NINETYRISEPrivacy Policy – NinetyRise
Effective from: 1 November 2026
1. Who processes your data
Controller: Dávid Klieščik, Dolný Smokovec 12, 059 81 Dolný Smokovec, Slovakia
Privacy contact: support@ninetyrise.com
NinetyRise ("the app") helps you build habits, complete 90-day challenges and track your progress. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR).
2. What we process and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Email, password if you set one (stored only as a secure hash), name/nickname, language, time zone, age and consent confirmations; with Sign in with Apple or Google, the account identifier, email (Apple may give us a private relay address) and first name that Apple or Google shares | creating and managing your account, signing in, sign-in codes and recovery emails | performance of a contract (Art. 6(1)(b)) |
| Habits, plans, check-offs, 90-day challenges, rewards, small wins, tasks, ideas and categories, deep work sessions, weekly reviews, reminder settings, social media numbers you enter yourself | providing the app's features and syncing between your devices | performance of a contract (Art. 6(1)(b)) |
| Health data: weight, body measurements, weight goal, body progress photos | tracking physical progress (Fitness) | your explicit consent (Art. 9(2)(a)), given in the app before the first entry |
| Screenshots of social media statistics you upload | storing them with your entries | performance of a contract |
| Technical data needed to run the service (e.g. IP address in server logs, sign-in time) | security and operation | legitimate interest (Art. 6(1)(f)) |
| Subscription data (status, period, purchase identifier) – payments are handled by Apple; we never see your card details | providing the paid version | performance of a contract |
What we don't do: no ads, no third-party analytics or tracking tools, no selling of data and no marketing profiles.
Dictating ideas
"Hold to speak" transcribes speech on your phone when your iPhone supports it; otherwise Apple's speech recognition service transcribes it under Apple's terms. We do not store audio – only the resulting text of the idea.
AI coach and AI analysis
The app has no AI of its own. If you choose to, it prepares a message (for example a summary of your numbers or a photo collage) and you send it through the system share sheet to an app of your choice (e.g. ChatGPT, Claude, Gemini). That sharing is your action and further processing is governed by that service's terms. Nothing is sent without your action.
Reminders and timer
Reminders and the end-of-session alert are local notifications on your phone; no push token is sent to our servers.
3. Who has access (processors)
- Supabase (database, sign-in, file storage) – data is stored in a data centre in the EU (Frankfurt, Germany). Supabase, Inc. is a US company; any transfer outside the EU is covered by the EU Standard Contractual Clauses.
- Brevo (Sendinblue SAS, France) – sending emails with verification codes.
- Apple – app distribution, Sign in with Apple, subscription payments, speech recognition as described above.
- Google – only if you choose "Continue with Google": confirms your Google account and shares your email and name with us.
- RevenueCat, Inc. (USA) – managing subscription status (user identifier and purchase data, no name or email); transfers based on the EU Standard Contractual Clauses.
Each processor handles data only on our instructions under a data processing agreement.
4. How long we keep data
As long as you have an account. You can delete your account at any time in the app (Profile → Settings → Account and data → Delete account); all your data, including photos and files, is then permanently deleted immediately. The database provider's backups may still contain data for a limited time until they are overwritten automatically. If you withdraw consent to health data processing, all your health data and body photos are deleted.
5. Security
All traffic is encrypted (HTTPS). At database level each user can access only their own data (Row Level Security). Photos are kept in private storage and shown only through time-limited links.
6. Your rights
You have the right of access, rectification, erasure, restriction, data portability (download all your data as a JSON file in the app: Account and data → Export data), to object to processing based on legitimate interest, and to withdraw consent at any time (without affecting processing before the withdrawal). Send requests to support@ninetyrise.com; we reply within one month.
You may also lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (www.dataprotection.gov.sk) or the supervisory authority where you live.
7. Age
The app is intended for people aged 16 and over; you confirm your age when signing up.
8. Changes
We will inform you of material changes in the app. The current version is always available at https://ninetyrise.com/privacy.