Up2You Privacy Policy

privacy policy

We collect only the data needed to provide the service. We do not sell your personal data and we do not use advertising tracking.

Effective date: February 14, 2026 · Version 1.0

Data Controller

Up2You is the data controller for your personal data processed in the App.

Contact:

Definitions

  • Personal Data means any information relating to an identified or identifiable natural person.
  • Processing means any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.
  • App means the Up2You mobile application.
  • User means any natural person who uses the App.

What data we collect

  • Account data: Apple Sign In identifier and email (only if you choose to share it).
  • Profile data: goals, level, settings, preferences, restrictions (allergens, foods).
  • Plans and activity: plans, progress, and in-app activity.
  • Technical data: app version, device type, OS version, language.
  • Subscription data: purchase history and subscription status (via RevenueCat and Apple).

We do not collect advertising identifiers (IDFA) and do not use advertising tracking.

How we use data

  • Provide and maintain the App experience.
  • Create personalized plans and recommendations.
  • Manage subscriptions and payments.
  • Respond to support requests.
  • Comply with legal obligations.

Legal basis (GDPR)

  • Performance of a contract to provide the App.
  • Legitimate interests to operate and improve the service.
  • Legal obligations related to accounting and compliance.
  • Consent when you choose to share optional data.

Data sharing

We do not sell your personal data. We share data only with trusted service providers to run the App:

  • Hosting and infrastructure: Amazon Web Services (AWS).
  • Subscriptions: RevenueCat and Apple.

These providers process data under their own policies and contractual obligations.

Data retention and deletion

We keep your data while your account is active. You can request deletion at any time. After account deletion, we remove your personal data within 30 days, except where retention is required by law for billing and accounting.

Your rights

  • Access your personal data.
  • Correct inaccurate data.
  • Request deletion of your data.
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent at any time.

California residents have the right to know and delete personal information. We do not sell personal information.

Security

We use reasonable technical and organizational safeguards, including encryption in transit (TLS) and access controls to protect your data.

International transfers

Your data may be processed in countries where our providers operate. When transferring data outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses.

Children

The App is not intended for children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. We will post the updated version in the App and on this page.

Contact

Privacy questions and requests:

For faster verification, include the email linked to your Apple Sign In.