Privacy Policy

1. Introduction

Welcome to RiseWithin. Snake Charmer Limited ("we", "us", or "our") operates the RiseWithin mobile application. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Privacy Policy explains our practices regarding data collection and use when you use our mobile application.

2. Data Controller

Snake Charmer Limited, located in Waterford, Ireland, is the data controller responsible for your personal information. As the data controller, we determine the purposes and means of processing your personal data and are accountable for ensuring your data is handled in compliance with applicable data protection laws.

3. Information We Collect

3.1 Information You Provide

• Account Information: Email address, name (optional), and authentication credentials when you create an account
• Profile Data: Preferences, quiz responses, and settings you provide to personalize your experience
• Contact Information: Information you provide when contacting us for support

3.2 Information Collected Automatically

• Usage Data: How you interact with the App, including features used, sessions played, and time spent
• Device Information: Device type, operating system, and unique device identifiers
• Analytics Data: Crash reports and performance data to improve the App

4. How We Use Your Information

We use the collected information to:

• Provide and personalize the App experience
• Generate personalized affirmation recommendations
• Process subscriptions and manage your account
• Send important notifications about your account or the service
• Send product update emails about new features, new sessions, app improvements, and related announcements
• Improve and optimize the App's performance and features
• Respond to your inquiries and provide customer support
• Detect and prevent security threats or fraudulent activity
• Comply with legal obligations

5. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide you with our services and fulfill our contractual obligations to you
• Consent: Where you have given clear consent for us to process your personal data for specific purposes, such as marketing communications
• Legitimate Interests: Processing necessary for our legitimate interests, such as improving our services, ensuring security, and understanding how users interact with the App
• Legal Obligation: Processing necessary to comply with legal requirements

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. These technologies help us:

• Remember your preferences and settings
• Understand how you use our services
• Analyze App performance and usage patterns
• Provide personalized content

You can control cookie settings through your browser or device settings. Please note that disabling certain cookies may affect the functionality of our services.

7. Third-Party Services

We use the following third-party services that may collect information:

• Firebase (Google): Authentication, database, and analytics
• RevenueCat: Subscription management and payment processing
• SendGrid: Transactional emails, password reset emails, and product update email list management
• Expo and Firebase: Push notification delivery
• Apple/Google: App store services and in-app purchases

Each of these services has their own privacy policy governing their data practices.

8. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

• With service providers who assist in operating the App (under strict confidentiality agreements)
• When required by law or to respond to legal process
• To protect our rights, privacy, safety, or property
• In connection with a merger, acquisition, or sale of assets (with notice to you)

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may retain certain information as required by law or for legitimate business purposes. When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law.

10. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Rectification: Update or correct inaccurate information
• Erasure: Request deletion of your account and associated data
• Restriction: Request restriction of processing of your personal data
• Objection: Object to processing of your personal data based on legitimate interests
• Data Portability: Request your data in a portable, machine-readable format
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us using the information below. You also have the right to lodge a complaint with a supervisory authority.

You can opt out of product update emails at any time by using the unsubscribe link included in those emails.

11. Data Security

Your data is stored using Firebase, a secure cloud platform provided by Google. We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Regular security assessments
• Access controls limiting who can view your data

While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our primary data processing takes place in Ireland under GDPR safeguards. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

13. Children's Privacy

RiseWithin is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately so we can delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy in the App and updating the "Last updated" date. We encourage you to review this policy periodically.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Contact Form