Rise'N Shine
Rise'N Shine delivers a personalised package every morning, at the hour you choose: a motivational message, an image, a music recommendation and the weather where you are.
To do that, the app needs some information about you. This document explains exactly what it is, why it is needed, who receives it, and what you can ask us to do with it at any time.
The data controller, within the meaning of the General Data Protection Regulation (GDPR), is:
Rise'N Shine is developed and operated by one person. The same person who writes the app answers any question about your data.
If you allow notifications, your device receives a technical notification identifier (a "token"). It is used only to deliver your morning notification at the hour you chose.
We do not collect health data. The app does not read sleep, steps, heart rate or anything else from Health Connect or any other health app. It does not request permission to do so.
We do not collect GPS location. For weather we use only the city name you enter. If you consent to campaign measurement (section 2.6), your IP address is used to infer the country you are in — that is all, not your city and not your exact location.
We do not read your social media accounts and we do not retrieve any of your posts.
We never sell your data to anyone, in any form.
If you installed the app after seeing an advert, we want to know which advert it was. For that we use AppsFlyer, an advertising campaign measurement service.
None of what follows starts without your explicit consent. The first time you open the app, right after you choose your language and before you create an account, we ask whether you agree. If you decline, the app works exactly the same, you lose no features, and nothing in the list below is read from your phone. We do not ask a second time.
If you agree, the following is collected:
That is all. Your content does not go there: no motto, no reflection, no preference, no name and no email address.
Consent can be withdrawn at any time — see section 6.1.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Creating and managing your account | Email, password, name | Performance of a contract, Art. 6(1)(b) |
| Generating your personalised daily package | Preferences, city, session history | Performance of a contract, Art. 6(1)(b) |
| Sending the morning notification | Notification token, chosen hour | Consent, Art. 6(1)(a) |
| Managing the subscription | Subscription status, account identifier | Performance of a contract, Art. 6(1)(b) |
| Improving the app | Technical events, linked to the account identifier | Legitimate interest, Art. 6(1)(f) |
| Measuring advertising campaigns | Advertising identifier, device data, IP address, install and subscription events | Consent, Art. 6(1)(a) |
Consent for notifications can be withdrawn at any time, from your phone settings or from within the app. Withdrawing it does not affect anything else.
For the app to work, some data passes through external services. Each receives strictly what it needs and nothing more.
| Service | What it receives | What for |
|---|---|---|
| Supabase | Your account and all data described above | Database, authentication and file storage |
| OpenAI | Your first name, preferences and the day's context | Generating the motivational message and reflections |
| ElevenLabs | The text that is about to be read aloud | Turning text into audio |
| Open-Meteo | The city name | Weather forecast. It receives no identifier of yours. |
| RevenueCat and Google Play Billing | An account identifier and subscription status | Verifying the subscription. Card details never pass through the app. |
| Expo Push and Google FCM | The notification token | Delivering the morning notification |
| AppsFlyer | The advertising identifier, device data, IP address, install and subscription events | Measuring advertising campaigns. Only if you have consented (section 2.6). |
Spotify and YouTube Music: the app opens links to them when you tap a track. We send them no information about you. What happens once you are there falls under their own privacy policies.
Advertising networks. If you have consented to campaign measurement, the attribution result — the fact that an install came from a particular advert — goes back to the network that ran that advert, for example Google Ads or Meta. Unlike the services in the table above, which process data strictly on our behalf and on our instructions, advertising networks decide for themselves what to do with what they receive, as independent controllers. This is the only case in which data about you reaches someone who does not work for us. They receive no name, no email address and none of the content generated for you. If you have not consented, they receive nothing.
Your account and all associated data are stored in the European Union. The database and files are hosted by Supabase in the Ireland region (eu-west-1).
Some of the providers above are based in the United States. Transfers to them rely on the standard contractual clauses approved by the European Commission, or another transfer mechanism provided for by the GDPR, under each provider's terms.
Under the GDPR you have the following rights, and you can exercise them by emailing risenshine.ro@gmail.com:
We respond within 30 days at most. If you are not satisfied with the response, you have the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP, at www.dataprotection.ro, or with the authority in your own country of residence.
The consent you gave on first launch is withdrawn inside the app, from Settings → Privacy → Campaign measurement. From the moment you withdraw it, the app no longer reads the advertising identifier and sends no further events to AppsFlyer. Withdrawing is as simple as consenting and requires no justification from you.
Separately from the app, Android lets you delete the advertising identifier for the whole phone, from the advertising settings of your Google account. The exact name of that menu differs between phones and between Android versions, so we do not reproduce it here rather than send you down the wrong path. That option applies to every app installed, not only this one.
No system is absolutely secure. If a breach occurs that puts your data at risk, we will notify you and the competent authority within the time limits set by law.
Rise'N Shine is intended for people aged 16 and over. We do not knowingly collect data from children below that age. If you learn that a minor under 16 has created an account, write to us and we will delete it.
The motivational messages, reflections and recommendations are generated by an artificial intelligence model, based on your preferences. They are intended for daily inspiration and wellbeing. They do not constitute medical, psychological or therapeutic advice and are not a substitute for consulting a professional.
When the app changes, this document changes with it. The date at the top of the page always shows the last update. If an important change occurs — a new category of data, for instance — we will tell you in the app before it takes effect.
For any question about your data: risenshine.ro@gmail.com