Rise Consumer Health Data Privacy Policy
Last updated: 13 November 2026. Policy version: wfa-2026-11.
This policy is for people in the United States, including Washington under its My Health My Data Act and Nevada. It covers the consumer health data that Rise: Women’s Strength (“Rise”) collects and adds to our main Privacy Policy, which explains everything in more detail. Rise is developed by Josh Waller, trading as Kovus, in Perth, Western Australia. Contact support@risefit.com.au.
What we collect, and why
Most of what you record in Rise stays on your iPhone and never reaches us. We collect consumer health data only in these cases, each of which you turn on yourself:
| Consumer health data | When we collect it | Why |
|---|---|---|
| Your effort and discomfort answers for each set, with your workouts (including when you paused them), your training setup (goal, experience, schedule, coaching style, what gets in the way, exercise preferences and equipment) and plans | Only if you turn on training backup | To keep a backup copy you can restore on a reinstall or another iPhone |
| Private notes, including anything you write about your health | Only if you turn on private-notes backup | To keep a backup copy you can restore |
| The training records, notes and readiness check-in you choose to add to an AI request, and the words you send | Only if you turn on Text help and send a request | To give you the AI answer or suggestion you asked for |
| A meal photo you scan, any details you type with it, and the food estimate | Only if you turn on Food photo reading and scan a meal | To estimate the foods, portions and nutrition in the photo |
We don’t collect your life-context answer (such as pregnancy, postpartum or menopause), body metrics, food log, progress photos or Coach history. They stay on your iPhone. Crash reports are optional and designed to exclude health data.
Where it comes from
Directly from you, through the Rise app. We don’t buy consumer health data or collect it from other sources.
Who receives it
| Recipient | What it receives | Why |
|---|---|---|
| Supabase | Backed-up records and notes, and AI requests and meal photos while they’re processed | Hosts our server and database in Sydney, Australia |
| Anthropic | The content of text AI requests you send | Produces the AI answer or suggestion |
| Meal photos you scan, with any details you type | Produces the food estimate |
These are service providers that process the data for us. We don’t sell consumer health data, share it with anyone for their own purposes, or use it for advertising. We don’t share it with affiliates; we have none. We may disclose information if the law requires it.
Your consent
We collect and share consumer health data only for the purposes above, and only after you turn on the matching choice in Rise. Each choice starts off. You can withdraw consent at any time by turning it off in Settings › Cloud backup or Settings › Privacy and AI.
Your rights
You can:
- confirm and access the consumer health data we hold about you, and get the list of recipients above, by using Settings › Export data or emailing us;
- delete it, using Settings › Delete data or account or by emailing us. When you delete data from our server, it’s removed from our Supabase database; server backups keep a copy until they expire. We can’t recall AI request content already sent to Anthropic or Google. Each deletes it under the policy described in the Privacy Policy; and
- withdraw consent, as described above.
To make a request, email support@risefit.com.au. We may ask you to make or confirm the request from inside Rise so we can check it comes from the account holder. We’ll answer within 45 days. If we need longer, we’ll tell you why, and we’ll take no more than 45 more days.
Appeals. If we decline your request, you can appeal by replying to our answer. We’ll respond within 45 days and explain our decision. If your appeal is declined, you can contact the Attorney General of your state, such as the Washington State Attorney General.
How long we keep it
Backed-up records stay until you delete them, remove that category’s cloud copies, or delete your account. AI request content stays on our server for up to 24 hours, and a meal photo uploaded for a scan for up to 23 hours. The Privacy Policy gives every retention period, including copies held by Anthropic and Google and in server backups.
Changes
If this policy changes, we’ll publish the new version here with a new date.