Rising Drop

Privacy Policy

Last updated 31 August 2026 · Effective 31 August 2026

This policy explains what The Rising Drop (“the app”, “we”) collects, why, and what you can do about it. It covers the iOS app and the website at therisingdrop.com.

The app is operated by Rishabh Tyagi, an individual based in New Delhi, India, trading as The Rising Drop. That is the data controller for the purposes of this policy, and the data fiduciary for the purposes of India’s Digital Personal Data Protection Act.

The short version

We collect the least we can. There is no advertising, no analytics, no crash-reporting SDK, and no tracking across other apps or websites. We do not sell your data or share it with data brokers. What we keep is the account you sign in with and the record you write — and you can download all of it, or delete all of it, from inside the app.

What we collect

Account

• Sign in with Apple identifier — an opaque ID from Apple that tells us which account is yours. It is the only thing an account is keyed on.
• Email address — whatever Apple passes us, and only if Apple has verified it. If you chose “Hide My Email”, that is a private relay address and we never see your real one. It is used for one thing: sending a code if you forget your PIN.
• PIN — stored only as a one-way hash (scrypt, with a secret held outside the database). We cannot read it, and neither can anyone who obtains a copy of the database.
• Sessions — a hashed sign-in token, the device description your device sends, and when it was last used, so that you can sign out a device you no longer have.
• An Apple refresh token — stored encrypted, and used for exactly one purpose: telling Apple to revoke its link to this app when you delete your account, which Apple requires us to do.

Your record

• Daily marks, habit entries, panic-button presses and challenges — the dates and entries you create in the app, so they are on every device you sign in on and survive losing a phone.

Each entry is stored as a date and not a time of day: what we hold is that something was marked on the 14th, not that it was marked at 11:42pm. Like any database, the underlying rows do carry a technical timestamp of when they were created and last changed, which is used to sync your devices and for nothing else.

This is written by you and read by you. We do not use it to profile you, we do not use it to train anything, and nobody reads it except where you ask us to for support, or where the law requires it.

Purchases

Subscriptions are sold and processed by Apple through the App Store. We never receive your card number, billing address, or Apple ID password. Whether your subscription is active is checked on your own device against the App Store; it is not sent to us and we do not store it.

Diagnostics

The app contains no analytics SDK and no crash-reporting SDK. Nothing we ship measures what you tap, how long you stay, or which screens you open.

Apple provides app developers with anonymous, aggregated statistics of its own (installs, crashes, and similar) if you have turned on “Share With App Developers” in iOS Settings. That is collected by Apple, not by us, we cannot tie it to your account, and you can switch it off in Settings → Privacy & Security → Analytics & Improvements.

Our server keeps ordinary request logs, which include the IP address the request came from, the time, and the path. Sign-in tokens and PINs are stripped from these logs before they are written. They exist to debug faults and to spot abuse, and they are kept no longer than 30 days.

What we do not collect

• No location, contacts, photos, health data, or microphone access. The app asks for no permissions at all except Face ID or Touch ID, if you choose to turn it on — and that check happens entirely on your device.
• No advertising identifiers, and no tracking as the App Store defines it. We do not link your data to third-party data for advertising or measurement.
• No sale or sharing of personal information for cross-context behavioural advertising, ever, for any price.
• No name, no age, no gender, no profile photo, no address book.

Why we are allowed to hold it

Where the GDPR or UK GDPR applies:

• Your account — processed to perform the contract you enter into by using the app.
• Your record — the marks you log describe your sex life, which the GDPR treats as a special category of personal data needing a higher bar than a contract. We rely on your explicit consent, given by creating an account and logging entries after being shown this policy. You can withdraw it at any time by deleting your record or your account inside the app, and withdrawing it does not affect anything done before you did.
• Security data — session records and server logs, under our legitimate interest in keeping accounts safe.

You are never required to log anything to use the app, and nothing is inferred about you from what you do log.

Who else touches it

We use a small number of processors, each bound to handle the data only on our instructions:

• Apple — sign-in, App Store purchases, delivery of the app.
• Railway — application hosting and the PostgreSQL database, in the US East (Northern Virginia) region of the United States.
• Resend — sends the forgotten-PIN email, and nothing else. It receives your email address and the code; it never receives your record.
• Cloudflare — DNS, email routing for our contact address, and delivery of this website.

Your data is stored in the United States. Where it leaves the UK or EEA to get there, the transfer is covered by the UK International Data Transfer Addendum and the European Commission’s Standard Contractual Clauses, under each provider’s own data processing agreement.

How long we keep it

• While your account is open — your account and record are kept so the app works.
• After you delete your account — the account is marked deleted and every session ends immediately, so it is gone from your phone the moment you press the button. Everything belonging to it is then permanently erased 30 days later. Signing back in within those 30 days restores it; after that it cannot be recovered by us or by anyone.
• If you stop using the app — an account nobody has opened for 12 months is closed automatically, then permanently erased 30 days after that. Opening the app at any point resets the clock.
• Sessions — expire 365 days after you sign in, and end immediately if you sign out or revoke the device. Expired and revoked session records are deleted by a nightly job.
• “Have a look around” — the sample account is generated fresh, is never written to, and is discarded after 20 minutes. Nothing you tap in it is stored anywhere.
• Server logs — no longer than 30 days.

Getting a copy of your data

Open Profile → Your data → Export my record. You get a file containing your account details and every mark, habit entry, panic press and challenge we hold, which you can save or send anywhere. It is limited to one export an hour.

Deleting your account

Open Profile → Delete account. The app tells you exactly what goes before you confirm. You can also write to us at the address below and we will do it for you. Deleting the app from your phone alone does not delete the account.

Deleting your account does not cancel your subscription. Subscriptions belong to the App Store and must be cancelled there — see our Terms of Use.

Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, export it, object to or restrict processing, and — in the EEA or UK — complain to your data protection authority. Access, export and deletion are all built into the app and need no request. California residents have the rights to know, delete, correct, and to opt out of sale or sharing; we do not sell or share personal information, so there is nothing to opt out of. To exercise anything else, email the address below. We will respond within 30 days and will not treat you differently for asking.

Security

Traffic is encrypted in transit. PINs are stored as a peppered one-way hash and session tokens are stored hashed, never in the clear; the Apple refresh token is stored encrypted. A PIN locks out after repeated wrong attempts, so guessing four digits is not practical even for someone holding a stolen token. Access to production data is limited to the operator named at the top of this policy. No system is perfect, and we will tell affected users and any required regulator if a breach puts your data at risk.

Children

The app is rated 17+ on the App Store and is not intended for anyone under 17. We do not knowingly collect data from children. If you believe a child has an account, write to us and we will remove it.

Changes

If this policy changes in a way that matters, we will update the date at the top and — for material changes — tell you in the app before the change takes effect.

Contact

Questions, requests, or complaints: contact@therisingdrop.com. We answer every message that reaches it.

Rishabh Tyagi, New Delhi, India. This policy is governed by the laws of India.