The shape of the promise
RiseHush has no account system. There is nothing to sign up for, which means there is nothing to breach, sell, or subpoena. Your library, streaks, favorites, and themes live in local on-device storage — an App Group container shared between the app, its widgets, and your Watch.
When the app writes new lines with Apple's Foundation Models, the writing happens on the device. The prompt never travels. This isn't a toggle we enabled; it's the architecture Apple built and the only architecture we accepted.
The honest exceptions
Two features touch the network, and both are opt-in. If you enable Online Images, RiseHush requests photography from Unsplash — off by default, clearly labeled, and disabled again the moment you say so. And if you write to support through this website, we receive exactly what you typed and nothing else.
Our App Store privacy label reflects this honestly. We will never claim “Data Not Collected” while any optional service can be switched on — honesty about the edges is what makes the center trustworthy.
Analytics, after consent
This website uses Google Analytics only after you explicitly allow it, with advertising signals disabled. Decline, and no analytics script even loads. The app itself carries no third-party analytics at all — no third-party runtime SDKs, full stop.