Privacy Policy

Last updated: June 2025

Rise & Shift ("we", "our", or "us") operates the Tapestry mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect information when you use our App.

1. Our core principle: local-first

Tapestry is designed to keep your personal data on your device. Your vision board items, goals, affirmations, and preferences are stored in your phone's private local storage and are never transmitted to our servers. We do not operate a backend database of user content.

2. Information we do not collect

We do not collect, store, or process:

  • Your name or email address
  • Your vision board content, photos, or goals
  • Your affirmations (custom or otherwise)
  • Your notification preferences
  • Your location

No account or registration is required to use Tapestry.

3. Third-party services

While we do not collect personal data ourselves, certain third-party services used by the App may process limited data:

3.1 RevenueCat (subscription management)

If you purchase Tapestry Plus, your subscription is managed by RevenueCat. RevenueCat processes transaction data to verify and manage your subscription. This is handled via your App Store (Apple) or Google Play account. RevenueCat does not receive your vision board content. Please review RevenueCat's Privacy Policy for details.

3.2 Apple App Store / Google Play

When you download the App or make a purchase, Apple or Google processes your payment information under their own privacy policies. We receive only an anonymised receipt to verify your purchase status.

3.3 Expo (push notifications)

Tapestry uses Expo to schedule local notifications on your device. Notifications are scheduled locally; they do not pass through our servers. If you grant notification permissions, a push token may be generated by the Expo platform. Please review Expo's Privacy Policy.

4. Permissions we request

  • Camera & Photos: To let you add images to your vision board. Images are stored locally on your device only.
  • Microphone: Required for voice affirmation input (Tapestry Plus). Audio is processed on-device; recordings are not stored or sent to us.
  • Speech recognition: Used on-device to transcribe voice input for affirmations. No audio or transcription is sent to our servers.
  • Notifications: To deliver your daily affirmation and weekly check-in reminders. Notifications are scheduled locally.

5. Children's privacy

Tapestry is not directed at children under the age of 13 (or under 16 in the UK/EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

6. Data retention & deletion

All your data is stored locally on your device. To delete all your data, simply uninstall the App. Uninstalling removes all locally stored data permanently.

Subscription records held by RevenueCat or your app store provider are subject to their respective retention policies.

7. Your rights

Under UK GDPR, you have rights including the right to access, correct, or delete personal data held about you. Since Tapestry stores data only on your device and we hold no personal data on our servers, you can exercise most rights directly by managing or deleting the App.

For any questions about subscription data held by RevenueCat or your app store provider, please contact those providers directly. For anything else, contact us at the address below.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related enquiries, please email: privacy@riseandshift.co.uk

Rise & Shift, United Kingdom.