Privacy Policy

Last updated: October 10, 2026 · Effective: October 10, 2026

Who we are

LateRiser is provided by Spring Valley Group Limited, a company incorporated in Hong Kong ("we," "us," "our"). Contact: info@lateriser.app.

What this app is for

LateRiser lets a group of people who know each other write down rules they agree to, log when a rule is triggered, and settle it in a lighthearted way. The app never handles real money — the consequences in each rule are settled between members outside the app.

Information we collect

You provide directly:

  • Email address — used to sign you in via a one-time code (OTP) or a password if you set one, and to identify your account.
  • Display name and avatar — shown to other members of groups you join.
  • Names of people you add to a group — a host can add members by first name before they join, and record their votes for them. These names are visible to that group only, and are replaced by the person's own account once they join.
  • Reports — if you report a member or a log entry, the report and its context are sent privately to our support team. It is never shown to the group.
  • Content you create — group names, rules, log entries, votes, and any other text you enter into the app. This is visible to other members of the groups you're part of.

Collected automatically:

  • Push notification token — a device-specific identifier that lets us deliver notifications (e.g. "a rule needs your agreement," "a rule was logged against you"). Generated by Apple's push notification service and Expo's push relay; you can disable notifications in your device settings at any time. Stored together with your device's time zone, so notifications and dates show at the right local time.
  • A local on-device preference flag for whether you've turned on biometric (Face ID / Touch ID / fingerprint) login. We do not collect, see, or store your actual biometric data — Face ID/Touch ID matching happens entirely within your device's operating system; the app only ever sees a yes/no success result.
  • Product usage analytics, via PostHog (see the provider table below). This covers which screens you open and a small set of in-app actions (for example: creating a group, setting a rule, casting a dispute vote), together with standard technical context your device reports (app version, operating-system version, device model, language/region, and an approximate location derived from your IP address). Events are tied to your account identifier so we can understand real usage patterns. We do not enable session replay (screen recording), and this analytics never uses Apple's advertising identifier (IDFA) or any cross-app tracking. We use this data only to improve the app and inform our own product and pricing decisions — it is not sold, shared with advertisers, or given to data brokers.

What we do not collect: payment card details (the app currently has no paid features; if paid subscriptions are offered in future, payments are handled by Apple directly and we never receive or store your card details, photos or camera data (the app has no photo-upload feature), precise location, contacts, or any data from third-party accounts.

How we use your information

  • To operate your account and let you sign in (email + one-time code).
  • To show you and your group members the content you've created within shared groups.
  • To send push notifications about activity relevant to you.
  • To understand how the app is used, so we can improve it and make product and pricing decisions (product usage analytics — see below).
  • To manage paid subscriptions, if and when they are offered (processed by Apple and RevenueCat). The app is currently free, with no in-app purchases.
  • To maintain the security and integrity of the service (e.g. preventing abuse).

We do not sell your data, use it for third-party advertising, or share it with data brokers.

Who we share information with

We use a small number of service providers to run the app. Each only receives the minimum data needed to perform its function:

  • Supabase — database, authentication, hosting. Receives: account/email, group content. Region: Singapore.
  • Resend — delivers the sign-in email code. Receives: email address, sent from our domain. Region: Tokyo.
  • Expo (exp.host) — delivers push notifications. Receives: push token, notification text.
  • PostHog — product usage analytics. Receives: account identifier, in-app events, device/app technical context, approximate IP-based location. Region: United States.
  • RevenueCat — Subscription management (no paid features are currently offered). Receives: Your account identifier, and subscription status or purchase history for LateRiser if any. Never your payment card details, which Apple handles directly. Region: United States.

Crash-reporting tools are not integrated as of this writing; this policy will be updated first if that changes.

We may also disclose information if required by law, or to protect the rights, safety, or property of our users or the public.

Data retention

We keep your account and group data for as long as your account exists.

If you leave a group, your past contributions to that group (rules you proposed, log entries, votes cast) stay visible to the remaining members against a "left the group" placeholder — this keeps the group's shared history intact, the same way leaving a shared document or group chat works.

If you delete your account:

  • Your profile (display name, avatar) and your login record are permanently deleted.
  • Every group you host is deleted in full, along with its rules and log entries.
  • In groups you had only joined, you are removed as a member.
  • Log entries recorded against you, and votes you cast on disputes, are deleted.
  • Rules you proposed, and log entries you recorded about other people, that still sit in another member's active group are kept but stripped of your identity — they appear only as "a member". We do this so the rest of that group's shared record stays coherent for the people still in it.

We complete deletion from our active systems promptly, normally within a few days. Backup copies age out on our providers' standard rotation.

Your rights

You can delete your account and associated personal data yourself from within the app (Settings → Manage account → Delete my account), or by emailing info@lateriser.app. See "Data retention" above for exactly what deletion removes and what stays visible to other group members in anonymized form. You can also request a copy of your data by email. Depending on your location, you may have additional rights under local law (e.g. GDPR if you're in the EU/UK) — contact us and we'll do our best to accommodate applicable requirements.

Children's privacy

LateRiser is not directed at, and should not be used by, anyone under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us information, contact info@lateriser.app and we will delete it.

International data transfers

We're a Hong Kong company; our service providers host data in Singapore, Tokyo, and the United States. If you use the app from elsewhere (including the EU or UK), your information will be transferred to and processed in these locations.

Changes to this policy

We may update this policy as the app changes (e.g. when new features or service providers are added). We'll update the "Last updated" date above; material changes will be flagged in-app.

Contact

Questions about this policy: info@lateriser.app.