Privacy Policy

This Privacy Policy explains how the Upzy mobile app (“Upzy”, “we”, “us”, or “our”) collects, uses, and protects information when you use the app. By using Upzy you agree to the practices described below.

1. Information we collect

Account information: when you create an account we store your email address (and Apple ID identifier if you sign in with Apple) through our authentication provider, Supabase. We do not store passwords in plain text.

Alarm and usage data: alarms, mission completions, snooze events, streaks, ratings, and similar in-app activity are stored locally on your device and synced to our Supabase database when you are signed in. This is required for the core alarm and accountability features to work.

Subscription data: when you purchase a subscription we receive purchase metadata (product identifier, transaction date, renewal status, region) from RevenueCat and Apple. We never see your full payment card details.

Analytics: we use PostHog to record anonymous product analytics events (for example “alarm fired”, “mission completed”, “paywall viewed”) to improve the app. You can opt out of tracking when iOS prompts you for App Tracking Transparency.

Device data: notification permissions, time zone, app version, OS version, and a randomly generated install identifier so we can deliver alarms reliably and debug crashes.

Camera and motion data: when you use AI scanning, QR scan, steps, squat, or push-up missions, the app accesses your camera and motion sensors only while the mission is running. The data is processed on-device and is not uploaded, except for AI scanning missions where a single image is sent to our verification function and discarded immediately after the response.

2. How we use your information

• To deliver alarms and verify mission completions.
• To sync your alarms, stats and streaks across your devices.
• To process and validate subscriptions and trials.
• To understand which features are used so we can improve the app.
• To send transactional notifications (alarm reminders, trial expiry, accountability invites).
• To respond to support requests.

3. Sharing of information

We do not sell your personal information. We share data only with the service providers that make Upzy work: Supabase (database and auth), RevenueCat (subscriptions), Apple (in-app purchases and AlarmKit), and PostHog (analytics). Each of these providers is bound by their own privacy commitments and only processes data on our behalf.

4. Data retention

We keep your account data for as long as your account exists. You can delete your account at any time from Settings → Delete Account, which removes your data from our database within 30 days. Local device data is removed when you uninstall the app.

5. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you. You can exercise most of these rights directly in the app, or by emailing us at the address below. We will respond within a reasonable time.

6. Children

Upzy is not directed at children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

7. Security

We use industry standard practices including TLS encryption in transit, Supabase Row Level Security, and Apple Keychain for any sensitive on-device data. No system is perfectly secure, but we work to protect your information.

8. International transfers

Our service providers may process data in the United States and other countries. By using Upzy you consent to this transfer.

9. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the latest version. Material changes will be communicated in-app.

10. Contact

If you have questions about this Privacy Policy or want to exercise your rights, email us at support@upzy.app.