Rise Privacy Policy
Effective October 6, 2026
Look within. Within is the fountain of good.
Marcus Aurelius, Meditations VII.59, trans. George Long
Rise by Ash & Iron was made for the most private work there is: deciding who you want to be, and being honest with yourself about the day. That work belongs to you. So we built Rise to keep it with you.
This policy explains, in plain language, what happens to information in the Rise app and to anything you choose to send us. It is written to meet privacy laws in Canada, the United States, the European Union, the United Kingdom and other countries where Rise is available.
Our promise
- Your journal stays on your device. Everything you write in Rise is stored only on your phone.
- We cannot read it. Rise has no account, no server and no cloud copy. We have no way to see your entries, even if we wanted to.
- We do not sell or share personal information. Not for advertising, not for profit, not ever.
- No tracking. Rise contains no analytics, no advertising tools and no tracking technology of any kind.
- You stay in control. You can export, back up or erase everything at any time, without asking us.
Who we are
Rise is published by Ash & Iron Publishing (“Ash & Iron”, “we”, “us”). For the limited information described in this policy, we are the organization responsible for it, known in some laws as the controller.
Our Privacy Officer is accountable for how we handle personal information and for this policy. You can reach the Privacy Officer at privacy@ashiron.co or through our contact page.
What this policy covers
This policy covers the Rise app on iPhone and Android, and the messages you send us about it. It does not cover purchases or accounts in our online shop.
Inside the app: what stays on your device
To work, Rise saves what you write and choose. This includes journal entries, titles, tags and prompts; morning intentions, priorities and evening reflections; moods, habits and tasks; saved thoughts and Sudoku progress; and your settings.
All of this is stored locally, inside the app’s private storage on your device. It is never sent to us or to anyone else. The app makes no network requests, and its fonts and images are built in. Because this information never reaches us, we do not collect it, and we cannot access, recover or disclose it.
Mood insights and summaries in Rise are calculated on your device. No automated decisions about you are made by us or anyone else, and no profile of you is created.
Widgets
Home screen widgets show a small summary of your day, such as your intention, priorities and the daily thought. That summary is kept on your device so the widgets can read it. It does not leave your phone.
Notifications
If you choose a daily thought or reminders, your phone schedules them itself. No server is involved. Rise asks for notification permission only when you turn them on, and you can turn them off at any time in the app or in your phone settings. Rise does not ask for access to your location, contacts, camera, microphone or photos.
Exports and backups
You can export your journal or save a full backup from Settings. These files are created only when you ask, and they go wherever you choose to send or save them. Once a file leaves the app, it is under your control and the terms of wherever you store it.
Your phone may include app data in its own device backups, such as iCloud or Google backups, depending on your settings. Those backups are provided by Apple or Google under their own privacy policies, and we have no access to them.
Information you choose to give us
The only personal information we receive is what you decide to send us, for example when you contact us for support, report a problem or share feedback. This may include your name, your email address and the content of your message.
We use it only to read and answer your message, to fix problems you report and to improve Rise. We do not add you to a mailing list unless you ask us to. Please do not include journal entries or other sensitive details in your message unless you want us to see them.
Our legal basis under the GDPR and UK GDPR is our legitimate interest in answering you and supporting the app, or the steps you ask us to take. Under Canadian law, we rely on the consent you give by contacting us.
Information from the app stores
Apple and Google distribute Rise and process information about your download under their own privacy policies, as independent organizations. They may give us statistics about installs and app performance. If you have chosen in your phone settings to share diagnostics with app developers, they may also give us crash reports. These reports are provided to us without your name or contact details, and we use them only to find and fix problems in Rise.
How we share information
We do not sell personal information, and we do not share it for targeted or cross context behavioural advertising. We have not done so in the past twelve months.
We share the limited information described above only when needed:
- With trusted service providers who host our email and website, under contracts that require them to protect it and use it only on our instructions.
- When the law requires it, for example in response to a valid court order. Because your journal never reaches us, we have no journal data to disclose.
- If Ash & Iron is ever reorganized or sold, in which case this policy and its protections would continue to apply.
Where information is stored
Your journal stays on your device, wherever you are. Support messages may be stored by our service providers in Canada, the United States or other countries. When personal information from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on recognized safeguards such as the European Commission’s Standard Contractual Clauses. Information stored outside your province or country may be subject to the laws of that place.
How long we keep it
Support messages are kept for as long as we need them to help you, and then for up to 24 months so we can follow up on recurring problems. After that they are deleted or anonymized, unless the law requires us to keep them longer. Data in the app is kept for as long as you keep it there.
How we protect it
Rise is built so that your journal never has to be protected in transit or on a server, because it never travels. On your device, it benefits from the security of your phone, so we encourage a strong passcode. For the information you send us, we use reputable providers, encrypted connections and access limited to the people who need it. In the unlikely event of a breach that affects you, we will notify you and the relevant authorities as the law requires.
Your rights
Wherever you live, you can ask us what personal information we hold about you, ask us to correct or delete it, and withdraw your consent. Your journal is already in your hands: choose Start over in Settings to erase everything in the app, or delete the app to remove all of its data from your device.
To make a request, write to privacy@ashiron.co. We will reply within 30 days, or sooner where the law requires, and we will not charge you or treat you differently for using your rights. We may ask for information to confirm a request is yours. You may also use an authorized agent where the law allows.
Canada
Under the Personal Information Protection and Electronic Documents Act, Quebec’s Act respecting the protection of personal information in the private sector and similar provincial laws, you can access and correct your personal information and withdraw consent. If you are not satisfied with our answer, you may contact the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.
United States
Residents of California and other states with consumer privacy laws have the right to know what personal information we collect, use and disclose; to access, correct and delete it; and to opt out of its sale, sharing or use for targeted advertising. We do not sell, share or use personal information for targeted advertising, so there is nothing to opt out of. We do not use or disclose sensitive personal information. If we decline a request, you may appeal by replying to our decision, and if you remain unsatisfied, contact your state attorney general.
European Union, United Kingdom and Switzerland
Under the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection, you have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. You also have the right to complain to the data protection authority where you live or work.
Elsewhere
Residents of Brazil, Australia, Japan, South Korea, India and other countries with privacy laws have similar rights, and we honour them in the same way. Whatever the law where you live, we extend the protections in this policy to everyone who uses Rise.
Children
Rise is a general audience app and is not directed at children under 13, or under 16 in the European Union. It does not knowingly collect personal information from anyone, of any age. If you believe a child has sent us personal information, contact us and we will delete it.
Changes to this policy
If we change this policy, we will update this page and the date at the top, and we will explain significant changes inside the app. If a future version of Rise ever offers an optional feature that sends data off your device, such as cloud sync, it will be off by default, it will ask for your consent first, and it will be described here before it is released.
Contact us
Questions, requests or concerns about privacy are welcome. Write to our Privacy Officer at privacy@ashiron.co or use our contact page. We reply within two business days.
Rise by Ash & Iron. Character is forged daily, and in private.