Privacy policy

The Rizen app runs without an account and keeps your data on your phone. This website is more ordinary: it uses analytics to see what works, ad measurement to know which ads paid off, and a payment processor to take money. This page lists exactly what that means. We don't sell your data.

The website and app are run by Resonance Logic, LLC. For anything privacy-related, email alarm@rizenhq.com.

There's no account to create, and your alarms, settings, streaks, and history live on your phone only: no cloud, no sync. When the camera counts your reps, the video is processed on the device using Apple's on-device body-pose detection; no frame, no video, and no joint position is saved or sent anywhere. The one thing the app does send is anonymous product analytics (no advertising ID, no name), and you can switch that off with one tap in Settings ▸ Privacy. Deleting the app deletes all its data.

• Usage analytics.We use PostHog to record page views and the events we chose to track, like which quiz step you reached or which button you tapped. It tells us where people get stuck; it isn't a profile of you across the web.
• Quiz answers.Your answers on the /start quiz are saved in your own browser, so a refresh doesn't lose your place, and they're included in those analytics events and attached to your purchase record if you buy.
• If you give us your email at the end of the quiz. Then your answers are also stored on our server alongside that address – including which medication you picked – so the plan we email you is your actual plan and not a generic one. That email contains a link that reopens your plan on any device, which is why the answers have to leave your browser to make it work. We don't send those answers to advertisers; the ad measurement below is deliberately built without them. Every one of those emails has an unsubscribe link, and unsubscribing stops them immediately. If you skip the email step, none of this happens.
• Checkout. Payments are handled by RevenueCat and its payment partners. Your card number goes to them, not to us; we receive the transaction record and the email you gave at checkout, which we use for your receipt and your app access link.
• Ad measurement.We run ads on Reddit, so the quiz uses Reddit's pixel, and after a purchase our server reports the conversion to Reddit with your email and customer id in SHA-256-hashed form, plus the amount and a transaction id. That's how Reddit learns which ads led to real customers. If your browser sends the Global Privacy Control signal, the pixel is skipped entirely.
• Ad measurement on Facebook and Instagram. We run ads there too, but we load none of Meta's code on this site — there is no Meta pixel here. Instead our own server tells Meta when a few milestones happen: you opened the quiz, you finished it, you opened checkout, you bought. It sends the click id from the ad link you arrived on, a browser id we generate ourselves, your IP address, your browser user agent, and an anonymous id for your browser in SHA-256-hashed form. If you buy, it also sends your email in hashed form and the amount; the amount goes with opening checkout too. It does not send your quiz answers, and it does not send which version of the quiz you took, so nothing we report to Meta says anything about your health or your medication. The page address we report is trimmed to the plain page name with the query string removed. If your browser sends the Global Privacy Control signal we report nothing to Meta at all, including your purchase.
• Forms. If you apply on the creators page or join the Android waitlist, what you type in the form is stored in our database (hosted on Supabase) so we can get back to you.
• Hosting. The site runs on Vercel, which keeps standard short-lived server logs (IP address, user agent, timestamps) to serve pages and fend off abuse.

The quiz stores its state in localStorage: your answers, your place in the quiz, which price variant you were shown, an anonymous customer id for the checkout, a browser id we generate for Meta ad measurement, and the ad-click tags from the link you arrived on (the utm parameters, the Reddit click id, the Meta click id, and the landing URL). Clearing your browser data for this site wipes all of it. PostHog and the Reddit pixel set their own cookies or storage for the purposes above.

• Purchase and billing records: as long as tax law makes us, then deleted.
• Analytics events: kept while they're useful for understanding the product, and not tied to your name; we never enrich them with data bought elsewhere.
• Creator applications and waitlist signups: until we've answered or launched, or until you ask us to delete yours.

Email alarm@rizenhq.comand we will show you what we have on you, correct it, or delete it, whichever you ask for. If you're in the EEA, the UK, or a US state with a privacy law, you likely have these as formal rights; we honor them for everyone regardless, because it's a short list and it's your data.

This site isn't aimed at children, and you have to be 18 to buy a subscription. If we learn we've collected a child's data, we'll delete it.

If this policy changes in a way that matters, the date at the top changes with it, and anything significant gets announced before it takes effect.