RISE Privacy Policy

Last updated September 27, 2021

 

Welcome to RISE. The power behind your next best day.

 

RISE makes it easy to improve your sleep and daily energy to reach your potential.

Maintaining the privacy of your information is of paramount importance to us as it helps foster confidence, goodwill and stronger relationships with our users. This Global Privacy Policy (“Privacy Policy”) describes the privacy practices of Rise Science, Inc. (“RISE,” “we,” “us” or “our”) when you use or otherwise interact with our website at https://www.risescience.com/ (the “Site”) and our mobile application RISE Sleep (the “App”). The App allows users to track their sleep, sleep debt, and energy levels, along with offering guided support and educational content on a wide array of relevant topics. The Site and the App are referred to collectively in this Privacy Policy as the “Service.” Our privacy practices may vary among the countries in which we operate to reflect local practices and legal requirements. In this Privacy Policy, we also provide a supplementary privacy notice for California residents and a supplementary privacy notice for data subjects in the EEA, Switzerland and the UK (collectively, “Europe”) and Brazil.

 

This Privacy Policy is incorporated into and forms part of our Terms of Service.

 

Before using the Service or submitting any personal information to RISE, please review this Privacy Policy carefully and contact us at privacy@risescience.com if you have any questions. 

 

PERSONAL INFORMATION WE MAY COLLECT

Here’s a description of the categories of information we may collect when you interact with our Service, and examples of how we use the specific types of information. 

Information You Provide Us

 

  • Account data, such as your email address and password (required to create an account on our Service) and other information you may choose to provide, such as your first name, last name, phone number, and gender. If you create an account or log into the App using third-party services, such as Google or Facebook, we will receive information about you as permitted by your profile settings on the third-party service in order to authenticate you. The information we receive when you authenticate through a third-party service depends on the settings, permissions and privacy policy controlled by that third-party service. You should always check the privacy settings and notices in the relevant third-party services to understand what data may be disclosed to us or shared with our Service.
  • Information uploaded by you on the App, such as your estimated sleep duration, sleep and energy quality surveys.
  • Communications that we exchange with users when they contact us and use our support services. We also collect your information when you wish to set an e-meeting with us, to share with us your ideas about new features you would like to see on RISE or when providing us with your feedback. 
  • Payment and transactional data if you choose to sign up for a premium account with additional features and content, including name, payment card information, bank account number, billing information, and your transaction history. This information is collected by Apple (and if applicable, Google) with respect to in-app purchases made through the App. If you make a purchase for the App through our Site, our payment processor, Stripe, Inc., will collect and process your payment information. In addition to this Privacy Policy and our Terms of Service, information related to your payments or purchases is also processed according to Stripe’s services agreement and privacy policy.


Information We Receive From Your Use of the Service


  • Steps, movement and phone motion data, collected through your device’s accelerometer or phone motion (if you choose to authorize this from your phone settings). This data is needed to make predictions for when and how long you have slept. 
  • Sleep and step data, if you are using certain devices and authorize the App to access this data from your phone settings.  Each morning, RISE checks Apple Health or Google Fit for the previous night’s sleep data. If your third-party sleep tracker device or application (such as the Apple Watch sleep app) has sent data to Apple Health or Google Fit, RISE will use it to make predictions for when and how long you have slept. Notwithstanding anything else in this Privacy Policy, (a) we use Apple Health and / or Google Fit sleep and step data only to provide the Service and not for advertising, and (b) we will not disclose this data for advertising, marketing, or use-based data mining not needed to provide the Service.
  • Information that we automatically collect to protect you, other App users and the public, such as IP addresses, hashed version of your password and encrypted version of your encryption key.
  • Device data, such as your computer’s or mobile device’s IP address (and derived location), operating system, manufacturer and model, browser type, telecommunications provider, the date and time of App use, interactions with the Service, and the time, frequency, and duration of the interactions. We use cookies and similar technologies on the Service as further described in the “Tracking Technologies” section below.  

HOW WE USE PERSONAL INFORMATION

We use personal information to:

 

Provide our Service, including to:

 

  • Operate the App, the Site and our business;
  • Create and maintain your account;
  • Process your payments and manage your subscriptions;
  • Maintain and improve the App, the App’s features, and the Service;
  • Develop new products and services;
  • Communicate with you about the App by sending you push notifications with announcements, updates, security alerts, and support and administrative messages, if you have enabled that functionality;
  • Provide support for the App and Site, and respond to your requests, questions and feedback;
  • Prevent fraud, criminal activity, or misuses of our Service, and to ensure the security of our IT systems, architecture, and networks; and
  • Comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties.

 

Direct marketing. We may send you direct marketing communications as permitted by law, including, but not limited to, notifying you of feature releases or providing content that we think may be of interest to you. You may opt out of our email marketing communications as described in the “Opt out of marketing communications” section below. Please note that we may periodically send you transactional emails even after you opt out of direct marketing.

 

Interest-based advertising. We may engage advertising partners, including third party advertising companies and social media companies, to display ads on the Service. These companies may use cookies and similar technologies to collect information about your interaction with the Service, our communications and other online services (as further described in the “Tracking Technologies” section below), and use that information to serve online ads that they think will interest you. This is called interest-based advertising. You can learn more about your choices for limiting interest-based advertising in the “Online tracking opt out” section below.

 

Research and development. We may use your information to analyze the effectiveness of our Service, to improve and add features to our Service, and to analyze the general behavior and characteristics of users of our Service.

 

Support and maintenance. We use third party analytics services to automatically log certain information about your mobile device and how you interact with the App. The information collected is used to troubleshoot and prevent errors, perform data analysis, and develop new features.

 

Compliance and protection. We may use personal information to:

  • Protect our, your, or others’ rights, privacy, safety or property (including by making and defending legal claims);
  • Enforce our Terms of Service;
  • Audit our internal processes for compliance with legal and contractual requirements and internal policies;
  • Prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft; and
  • Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.

HOW WE SHARE PERSONAL INFORMATION

We do not sell personal information. In the ordinary course of business, we may share personal information with:

 

Service providers. Companies and individuals that provide services on our behalf or help us operate the Service or our business (such as payment processors, providers of subscription and billing services, analytics service providers, marketing service providers, database service providers, backup and disaster recovery service providers, email communication service providers, push notification service providers).

 

Professional advisors. Professional advisors, such as lawyers, auditors, bankers, and insurers, where necessary in the course of the professional services that they render to us.

 

Authorities and others. Law enforcement, government authorities, and private parties as we believe necessary to: (a) protect our, your, or others’ rights, privacy, safety, or property (including by making and defending legal claims); (b) enforce our Terms of Service; and (c) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical, or illegal activity.

 

Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale, or other disposition of all or any portion of the business or assets of, or equity interests in, RISE or our affiliates (including, in connection with a bankruptcy or similar proceedings).

 

 

TRACKING TECHNOLOGIES

 

Like many services, we use cookies and similar technologies to operate the Service and to remember things about you so that we can provide you with a better experience.

 

  • Cookies, text files which are stored on your computer or other device when you visit the Site or interact with the Service.
  • Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
  • Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.
  • SDKs, which are blocks of code provided by our partners or service providers that may be installed in our mobile applications. SDKs help us understand how you interact with our mobile applications and collect certain information about the device and network you use to access the application.


We and our partners may use cookies, SDKs, and other tracking technologies on the App or Site provided by the following third parties:

 

a. Amplitude, a web analysis service provided by Amplitude, Inc., used to evaluate user access and to maintain and improve the Service. Amplitude’s privacy policy can be found here: https://amplitude.com/privacy. 


b. Adjust, an analysis service provided by Adjust GmbH, used to track user interactions with the App in real time and to analyze the performance of marketing campaigns. Adjust’s privacy policy can be found here: https://www.adjust.com/terms/privacy-policy/. 


c. Google Firebase Crashlytics (provided by Google LLC), used to get crash reports and metrics and to derive analytics information regarding the use of the App, including by collecting identifiers for mobile devices (including Android Advertising ID and Advertising Identifier for iOS). Firebase Crashlytics retains crash stack traces, extracted minidump data, and associated identifiers (including Crashlytics Installation UUIDs) for 90 days. To learn more about how Google uses data when you use the App please read here.


d. Sentry, a service provided by Sentry that collects App usage information related to system crashes and bugs, including information about the device, the version of the App that is installed, and other information that can help fix bugs. Sentry privacy policy can be found here: https://sentry.io/privacy/.


f. Segment, used to collect analytics information relating to the Service. Segments privacy policy can be found here: https://segment.com/legal/privacy/. 


g. Google Analytics, a web analytics service provided by Google. These cookies help us analyze how users use the Site and enhance your experience when you use the Site. For more information on how Google uses this data, go to www.google.com/policies/privacy/partners/.

YOUR CHOICES

 

Update, correct, or delete. You can contact us to ask us to update or correct your information. You may also delete your account.  Please note that we will need to verify that you have the authority to update, correct, or delete the account and certain activity generated prior to deletion may remain stored by us and may be shared with third parties as detailed in this Privacy Policy.

 

Opt out of marketing communications. You may opt out of marketing-related emails by following the opt out or unsubscribe instructions contained in the communications we send you.

 

Opt out of push notifications. If you opt-in to receive push notifications within the App, we may send push notifications or alerts to your mobile device from time to time. You can deactivate push notifications and alerts at any time by changing your device settings, changing the push notification settings within the App, or deleting the App.

 

Online tracking opt out. There are a number of ways to limit online tracking, which we have summarized below:

 

  • Blocking cookies in your browser. Most browsers let you remove or reject cookies, including cookies used for interest-based advertising. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit www.allaboutcookies.org
  • Blocking advertising ID use in your mobile settings. Your mobile device settings may provide functionality to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes.
  • Using privacy plug-ins or browsers. You can block our Site from setting cookies used for interest-based ads by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, Ghostery, or uBlock Origin, and configuring them to block third party cookies/trackers. You can also opt out of Google Analytics by downloading and installing the browser plug-in available at: https://tools.google.com/dlpage/gaoptout.  
  • Platform opt outs. The following advertising partners offer opt out features that let you opt out of use of your information for interest-based advertising:
  • Advertising industry opt out tools. You can also use these opt out options to limit use of your information for interest-based advertising by participating companies:

 

Note that because these opt out mechanisms are specific to the device or browser on which they are exercised, you will need to opt out on every browser and device that you use.

 

Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to "Do Not Track" or similar signals. To find out more about "Do Not Track," please visit http://www.allaboutdnt.com.

 

OTHER SITES AND APPS

 

The Service may contain links to websites and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites or online services operated by third parties, and we are not responsible for their actions.

 

This Privacy Policy does not apply to any third-party applications or software that integrate with the Service, or any other third-party products, services or businesses.

PROCESSING OF PERSONAL INFORMATION IN THE UNITED STATES

 

RISE has users located across the globe. We are headquartered in the United States with services providers that operate in other countries. We may transfer your personal information to the United States and other countries which may not have the same data protection laws as your home country or territory, but we will protect your personal information in accordance with this Privacy Policy, or as otherwise disclosed to you.

DATA SECURITY 

You use the Service at your own risk. We implement commercially reasonable technical, administrative, and organizational measures to protect personal information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or e-mail transmission is ever fully secure or error free. In particular, e-mail sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Internet. Please keep this in mind when disclosing any personal information to us via the Internet. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the App, or third party websites. 

CHILDREN 

The Service is not intended for use by children under 18 years of age. If we learn that we have collected personal information through the Service from a child under 18 without the consent of the child’s parent or guardian as required by law, we will delete it.

CHANGES TO THIS PRIVACY POLICY 

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the App or Site. If required by law, we will also provide notification of changes in another way that we believe is reasonably likely to reach you, such as via email or another manner through the App. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledgment of the modified Privacy Policy.

HOW TO CONTACT US

If you have any questions about this Privacy Policy or complaint about our handling of your personal information, please contact us at privacy@risescience.com or sending a letter to the following mailing address:


Rise Science

548 Market St. PMB 79836 

San Francisco, CA 94104 

United States

 

NOTICE TO CALIFORNIA RESIDENTS

We are providing this supplemental privacy notice to consumers in California, pursuant to the California Consumer Privacy Act of 2018 (“CCPA”).

 

The CCPA grants California residents the following rights:

 

  • Information. This Privacy Policy describes how we use and share your personal information through the Service, including during the past 12 months. The Policy describes:
  1. The sources through which we collect California residents’ personal information and the types of personal information collected in the “Personal Information We May Collect” section above.
  2. The purposes for which we use and share this information in the “How We Use Personal Information” section above and the “How We Share Personal Information” section above.
  • Access. You can request a copy of the personal information that we maintain about you.
  • Deletion. You can ask to delete the personal information that we maintain about you.
  • Opt out of sale of your personal information. We do not sell personal information. We offer instructions on how to limit online tracking in the Online Tracking Opt Out.

 

The CCPA limits these rights. For example, companies may not provide users in response to access requests certain sensitive information and other consumers’ personal information, and may exclude information that would compromise the confidentiality of trade secrets. The CCPA also places limits on when companies must comply with a deletion request.

 

You are entitled to exercise the rights described above free from discrimination.

Here is how you can submit requests:

 

  • To request access to or deletion of personal information collected, please email us at privacy@risescience.com or call us at (415) 840-8911.
  • To verify your identity prior to responding to your requests, we may ask you to confirm your identity by providing us with the email address that you used to create your RISE account, or with other details that we may need to verify your identity.
  • Authorized agents. California residents can empower an “authorized agent” to submit requests on their behalf. We will require authorized agents to confirm their identity and authority, in accordance with the CCPA.

NOTICE TO EUROPEAN AND BRAZILIAN DATA SUBJECTS

We are providing this supplemental privacy notice to European data subjects, pursuant to European data protection laws (“GDPR”) and Brazilian data subjects, pursuant to Brazilian data protection laws (“LGPD”).

 

Controller and Representative. RISE is responsible for how your personal data is handled. This means we are the controller of your personal data under the GDPR. You can find our contact information in the “How to Contact Us” section above.

 

VeraSafe has been appointed as Rise Science, Inc’s representative in the European Union for data protection matters, pursuant to Article 27 of the General Data Protection regulation of the European Union. If you are in the European Economic Area, VeraSafe can be contacted in addition to privacy@risescience.com, only on matters related to the processing of personal data. To make such an inquiry, please contact VeraSafe using this contact form: https://verasafe.com/public-resources/contact-data-protection-representative or via telephone at: +420 228 881 031.

 

Alternatively, VeraSafe can be contacted at: 

VeraSafe Ireland Ltd.

 Unit 3D North Point House

 North Point Business Park

 New Mallow Road

 Cork T23AT2P

 Ireland

 

Personal Data We Collect From You and How We Use It. You can read about the personal data we collect from you in the “Personal Information We May Collect” section above, and how we use it in the “How We Use Personal Information” section above.

 

Justification for Data Processing. European and Brazilian data protection law sets out a list of justifications on which companies may rely to process personal data, and requires companies to explain to consumers the specific justifications for the company’s data processing activities.  We generally rely on one of the following justifications to process personal data:

 

  • Contractual Necessity, to provide you with the Service in accordance with our Terms of Service.
  • Legitimate Interests, where it is necessary for our legitimate business purposes, your interest or the interests of a third party.

 

Provision of some of this data is necessary to establish an account on RISE.

 

Account data

Purpose: To create and maintain your account.

Justification for Processing Personal Data: Contractual Necessity

Account data

Purpose: To respond to your inquiries. To send you notifications, SMS messages, or emails of feature releases or provide content that we think may be of interest to you

Justification for Processing Personal Data: Contractual Necessity. Legitimate Interests: Providing you with the support that you request, and improving our App and related Services. Sending you information on our own products and Services that may be of interest to you.

Steps, sleep, and movement data

Purpose: To generate insights and analysis as to users sleep habits, sleep debt, and energy levels.

Justification for Processing Personal Data: Contractual Necessity.

Communications

Purpose: To address users’ inquiries. To improve the Service, in relation to information (such as feedback) about your experience with the Service.

Justification for Processing Personal Data: Legitimate Interests: Providing user support. Enabling us to prevent and detect harmful or unauthorized conduct. Improving and developing the App and developing new features and Services. For example, we may decide to build a new feature in response to feedback received from users.


Payment and Transactional Data

Purpose: To authorize Stripe to process your transactions.

Justification for Processing Personal Data: Contractual Necessity.

Device Data

Purpose: To provide functionality, security, and for analytics and marketing purposes.

Justification for Processing Personal Data: Legitimate Interests: Developing and improving the Service.


Recipients of Data. We may disclose your personal data to the recipients described in the “How We Share Personal Information” section above.

 

Retention of Data. We keep your personal data for as long as you have a RISE account. To protect the safety and security of our users, your personal data will be retained for a reasonable period of time following account deletion. To determine the appropriate retention period for your personal data, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

 

Storage. We are based in the United States and rely on cloud storage providers that store user data on our behalf in the United States. The United States may have data protection laws less stringent than or otherwise different from the laws in effect in Europe. We have taken measures to protect the confidentiality and security of your personal data, and your rights as a data subject.

 

Your Rights. The GDPR and the LGPD grant European and Brazilian data subjects the following rights:

 

  • Access. You can request a copy of the personal data that we maintain about you. If you require additional copies, we may need to charge a reasonable fee.
  • Deletion and Correction. You can ask us to delete or correct the personal data that we hold about you.
  • Objection. You may have the right to object to how we use your personal data.
  • Restrict Processing. You may ask us to suspend our processing of your personal data, for example, if you want us to establish its accuracy or the reason for processing it.
  • Data Portability. If required to do so, we will give you your personal data in a structured, commonly used, and machine-readable format.

 

To exercise these rights, please email privacy@risescience.com. You may also contact us using the contact information referenced in the “How to Contact Us” section above. You also have the right to complain to a data protection authority in your country about our processing of your personal data.


Graphic showing app mockups.
Try 7 days free

The power behind your next best day

RISE makes it easy to improve your sleep and daily energy to reach your potential

Rise app iconApp store icon