Privacy Policy
This Privacy Policy explains how [DEVELOPER LEGAL NAME] (“we”, “us”), the developer of the selfup mobile application (the “App”), handles information when you use the App. selfup is designed to be private by default: it has no accounts, no sign-in, and your journey lives on your device.
1. Data stored only on your device
The following is stored locally on your device and is not transmitted to us (we operate no backend):
- your journey progress — completed days, completed missions, streaks, and completion history;
- your profile entries from onboarding — display name, age, chosen focus areas, difficulty level, and your stated motivation;
- your preferences — reminders, haptics, and similar settings.
Deleting the App permanently deletes this on-device data. If you use device-level backups (e.g. iCloud backup), copies may be included in your backup under Apple’s terms — that is controlled by you and Apple, not by us.
2. Data processed by service providers
To operate, improve, and monetize the App, we use a small set of processors. We receive only aggregated or pseudonymous information from them — never your name, email, or payment details.
a. Analytics — Microsoft Clarity
We use Microsoft Clarity to understand how the App is used so we can improve it. Clarity processes:
- app interaction data — screens viewed, taps and gestures, and session recordings of App screens;
- device and technical data — device model, operating system version, region/language, and similar diagnostics;
- a random, anonymous install identifier we generate — it is not derived from you or your device identity and links sessions from the same installation;
- coarse usage attributes attached to sessions — such as your chosen focus areas, difficulty level, age value, stated motivation, current day/phase, and streak figures — used to segment usage patterns.
Your display name is masked from session recordings. We do not send Clarity your name, contacts, precise location, or any payment information. For details, see the Microsoft Privacy Statement.
b. Purchases — Apple and RevenueCat
Subscriptions are billed by Apple through your Apple Account. We never receive your payment card or billing details. We use RevenueCat, Inc. to validate purchases and manage subscription entitlements. RevenueCat processes pseudonymous purchase data: a random app-user identifier, purchase receipts and transaction identifiers, product identifiers, purchase and renewal timestamps, and region/currency. See the RevenueCat Privacy Policy and Apple’s Privacy Policy.
c. Remote configuration — Google Firebase
We use Firebase Remote Config to deliver configuration values (for example, notifying you that a newer App version is available). When the App fetches configuration, Google may process technical data such as device and instance identifiers, operating system version, and country. See the Google Privacy Policy and Firebase Privacy & Security.
| Provider | Purpose | Data involved |
|---|---|---|
| Apple Inc. | App distribution, payment processing | Purchase and billing data (held by Apple) |
| RevenueCat, Inc. | Subscription validation and management | Pseudonymous purchase/transaction data |
| Microsoft Corp. (Clarity) | Usage analytics, session replay | Interaction data, device data, anonymous ID, coarse usage attributes |
| Google LLC (Firebase) | Remote configuration | Technical/device data on config fetch |
3. What we do not do
- We do not require or create user accounts, and we do not collect your name, email address, phone number, contacts, photos, or precise location.
- We do not sell or rent personal information, and we do not “share” it for cross-context behavioral advertising (as those terms are defined under the California Consumer Privacy Act).
- We do not display third-party advertising and do not use advertising trackers.
- We do not knowingly profile you for automated decisions with legal or similarly significant effects.
4. Notifications
If you enable the daily reminder, the App schedules a local notification on your device. No push-notification service is used, and nothing about your reminders leaves your device. You can disable reminders in the App or in iOS Settings at any time.
5. Legal bases (EEA/UK users)
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (providing the App and subscriptions you request); legitimate interests (understanding usage to improve and secure the App, preventing fraud — balanced against your rights, using pseudonymous data); and consent where required (which you may withdraw at any time).
6. Retention
On-device data remains until you delete it (via Reset Progress in Settings) or delete the App. Data processed by our providers is retained for the limited periods described in their policies — analytics data by Microsoft Clarity, and purchase records by Apple and RevenueCat for as long as needed for subscription management, accounting, and legal compliance.
7. Security
Your journey data never leaves your device, which materially limits exposure. Data processed by our providers is transmitted over encrypted connections (TLS) and handled under those providers’ security programs. No method of transmission or storage is 100% secure, but we minimize what is processed in the first place.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal data, and to lodge a complaint with a supervisory authority. Because we hold no account data, most data is either on your device (under your direct control — deleting the App deletes it) or pseudonymous data held by our processors. To exercise a right, contact us at [CONTACT EMAIL] and we will assist, including directing requests to the relevant processor. California residents: we do not sell or share personal information; you will not be discriminated against for exercising your rights.
9. Children
The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or the higher minimum age in your jurisdiction). If you believe a child has provided personal information through the App, contact us and we will take appropriate steps to delete it.
10. International transfers
Our service providers (Apple, Microsoft, Google, RevenueCat) are U.S.-based companies and may process data in the United States and other countries. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses or applicable adequacy frameworks maintained by those providers.
11. Changes to this policy
We may update this Privacy Policy from time to time — for example, if we add or change service providers. We will update the effective date above and, for material changes, provide additional notice in the App. Your continued use of the App after changes take effect signifies acceptance of the updated policy.
12. Contact
Data controller: [DEVELOPER LEGAL NAME]
Email: [CONTACT EMAIL]