Hinode Privacy Policy

Last updated: November 13, 2026

Hinode is designed so you can make progress with complete discretion. No account, no name, no email: we don’t need to know who you are to help you. This page explains, in plain words, what is stored, where, and why.

Who is responsible for your data

The Hinode app is published by Rising Labs (SASU), 61 rue de Lyon, 75012 Paris, France. For any question about your data: contact@rising-labs.app.

What stays only on your phone

As long as you don’t talk to Sam, none of this leaves your phone:

• your answers to the initial questionnaire (frequency, high-risk moments, what you want to get back);
• your reasons for quitting and your plans;
• your counter, milestones, calendar, daily moods, challenges and slips;
• the history of your conversations with Sam.

We have no access to it. If you delete the app, this information is deleted with it. If you message Sam, some of this information is sent to him so he can reply: the details are just below.

What is sent when you talk to Sam, the coach

To reply to you, Sam uses an artificial intelligence service. When you message him, we send:

• your latest messages in the conversation;
• a summary of your journey so he can give you a personal reply: number of days since your last slip, best streak, urges beaten, number of slips in the last 30 days, your reasons, your plans, your answers to the questionnaire (frequency, high-risk moments, what you want to get back), today’s mood and today’s challenges;
• your local time, the language of your phone and of the app, and the country set on your iPhone, so he can reply in your language and point you to the right emergency numbers;
• a random identifier created on your phone, which contains neither your name, nor your phone number, nor your email address;
• your proof of purchase signed by Apple (transaction identifier, product purchased, dates), to check that your access to Hinode is active. It contains neither your name, nor your email, nor your bank card.

These messages may contain information about your intimate life. That’s why we ask for your consent before the first message is sent. You can keep using everything else in Hinode without talking to Sam.

This data goes through two service providers:

• Supabase, which hosts our small server in Europe. It checks your proof of purchase and only keeps the number of messages sent per day, attached to a fingerprint of your purchase (a code that can’t be traced back to the purchase) or to your random identifier, along with the first 8 characters of that identifier. These counters are used to apply message limits (45 per day; 10 per day for a while after more than 500 messages in 30 days) and are deleted after 30 days. The content of your messages is not stored there.
• Anthropic, the company that provides Sam’s artificial intelligence, based in the United States. It receives your messages and the information listed above, except your random identifier and your proof of purchase. It processes your messages to generate a reply, does not use them to train its models, and only keeps them for a limited time (30 days at most as a general rule), unless required by law or if content is flagged for safety reasons. This transfer outside the European Union is covered by safeguards provided for by the GDPR, such as the European Commission’s standard contractual clauses.

Sam is not a doctor or a psychologist. If you are in danger, contact your country’s emergency services.

Payment and subscription

Subscriptions are handled entirely by Apple. We never see your bank card, your name or your Apple Account. When you message Sam, the app sends our server your proof of purchase signed by Apple, only to check that your access is active. To manage or cancel your subscription: iPhone Settings, then your name, then Subscriptions.

Face ID and notifications

The Face ID lock is handled by your iPhone: Hinode never sees your face or your passcode. Evening reminders and milestone celebrations are scheduled directly on your phone, without going through our servers.

What we don’t do

• No ads, no selling of data, no ad trackers.
• No analytics on how you use the app.
• No account, email or name required.

Why we process this data

• Conversations with Sam are based on your explicit consent, which you give before the first message and can withdraw at any time by no longer messaging him and deleting the conversation.
• The daily message limit and the check of your proof of purchase are based on our legitimate interest in protecting the service against abuse.

Your rights

Under the GDPR, you can ask to access, correct or delete your data, restrict its processing or object to it, by writing to contact@rising-labs.app. Since we don’t know who you are, you’ll need to give us the random identifier shown in the app’s Settings so we can find your counters. You can also file a complaint with the CNIL, the French data protection authority (cnil.fr), or with the data protection authority in your country.

Changes

If this policy changes, the new version will be published here with its update date. If there is a significant change, we will let you know in the app. If the language versions differ, the French version prevails.