Legal
Privacy Policy
This policy explains what data Uprise collects, why, where it is stored, how long we keep it and the choices you have. In short: we collect only what Uprise needs to work, we never sell your data, analytics run only if you accept them, and you can export or delete everything from your account page.
Who we are
Uprise (uprise.aitoolskey.com) is a free productivity web app operated by AI Tools Key, run by Aaj Rumman in Bangladesh (“we”, “us”). Contact: uprise@aitoolskey.com or the contact form.
What we collect
Your account
- Email address, name, and — if you use email sign-in — a securely hashed password (we never see or store the password itself).
- If you sign in with Google: your name, email address, profile picture and your Google account ID, sent to us by Google when you choose to sign in.
- Settings you choose: time zone, whether prayer features are on, your plan (free) and role.
- When your account was created and when you last used Uprise.
The data you put into Uprise
Tasks, notes, habits, goals, alarms, countdowns, prayer records, reflections, settings and your activity history. They are saved on your device, and — when you are signed in — copied to our server so they can sync between your devices (up to 5 MB per account). We do not read your data except when you ask us for help with a specific problem, and we do not use it for advertising.
Contact messages
When you use the contact form: your name, email, topic and message, plus a one-way hash of your IP address and your browser type to block spam.
Security and error logs
To protect accounts we count sign-in attempts per IP address and email (stored as one-way hashes) and record technical errors (the page address and, if signed in, your user ID).
Analytics — only with your consent
If you click “Accept” in the cookie banner, we use Google Analytics 4 to count page views and anonymous feature use (for example “a focus session was completed”). We never send your name, email, tasks, notes or any other content. If you reject or do nothing, Google Analytics is not loaded at all.
Weather
The weather card is optional. When you search for a city, the city name is sent to Open-Meteo to find it, and that place’s approximate coordinates are then used to fetch the forecast. We do not use your device’s GPS.
Notifications while Uprise is closed — optional
If you turn on Settings → Notifications on a device, your browser gives us a push address for that device (a web address at your browser maker’s push service — Google, Apple or Mozilla — plus encryption keys). The app then sends us your reminders for the next 48 hours: the time, and the text the notification shows (for example the alarm label, the prayer name, the task text or the countdown name). At the right moment our server sends that text, encrypted, through your browser maker’s push service to your device. Turning notifications off or signing out on a device removes its push address.
Quick-link icons
To show icons for your quick links, Uprise asks Google’s public favicon service for the icon of each linked website. This request includes the website’s domain and, like any web request, your IP address.
Why we use it (legal bases)
- To provide Uprise — sign-in, sync, reminders, emails you ask for (account confirmation, password reset). This is necessary to perform our agreement with you.
- To keep Uprise safe — rate limits and error logs. This is our legitimate interest in security.
- To improve Uprise — analytics, only with your consent, which you can withdraw at any time.
- To answer you — contact messages.
Where your data is stored
Our servers and email are hosted by Hostinger in the United States. Your app data is also stored in your browser’s local storage on each device you use. Google (sign-in, analytics if accepted) and Open-Meteo (weather, if used) process the data described above under their own privacy policies.
How long we keep it
- Account and synced data: until you delete your account. Deleting it removes the account and all synced data from our database immediately. Copies in our host’s server backups are overwritten within about 30 days.
- Activity history: the app keeps the last 400 days.
- Notification reminders: deleted 2 days after they are sent (or skipped). A device’s push address is kept until you turn notifications off, sign out on that device, or the push service reports it is no longer valid.
- Contact messages: up to 2 years, then deleted.
- Security and error logs: up to 90 days.
- Analytics: under Google Analytics retention settings (14 months).
Your rights and choices
- Access and export: “Export my data” on your account page downloads everything as a JSON file.
- Correct: change your name, password, time zone and settings on your account page.
- Delete: “Delete my account” on your account page deletes your account and synced data. On sign-out you can also remove your data from that device.
- Withdraw consent: open “Cookie settings” in the footer and turn analytics off.
- Ask or complain: email uprise@aitoolskey.com. If you live in the EU/EEA or UK you may also contact your local data protection authority.
We do not sell or rent your personal data, and Uprise shows no ads.
Cookies and local storage
- uprise_sid (necessary) — keeps you signed in during a visit; deleted when you close the browser.
- uprise_remember (necessary, only if you choose “Keep me signed in”) — signs you in again for up to 30 days.
- Local storage “uprise:v1:…” (necessary) — your app data, theme and cookie choice on this device.
- _ga, _ga_* (analytics, only after you accept) — Google Analytics, up to 2 years.
- Google sign-in — when you use “Sign in with Google”, Google may set its own cookies on its sign-in domain.
Security
Connections use HTTPS. Passwords are hashed, sign-in links and remember-me tokens are stored only as hashes, every change request is protected against cross-site forgery, and sign-in attempts are rate limited. No system is perfectly secure, so please use a strong, unique password.
Children
Uprise is not meant for children under 13 (or under 16 where local law requires a higher age). If you believe a child has created an account, contact us and we will delete it.
Changes to this policy
We will update this page when our practices change and show the new date below. For important changes we will also tell signed-in users in the app or by email.
This policy was last updated on .