Privacy Policy

When you use uppit we collect:

• Account info — email, password (hashed), display name, @handle, and the answers you give during onboarding (life area, top goal, daily time, country).
• Things you create on the app — sessions, goals, posts, comments, awards, club memberships, vision-board content, and profile edits.
• Payment info — if you upgrade to Pro, your card number is handled by Stripe directly. We never see it. Stripe sends us a customer ID and subscription status only.
• Device + usage signals — IP address, browser, device type, and basic page-view events. Used for security and to understand which features are working.

• To run the product (you can't have a profile without a profile row).
• To keep accounts secure (rate limiting, abuse detection).
• To send you the emails you've opted into.
• To bill you, if you're on Pro.
• To improve uppit (which features people use, which steps they get stuck on).

We do not sell your data. We do not run third-party ad networks.

uppit uses a small list of vendors to operate:

• Supabase — database, authentication, file storage.
• Vercel — hosting.
• Stripe — payment processing.
• Resend — transactional email.
• Replicate — AI image generation, only when you opt into avatar customization.

Each of these processes data on our behalf under their own privacy policies. We don't share your data with anyone else without your consent or a legal request we're required to honor.

We use a session cookie to keep you signed in, and we store a few preferences in your browser's local storage (theme, onboarding progress, draft state). We do not use third-party advertising cookies.

We keep your account and the things you create on uppit for as long as your account is active. If you delete your account, we delete your profile, posts, comments, and uploaded media within 30 days. Anonymized usage logs may persist longer for security and analytics.

You can:

• Access — see your data anytime in Settings → Account.
• Correct — edit your profile, posts, and goals directly in the app.
• Delete— request account deletion from Settings, or by emailing us. We'll confirm and complete the deletion within 30 days.
• Export— email us and we'll send you a JSON export of your account data within 14 days.
• Opt out — uncheck marketing emails at signup, in Settings, or via any unsubscribe link.

If you live in the EU/UK or California, you have additional rights under GDPR / CCPA. The above covers them. To exercise any right, email uppitapp@proton.me.

uppit is not intended for children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has signed up, email us and we'll remove the account.

If we make a material change to this policy, we'll post the updated version here and update the "last updated" date. For significant changes (new vendors, new categories of data) we will also email registered users.

Questions, requests, or anything that feels off — email uppitapp@proton.me.