [email protected]
• Grievance Officer: (to be added), [email protected]
• General support: [email protected]