Privacy Policy

1. Scope of this policy

This policy covers services operated by Courage & Rise Co LLC. The Courageous Rise is our public-facing brand. Services purchased from independent practitioners, laboratories, retailers, or other providers may be governed by their own privacy notices. This policy does not replace a separate clinical privacy notice or consent document that applies to a particular service.

2. Information you provide

Depending on the services you use, we may receive:

• Contact details, including your name, email, telephone number, and mailing address.
• Registration and account details, program enrollment, access approvals, profile identifiers, appointments, and support requests.
• Health and wellness information you choose to provide, such as health history, laboratory information, weight, measurements, meals, hydration, bowel habits, symptoms, reflections, goals, and journal entries.
• Community posts, messages, questions, and resources you share.
• Purchase and billing information, such as transaction status and billing details. Payment providers process payment credentials under their own notices.

Please avoid submitting detailed health information through general website contact forms. Use the designated program or clinical channel for that information.

3. Information collected through technology

Our website and service providers may receive IP addresses, device and browser details, access times, referring pages, and information about interactions with pages or emails. Email services may report message delivery, opens, or link clicks. Cookies and similar technologies may support login, security, preferences, embedded content, and service operation.

The app may use browser or device storage to keep settings, connection information, and entries. Local storage is different from a cloud backup: information saved only on one device may not be available on another.

4. How we use information

• Provide programs, appointments, community access, app features, and requested resources.
• Check whether an email address is approved for app access and send instructions to that address.
• Support coaching and respond to questions, using information shared for those purposes.
• Operate cloud sync and recovery features, maintain accounts, and troubleshoot errors.
• Process purchases, manage enrollment, and maintain business records.
• Send requested webinar information and program communications, and marketing communications subject to applicable consent and opt-out requirements.
• Maintain security, prevent misuse, comply with legal obligations, and improve our services.

5. RISE Daily: encryption, backups, and sharing

Private cloud backups. The app encrypts private backup records on your device before uploading them, using AES-256-GCM. The app decrypts those backups on your device using a key derived from your original private recovery code. The recovery code is not included in the app’s database requests. Your private sync key is a separate credential that is transmitted to authenticate database requests.

Your sharing choices. Coach sharing is separate from private cloud backup. In Settings, you can review and change tracking-data sharing and written-note sharing for the supported tracker groups. Written journal reflections and win stories count as notes. Enabling tracking-data sharing does not, by itself, enable the separate notes option. Review the descriptions beside each choice to see which fields are included.

Readable shared copies. When you enable a sharing option and successfully sync, the app sends the selected fields as separate coach-readable copies alongside the encrypted backup. Those copies are intended for Carrie and Jennifer and are processed by authorized personnel and providers needed to operate that feature. The private-backup encryption does not make selected shared fields unreadable to those recipients.

Changing or stopping sharing. Save your sharing choices in Settings and complete Sync All to publish newly enabled sharing. The “Stop all coach sharing” control submits a request to remove current coach-readable copies while preserving encrypted backups. Confirm that the app reports success. This cannot retract information already viewed, copied, exported, or retained as part of a required record. Contact us if you need help with previously shared information.

Information that stays outside coach projections. In the app’s sharing design, calculator targets, recipes, and configuration are excluded from coach-readable copies. Detailed individual bowel-log entries embedded in Daily Data are also excluded; the daily digestion summary and separately selected written bowel notes may be shared. Earlier standalone bowel records have their own sharing choices. Consult the current Settings descriptions for the fields associated with your version.

Local storage and downloads. This cloud-backup encryption does not encrypt entries or saved connection and recovery information in your browser’s local storage. A downloaded device-backup file contains readable saved information and is not encrypted by the export feature. Keep your devices, recovery code, sync credentials, and backup files private. Anyone with access to an unlocked device, its stored credentials, or a readable backup may be able to access information.

Metadata and recovery. Encryption of record contents does not hide all metadata. Profile and record identifiers, tracker names, revisions, sharing choices, timestamps, and technical request information may remain available for service operation. Your original recovery code is needed to decrypt private backups on another device. If both the code and accessible local copies are lost, we may be unable to recover those private records.

Information you send directly to a coach, submit through another service, or post in the community is governed by that channel; app sharing settings do not control it. We do not use individual app health entries or journal content for behavioral advertising.

6. Providers and other disclosures

We use external services to operate the business. These include Systeme.io for website, email, contact, and community functions; SwiftSpeed for app delivery; Google services for applicable app database and sync functions; TidyCal for scheduling; and FormSubmit when the website contact form uses that service. Payment, laboratory, and other providers may also process information needed for the service you request.

Providers receive information relevant to their functions. Some act on our behalf; others, such as an independent retailer, operate their own services under their own privacy notices. We do not sell or rent your contact information or health tracking entries.

We may disclose information when legally required, to respond to lawful process, investigate fraud or security incidents, protect rights or safety, or facilitate a business transition subject to applicable law and appropriate privacy protections. Information shared at your direction is disclosed according to that request.

7. Community participation and recordings

Posts and profile information may be visible to other members and administrators according to the community’s access settings. Membership restrictions do not guarantee confidentiality: other people may save or repeat information they see. Share only what you are comfortable disclosing.

If a session or webinar will be recorded, we will provide notice and obtain consent where required. We will seek separate permission before using identifiable client stories, private messages, health details, or testimonials in public marketing.

8. External links and affiliate purchases

Our resource pages link to third-party retailers, supplement platforms, and service providers. Clicking a link or completing a purchase may allow that provider to receive information directly from you or your browser. Affiliate links may use tracking technologies to attribute a referral. Review the provider’s privacy policy before submitting information.

9. Email and communication choices

You can unsubscribe from marketing emails using the link provided or by contacting us. We may continue sending necessary account, purchase, access, or program messages, subject to applicable law. Requesting one resource does not give unlimited permission for unrelated marketing.

General email is not a secure clinical messaging channel. Please do not email full payment credentials or detailed medical records unless we have arranged an appropriate method.

10. Cookies, analytics, and future tracking

We do not currently use Google Analytics, Meta/Facebook advertising pixels, or other optional advertising or audience-measurement trackers on our website. This does not mean that our services use no cookies or collect no technical information: hosting, email delivery, login, scheduling, security, embedded features, app storage, and independent affiliate sites may involve their own technologies as described elsewhere in this policy.

We may introduce analytics or advertising technologies in the future. Before doing so, we will update this policy to identify the relevant purposes and providers, provide appropriate notice and choices, and obtain consent where required. Reserving this possibility does not authorize undisclosed tracking or waive any consent, opt-out, or other privacy rights. We will not use that change to repurpose previously collected sensitive app information for behavioral advertising.

You can manage cookies and local storage through your browser settings. Blocking or clearing them may affect login, app connections, preferences, and saved entries. Use available backup and recovery options before clearing app storage.

11. Retention and security

Retention depends on the information’s purpose, the duration of your relationship with us, applicable recordkeeping obligations, and legitimate needs such as security, accounting, or resolving disputes. Information may remain in protected backups for a limited period after removal from active systems.

We use reasonable safeguards appropriate to the information and services involved. No online system can guarantee absolute security or uninterrupted access. Keep your access credentials and recovery information private, and tell us promptly about suspected unauthorized access.

Deleting an app icon or unsubscribing from email does not, by itself, delete information held by us or our providers.

12. Privacy requests and legal rights

Contact us to request access to, correction of, or deletion of information associated with you, or to withdraw an optional consent. Depending on your location and applicable law, you may have additional rights, including restrictions on processing, portability, certain opt-outs, or an appeal of a denied request.

We may need to verify your identity without collecting unnecessary information. Some requests are subject to legal exceptions, including required record retention. Where applicable, an authorized agent may make a request using suitable proof of authority. We will explain the outcome and applicable next steps.

You may also contact the relevant privacy regulator where that right applies. We will not penalize you for exercising legally protected privacy rights.

13. Children and international access

Our website and app are not directed to children under 13, and we do not knowingly collect their personal information through these services. Anyone under 18 must have an appropriate parent or guardian arrangement approved by us before enrolling or creating an account. Contact us if a child’s information has been submitted without authorization.

We operate in the United States. Providers may process information in the United States or other countries. International processing remains subject to applicable legal requirements and safeguards; accessing the site does not waive your privacy rights.

14. Policy changes

We will update the date when this policy changes and provide additional notice or obtain consent when legally required. Changes do not automatically authorize a materially different use of previously collected sensitive information.