top of page

Privacy Policy — How Caterpillar Rising looks after your data

Last updated: 26 October 2026 · This policy applies to the Caterpillar Rising mobile app and website (the "App"), operated by Caterpillar Rising.

In short

Caterpillar Rising is a wellbeing companion that helps you log your mood, symptoms, cycle, journal, gratitude and goals. You need an account to use it. Your health and wellbeing entries are private to you, are never sold, and are never used to train advertising profiles. You can delete everything at any time from Settings.

1. Who is responsible for your data

The "controller" responsible for your personal data under the UK GDPR is Rising Education and Wellbeing Ltd, trading as Caterpillar Rising ("Caterpillar Rising", "we", "us").

For any privacy question, access, correction or deletion request, contact us at hello@caterpillar-rising.com.

Rising Education and Wellbeing Ltd is a company registered in England and Wales, company number 16970531, whose registered office is at 22 Oakington, Welwyn Garden City, AL7 2PS.

2. Account and sign-in methods

You must register to use the App. When you create an account we collect your email address and a password (which is hashed by our platform and never stored in plain text). To verify your email we send a six-digit code valid for ten minutes.

You can sign in using any of the methods enabled for the App:

  • Email and password

  • Google

  • Microsoft

  • Facebook

  • Apple

When you use a social sign-in, the provider shares the basic profile information needed to create or sign in to your account (typically your name and email address). We do not receive your password or your social-feed activity. You can enable or disable each of these methods from Settings → Authentication in your Base44 dashboard; this policy lists the five you have switched on.

3. What information we collect

Information you give us when you register

  • Email address

  • First name / full name, if you choose to provide it (used to personalise reminder emails)

  • Account role (admin or user) and subscription plan (free or premium)

Health and wellbeing data you log

  • Mood entries — your daily mood rating and chosen emoji

  • Symptom entries — which symptoms you record and on which days (e.g. cramps, headache, fatigue, anxiety, insomnia)

  • Menstrual cycle tracking — flow level, period start days, related symptoms and notes

  • Journal entries — free-text title, body and tags

  • Gratitude entries — the things you are grateful for and an optional note

Productivity and goals data you log

  • To-do tasks (title, priority, due date and time, notes)

  • Time-boxed planner / calendar blocks (title, date, time, priority, notes)

  • Goals (title, category, why it matters to you, target date, milestones and weekly check-in notes)

Learning data

  • Course and lesson progress and completion

  • Toolkit saves, reflections and how helpful you found a strategy

Payment data When you buy Premium, the payment is processed by Base44 Payments (powered by Wix). Wix collects your name, email, billing address and payment details on its own secure checkout page. We do not see or store your card number. We retain a record of the purchase (checkout session id, product, amount, currency, order and subscription ids, and payment status) so we can grant and manage your Premium access.

4. How and why we use your data

We use your data only to provide the App to you:

  • To create and manage your account and sign you in.

  • To store and show you the mood, symptom, cycle, journal, gratitude, planner and goal entries you create.

  • To generate goal roadmaps and weekly check-in summaries using AI (Premium only — see Section 5).

  • To send you streak and reminder emails you have agreed to receive (mood-streak nudges and red-zone to-do reminders).

  • To send native push reminders to log your mood (where a mobile build with push is installed).

  • To process Premium subscriptions and grant or revoke access.

  • To maintain the security of the App and prevent abuse.

Legal basis (UK GDPR)

  • Performance of a contract (Art. 6(1)(b)) — to run your account and deliver the features you asked for.

  • Legitimate interests (Art. 6(1)(f)) — sending the reminder nudges you opted into and keeping the service secure.

  • Consent (Art. 6(1)(a)) — where you connect a social sign-in provider, and for any optional marketing communications.

Your health and wellbeing data (mood, symptoms, cycle, journal, gratitude) is "special category" data under Art. 9 of the UK GDPR. You provide it deliberately and explicitly by entering it, and we process it on the basis of your explicit consent (Art. 9(2)(a)) to provide the wellbeing features you chose to use. You can withdraw that consent by deleting the relevant entries or your whole account at any time.

5. How AI is used (and what is never sent)

The App uses an AI service, accessed through the Base44 platform, to build goal roadmaps and write weekly goal check-in summaries. This is a Premium feature.

What is sent to the AI:

  • Your goal title, category, target date, and the "why it matters" note you wrote

  • Your weekly check-in note for that goal

  • A list of your upcoming planner blocks for that goal (title, date, time, priority, done state)

What is never sent to the AI:

  • Mood entries

  • Symptom entries

  • Menstrual cycle entries

  • Journal entries

  • Gratitude entries

The AI returns a structured roadmap or summary that we store against your goal. The AI provider may retain inputs according to its own policy as a sub-processor (see Section 6).

6. Third parties and sub-processors

Base44 (platform and backend) — Caterpillar Rising is built and hosted on the Base44 platform. Base44 stores your account, your entries and the App's code on its hosted backend, and provides the AI gateway, email sending and payment connection used by the App. Base44 acts as a processor on our behalf.

Base44 Payments (powered by Wix) — Handles Premium checkout and subscriptions. Wix collects payment and billing details directly on its checkout page; we only store the order record described in Section 3.

Wix (blog content) — The App fetches the titles and excerpts of public blog posts from the Caterpillar Rising website to show in the inspiration feed. No personal data is sent to Wix for this — it only reads public content.

AI gateway provider — Receives only the goal roadmap and check-in content described in Section 5, to generate your roadmaps and summaries. No other personal data is sent.

Email and push delivery — Reminder emails are delivered through Base44's email service to the address you registered with. Push notifications, where enabled, are delivered through the mobile platform's native push service (Apple Push Notification service / Firebase Cloud Messaging) to the device the App is installed on.

Google Fonts — The App loads display and body fonts (Fraunces and Inter) from Google Fonts, which can see the requesting IP address as part of the font request.

The AI service runs through Base44's AI gateway. Depending on your Base44 workspace plan, the inputs you send through the gateway may be used to train AI models — Enterprise workspaces are excluded from training, while other plans (including Business) may use data for training. Base44's documentation does not state how long gateway prompts are retained. Only the goal and check-in content described in Section 5 is ever sent; no mood, symptom, cycle, journal or gratitude data reaches the AI.

7. International data transfers

By default, app data is stored in the United States. On an Enterprise plan (Business or Enterprise), storage can instead be selected for the EU or the UK. Data residency controls where data is stored, not where it is processed — requests may be handled by Base44 services in another region before the results are saved. Base44 account details and billing information remain in the US regardless.

Base44's sub-processors (including Wix, the AI gateway provider, Google, and mobile push providers) are bound by data processing agreements governing transfers to the US, with appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework. The current sub-processor directory is published in the Base44 Trust Center at trust.base44.com.

8. How long we keep your data

We keep your personal data for as long as your account is active. Your mood, symptom, cycle, journal, gratitude, planner, to-do and goal entries remain until you delete them individually or delete your account. We keep payment records for as long as needed to manage your subscription and for legitimate accounting and tax purposes.

We do not automatically delete dormant or inactive accounts. If you stop using the App, your data stays until you delete your account (Section 11). You can do that at any time from Settings.

9. Security

Your data is tied to your account and protected by row-level access controls, so one user can never read or edit another user's entries. Data is transmitted over HTTPS. Authentication uses bearer tokens rather than cookies. Payment card data never touches our servers — it is handled entirely by Wix's PCI-compliant checkout.

Data is encrypted at rest and in transit. It is not end-to-end encrypted, which means Base44 administrators could access your data if needed to operate or support the service.

10. Your UK GDPR rights

You have the following rights over your personal data:

  • Access — ask what data we hold about you.

  • Rectification — correct data that is inaccurate.

  • Erasure — ask us to delete your data.

  • Restriction — ask us to limit how we use your data.

  • Portability — receive your data in a structured, machine-readable format.

  • Objection — object to processing based on legitimate interests.

  • Withdraw consent — withdraw consent for special-category processing at any time, without affecting processing already done.

  • Rights related to automated decision-making — the AI features in this App generate suggestions, but no decisions about you are made solely by automated means with legal or similarly significant effects.

To exercise any of these rights, use the in-app account deletion in Settings, or contact us at the privacy email listed in Section 1. We respond within one month.

11. Deleting your account

You can delete your account from Settings → Delete account. You will be asked to type "DELETE" to confirm. The App then erases, on your behalf: journal entries, mood entries, symptom entries, gratitude entries, cycle entries, planner (calendar) blocks, to-dos, goals, weekly goal check-ins, lesson and course progress, course unlocks, toolkit dividers, items, reflections and strategy evaluations, toolkit preferences, purchase records, and your user account. This action cannot be undone.

If you have an active Premium subscription on our payment provider's side, contact us at hello@caterpillar-rising.com and we will cancel it too.

12. Cookies and local storage

The App does not use advertising or tracking cookies. It stores a functional UI preference (whether the side menu is open) and a login token in your browser's local storage so you stay signed in. No behavioural tracking or advertising identifiers are used.

13. Children

The App is intended for users aged 13 and over — the age at which a child can consent to an online service under UK GDPR Article 8. We do not knowingly collect data from anyone under 13. If you believe someone under 13 has provided us with personal data, contact us and we will delete it.

Where a user under 18 uses the App, their data is kept private to them, is not used for advertising or profiling, and is not shared beyond the sub-processors listed in Section 6. We do not gate sign-up by age.

14. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent version. Material changes will be highlighted in the App or communicated to you by email.

15. Contact and complaints

To ask about your data, request access, correction or deletion, or raise a concern, contact us at the privacy email in Section 1. You have the right to complain to the UK Information Commissioner's Office (ICO) if you believe our handling of your data has not met the requirements of the UK GDPR. You can contact the ICO at ico.org.uk or on 0303 123 1113.

Caterpillar Rising · Published at https://caterpillar-rising.base44.app

All facts in this policy have been verified against the App's code and configuration on 26 October 2026.

bottom of page