RiseUp

Privacy Policy

Effective September 2026 · Soft Learn Hub for RiseUp

Privacy Policy — RiseUp: Habit & Streak Tracker

Effective date: 01/09/2026 Last updated: 01/09/2026

RiseUp — Habit & Streak Tracker (“RiseUp”, “the app”) is developed and published by Soft Learn Hub (“we”, “us”, “our”), based in Islamabad, Pakistan.

This policy explains what happens to your information when you use RiseUp. It applies to the Android application distributed through Google Play and to our support website at [https://riseup.softlearnhub.com].

1. The short version

  • RiseUp has no user accounts and no server of our own. We do not operate a database of users.
  • Everything you write — your streaks, journal entries, moods, triggers, notes and urge logs — is stored in an encrypted database on your device only.
  • We never receive, see, transmit or store your personal content. There is no infrastructure on our side that could hold it.
  • If you choose to turn on backup, an encrypted backup file is sent to your own Google Drive account, not to us.
  • The app shows advertisements through Google AdMob. Google, as our advertising partner, collects limited device and advertising data. This is the only routine data collection connected with the app, and you control it through the consent prompt and your device settings.

2. Information stored on your device

When you use RiseUp, the app creates and stores the following locally on your device:

Data Purpose

  • Habit names, icons and start dates – To calculate and display your streak
  • Relapse records (date, optional trigger, mood, note) – Streak history and personal insights
  • Journal entries (date, mood, energy, trigger tags, notes) – Your daily log and trend charts
  • Urge / SOS events (time, duration, tool used, outcome, intensity) – Your urge statistics
  • Milestone and achievement unlocks – To display your badges
  • App settings (theme, reminder time, app lock preference, unlocked items) – To run the app as you configured it

This data is held in a database that is encrypted at rest on your device. It is not transmitted to us, and it is not accessible to other apps.

We do not collect this data. We have no ability to read it, request it, or recover it for you.

3. Information we do not collect

RiseUp does not collect, request or transmit to us:

  • Your name, email address, phone number or any account credentials
  • Your contacts, photos, files, camera, microphone or precise location
  • The content of your journal entries, notes, habits, moods or relapse history
  • Health, medical or biometric records
  • Behavioural analytics on how you use the app

RiseUp contains no third-party analytics SDK. We do not track app usage.

4. Optional Google Drive backup

Backup is off by default. If you enable it:

  • What happens. The app asks you to sign in with a Google account and grant permission, then creates a folder in your own Google Drive (default name: “RiseUp Backups”). A single backup file containing your app data is uploaded to that folder on the schedule you choose (manual, daily, weekly or monthly).
  • Where it goes. The file is stored in your Google Drive, under your Google account, consuming your Drive storage quota. It is not sent to Soft Learn Hub, and we cannot access it.
  • Encryption. If you set a backup passphrase, the file is encrypted on your device before upload using AES-256-GCM with a key derived from your passphrase. In that case not even Google can read its contents. If you lose your passphrase, the backup cannot be recovered by anyone, including us.
  • Permissions requested. RiseUp requests only the https://www.googleapis.com/auth/drive.file scope. This scope grants access only to files the app itself creates. RiseUp cannot see, read, modify or delete any other file, folder or document in your Google Drive.
  • Limited Use disclosure. RiseUp’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, data obtained through Google APIs is used only to provide the backup and restore feature you requested; it is not transferred to others except as necessary to provide that feature, is not used for advertising, and is not read by humans.
  • Turning it off. You can disconnect your Google account at any time in Settings → Backup, which revokes the app’s access token. You can also revoke access from your Google Account permissions page, and you can delete backup files directly from Google Drive or from within the app.

5. Advertising (Google AdMob)

RiseUp displays advertisements supplied by Google AdMob. Ads appear only on secondary screens (statistics, badges, settings and lists) and in optional rewarded videos you choose to watch. No ads are shown on the streak counter or in the SOS / urge screens.

To serve ads, Google and its partners may collect and process:

  • Your device’s advertising identifier (AAID)
  • IP address and approximate (coarse, region-level) location derived from it
  • Device model, operating system version, language and similar technical attributes
  • Ad interaction data (impressions, clicks, whether a rewarded video was completed)

This processing is performed by Google as an independent controller under its own policies, not by us. We receive only aggregate, non-identifying revenue reports.

  • Google Privacy Policy: https://policies.google.com/privacy
  • How Google uses information from sites or apps that use its services: https://policies.google.com/technologies/partner-sites

Your control over ads.

  • Where required by law (including the EEA, the UK and Switzerland), RiseUp displays a consent prompt using Google’s User Messaging Platform before any personalised ads are requested. You may refuse consent and still use every feature of the app.
  • You can reset or delete your advertising ID at any time in Android Settings → Privacy → Ads.
  • Refusing personalised ads does not remove ads; it makes them non-personalised.

6. Permissions RiseUp requests

Permission Why Optional?

  • Internet / network state – Loading ads, and Google Drive backup if enabled – Required for ads
  • POST_NOTIFICATIONS (Android 13+) – Daily check-in and milestone reminders – Yes — decline and the app still works
  • AD_ID – Serving ads via AdMob – Governed by your consent and device ad settings
  • Biometric – Optional app lock (fingerprint / face unlock) – Yes
  • RECEIVE_BOOT_COMPLETED – Restoring your reminder schedule after a device restart – Only if reminders are on

RiseUp does not request contacts, storage, camera, microphone, SMS, call logs, or location permissions.

7. Children

RiseUp is not directed to children. You must be at least 16 years old (or the minimum age of digital consent in your country, whichever is higher) to use the app. We do not knowingly collect personal information from children. If you believe a child has used the app in a way that involves us holding their data, contact us at contact@softlearnhub.com — though note that in ordinary use we hold no user data at all.

8. Data retention and deletion

  • On-device data stays on your device until you delete individual entries, use Settings → Delete all data, or uninstall the app. Uninstalling RiseUp permanently deletes all app data on that device.
  • Backup files stay in your Google Drive until you delete them, either from within RiseUp or directly in Drive. The app also automatically removes older backups once your chosen retention limit is exceeded.
  • We hold nothing to delete. Because there are no accounts and no server, there is no account for us to close and no user record for us to erase. If you email us for support, we retain that correspondence for as long as needed to answer you.

9. Your rights

Depending on where you live, you may have rights under the GDPR, the UK GDPR, the CCPA/CPRA, or similar laws — including rights of access, correction, deletion, portability, and objection to processing.

Because your data never leaves your device unless you send it to your own Drive, you exercise most of these rights directly inside the app: you can view, edit, export and delete everything yourself, at any time, without asking us.

For the advertising data described in Section 5, the controller is Google; requests about that data should be directed to Google, or you can prevent the processing by declining consent and resetting your advertising ID.

We do not sell or share personal information, as those terms are defined under the CCPA/CPRA.

For anything else, contact contact@softlearnhub.com

10. Security

  • The on-device database is encrypted at rest.
  • The optional app lock supports a PIN and biometric unlock.
  • Sensitive screens are protected against screenshots and hidden from the recent-apps preview.
  • Backup files can be encrypted with your own passphrase before they leave the device.
  • All network communication uses HTTPS/TLS.

No system is perfectly secure, and the security of your device itself — screen lock, malware, physical access, and who else uses your phone — is outside our control.

11. International transfers

We do not transfer your personal content anywhere, because we never receive it. Data processed by Google for advertising and, if you enable it, Google Drive, may be processed on servers in other countries under Google’s own safeguards and policies.

12. Third-party services

Service – Provider – Role – Policy

Google AdMob – Google LLC – Advertising – Privacy

Google User Messaging Platform – Google LLC – Consent management – Privacy

Google Drive API – Google LLC – Optional backup to your own account – Privacy

Google Play Services – Google LLC – App distribution and platform services – Privacy

13. Changes to this policy

We may update this policy as the app changes. The revised version will be posted at this URL with a new “Last updated” date. Material changes — for example, if we ever began collecting data we do not collect today — will be announced inside the app before they take effect. Continuing to use RiseUp after a change means you accept the updated policy.

14. Contact

Email: contact@softlearnhub.com Website: https://softlearnhub.com

We aim to respond to privacy enquiries within 30 days.