Privacy Policy

We never ask who you are

There is no sign-up. UpMode does not ask for your email address, your phone number or your date of birth, and it has no way to learn them. You can give it a first name so the morning card can greet you; it stays on the phone. When the app first opens it creates an anonymous identifier — a random string — so that the data belonging to your phone can be told apart from anyone else's. It is not connected to your Apple ID and it identifies nobody.

What stays on your phone

Most of it. Specifically:

• Your alarms, the days they ring, and the challenge you chose.
• Every morning you have finished, and your streak.
• The QR or barcode you registered, stored only as an irreversible fingerprint. The code itself is never saved.
• Your answers from onboarding, the name you may have typed for the app to greet you with, and the settings you have changed. The name is never sent anywhere.

Delete the app and all of it is gone from the phone with it.

The camera and your steps

Some missions use the camera: scanning your code, counting your jumping jacks or squats, and photographing a spot you chose — your bathroom, your made bed, the kettle. Counting and scanning run entirely on the device, in memory; no video and no frame from them is ever saved or sent anywhere. The photo missions are the one exception, and only on your phone: the reference picture you take yourself when you set the mission up is kept in the app's own storage so the morning photo can be compared against it. Neither picture ever leaves the phone — not to us, not to anyone — and both are deleted with the mission or the app.

The steps mission reads your step count from the phone's motion sensor while the mission is open, and keeps none of it.

The app asks for camera and motion permission only at the moment you choose a mission that needs it, never at 6:30 in the morning.

What does leave the phone

Four things, and nothing else:

• Product analytics. A fixed list of events describing how the app is used — a screen was opened, an alarm was set, a challenge was finished, a morning was won — attached to the anonymous identifier. No free text is ever included.
• Your morning record. Which days you finished a morning, so your progress survives and we can see whether the app is helping people at all.
• The Morning Card request. To write the short personal message you see after a morning, we send the goal you picked from our list, how many days your streak is, and whether the last morning was finished. That is the whole of it. The message is generated after the morning is already won, so if it fails, nothing about your morning changes.
• Ad campaign measurement. When we advertise the app, we need to know whether an ad brought people who actually use it. Apple provides a mechanism for this that reports the outcome of a campaign without reporting who you are, and we use it together with AppsFlyer, a measurement service. AppsFlyer receives an install identifier of its own, your device's vendor identifier, and two facts: that onboarding was finished and that the subscription screen was seen. Subscription events — a trial started, a purchase, a renewal — reach it from Apple's payment records, not from anything you type. It never receives your name, your anonymous account id, your advertising identifier or anything from your mornings. Like any server it sees the IP address of the request and derives an approximate, city-level location from it for reporting. The app itself never asks for, reads or sends a location, which is why the App Store label lists none; this sentence is here because we would rather tell you what a server can infer than let a label speak for us.
• Crash reports. When the app crashes, or hits an error it was built to survive, it sends us the technical details of what went wrong together with your anonymous account id — so we can tell whether one person hit a fault a hundred times or a hundred people hit it once. It never sends a picture of your screen, and it never sends your IP address; the parts of the tool that would collect either are switched off in our code rather than left at their defaults. The service is Sentry, and these reports are stored in the European Union.

What we never collect

• Your location. No GPS, ever, and our own analytics do not infer it from your IP address — we switch that off at the source. The one exception is AppsFlyer, described above, which sees the IP address of the request like any server does and derives an approximate, city-level location from it so a campaign can be reported by region. Nothing more precise than that exists anywhere.
• Contacts, your photo library, health data, messages, or anything else on your phone.
• Anything from the camera. Reference photos exist only on your phone, as described above. The app never uses the microphone.
• Your advertising identifier (IDFA), or data used to track you across other companies' apps or websites. UpMode shows no ads, never reads the advertising identifier, and never shows you the "allow tracking" prompt. Campaign measurement, described above, works without any of that.

We do not sell data. There is nothing here to sell.

Who processes data for us

• Supabase — stores the anonymous account and your morning records.
• DigitalOcean — runs our server.
• PostHog — product analytics.
• AppsFlyer — ad campaign measurement, as described above.
• RevenueCat — keeps track of your subscription status.
• Sentry — crash and error reports, stored in the European Union.
• OpenRouter and the language model behind it — receives only the three fields listed above when a Morning Card is written.
• Apple — handles every subscription payment. We never see your card details.

Keeping it, and deleting it

Morning records are kept while you use the app so your history and streak stay intact. Deleting UpMode removes everything held on the phone. To have the rows on our server deleted as well, write to [email protected] and we will remove them.

Children

UpMode is not directed at children under 13, and we do not knowingly collect anything from them.

Changes

If what the app collects ever changes, this page changes with it, and the date at the top moves.