Effective Date: August 31, 2026
UpgradingYou, LLC, a Delaware limited liability company ("we," "us," or "our") operates the UpgradingYou mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
When you create an account, we collect:
If you join the pre-launch waitlist, we collect your email address and the landing-page variant shown to you so we can notify you about availability and evaluate that page. We do not retain the page URL, referring URL, or UTM query parameters with your signup.
When you create, use, or share an appgrade (a mini-app), we may collect and store:
When an appgrade is safety-reviewed, its executable code and derived safety context may be sent through OpenRouter to an AI model for hostile-code analysis. The deterministic permission and hard-block checks remain enforced if that AI review is unavailable.
You can also share a snapshot: a frozen page from an appgrade or from a chat, with only the data you chose to include. A snapshot lives at a public link. Anyone with that link can open it, with or without an account. Taps in the snapshot viewer (for example, checking off an ingredient) are not saved.
We use PostHog, a product-analytics service, to understand how people use the Service so we can improve it. On the web, PostHog is disabled unless you explicitly choose “Allow analytics”; declining or leaving the choice unanswered sends nothing to PostHog. In the native app, product analytics is enabled by default. When enabled, PostHog receives:
We do not send the contents of your conversations, memories, habits, health data, or financial data to PostHog. Analytics data is processed by PostHog on our behalf under its own privacy policy. On the web, you can grant or revoke analytics in Settings at any time; revocation stops collection and clears the browser-side analytics identity and queue.
On the website, we also use Cloudflare Web Analytics to understand aggregate page views and how the site performs. A small script (a "beacon") reports page views, referring pages, and browser performance timings. It does not use cookies or browser storage, does not attach the data to your account, and does not collect conversation, memory, habit, health, or financial contents. Cloudflare receives a visitor IP as part of ordinary web requests and discards it for this purpose rather than using it to identify you. This applies to the website, not the native iOS or Android apps. Processing is governed by Cloudflare's privacy policy. See our Cookie Policy.
An appgrade may ask for your current location, for example to log a walk or stamp a journal entry. This is off until you allow it in the system location prompt, and it is one-shot while you are using the app. We do not track you in the background, and timezone (Section 1.2) is not precise location. If that appgrade then includes the location in an AI request, the location may be sent to our AI provider (OpenRouter) as part of that request.
On iOS, you may optionally connect Apple Health from the app's Settings. This is off by default and requires your explicit permission through Apple's standard Health access prompt. When enabled, we read the following categories from Apple Health solely to automatically track your activities and show your progress:
We read this data only; we do not write any data back to Apple Health. Rather than storing your individual health samples, we compute a per-day summary on your device (for example, total steps, exercise minutes, workout count, and hours of sleep for a given day) and store that daily summary on our servers so the app can mark matching activities complete and so your assistant can reference your real progress when you ask about it.
We never use Apple Health data for advertising or marketing, and we never sell it or share it with data brokers or third parties for their own purposes. You can stop the sync at any time by turning off the Apple Health toggle in Settings, and you can revoke our access entirely in iOS Settings → Privacy & Security → Health. Health data we have stored is removed when you reset your data or delete your account.
You may optionally let the app read the calendar on your device (from the app's Settings, or when your assistant offers it during setup). This is off by default and requires your permission through your device's standard calendar access prompt. When enabled, we read your upcoming events (about the next two weeks) from the calendars already on your phone and store a small rolling snapshot on our servers so your assistant can plan around your real commitments.
The snapshot includes only each event's title, start and end times, all-day flag, location, and the name of the calendar it came from. We never read or store event notes, attendee lists, or links, and we never write to your calendar. Turning the toggle off in Settings stops the sync and removes the stored snapshot; you can also revoke access in your device's privacy settings. Calendar data is deleted when you delete your account.
We use the information we collect to:
We do not sell your personal information. We share data with third-party service providers only as necessary to operate the Service. We contractually require processors that receive personal data from us to provide the same or equivalent privacy and security protections described in this policy:
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication and database hosting | All account and user-generated data |
| OpenRouter | AI chat processing and appgrade safety review (routes to large language models) | Chat messages, conversation history, memory context, appgrade executable code, and derived safety context |
| OpenAI | Text-to-speech for voice mode; fallback for memory search embeddings | Text content to be spoken aloud; text used to search your notebook |
| Groq | Speech-to-text transcription | Audio recordings from voice input |
| Brave Search | Web search during AI conversations | Search queries generated in conversation context |
| RevenueCat | Subscription and in-app purchase management | User ID, subscription status, product identifiers |
| Resend | Transactional email delivery | Email address, email content (e.g., password reset) |
| Expo | Push notifications and over-the-air updates | Push tokens, notification content |
| OAuth authentication; real-time voice mode (Gemini) | OAuth tokens; voice-mode audio and resulting transcripts | |
| PostHog | Product analytics to understand and improve feature usage | Product events and feature usage, account user identifier, device platform |
| Instagram / Meta | Only if you choose to add a snapshot to an Instagram Story | The picture of the snapshot and the public snapshot link, handed to Instagram on your device. We do not send your account or notebook to Meta. |
| Apple | OAuth authentication; App Store billing | OAuth identity tokens; subscription status |
| Stripe | Payment processing, subscription management, and refunds for web subscriptions | Email address and subscription, transaction, dispute, and refund status (card details are handled by Stripe, not by us) |
| Stripe Connect | Creator payouts, identity checks, and tax forms | Identity and bank or debit details go to Stripe. We receive payout status and tax-reporting state, not full account numbers |
| Cloudflare | Web hosting, bounded waitlist storage, and real-time voice relay | Web request data; waitlist email address; voice-mode audio relayed in real time (not stored) |
| Cloudflare Web Analytics | Aggregate website usage and page-performance metrics | Page views, referring pages, and browser performance timings. No cookies, no account identifier, and no conversation or notebook contents. Cloudflare discards the visitor IP after routing and does not use it to identify you. |
| YouTube | Play videos linked in assistant messages, only after you choose to load one | Your IP address and ordinary browser/request data after that click |
We may also disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of UpgradingYou, our users, or others.
Some features let you connect with friends (your "village") and share content. Sharing is opt-in. Nothing below is visible to other people unless you choose to share it or join someone's village.
/p/... on upgradingyou.ai). Anyone with the link can open it, no account needed. It contains only the data you included when you made it. If you add it to an Instagram Story, Instagram receives a picture of that page and the public link.You can update your profile or stop sharing at any time, although people you have already shared with may retain what was previously shared with them. Public snapshot links stay reachable until the snapshot is removed.
If you arrive through a creator's referral link, we store the referral code and a timestamp in your browser (see the Cookie Policy) for 30 days, and we may associate your signup with that creator so they can be paid a commission on a web subscription. Creators see aggregate counts only. They never see your identity. This program is optional and not always offered.
On iOS and Android, we ask for your explicit permission in the app before sending personal data to a third-party AI service. The permission screen identifies the recipients and the categories of data below. If you choose “Sign out,” the app does not send your personal data for AI processing. Your accepted disclosure version and the time of your choice are stored on your profile so our servers can enforce that boundary. On the website, the same processing is covered by this Privacy Policy.
The Service uses artificial intelligence extensively. You should be aware that:
For supported OpenRouter requests, we require routes that deny provider data collection and support zero-data-retention processing. OpenRouter may still keep limited request metadata, such as timestamps, model choice, token counts, and cost, as described in its privacy documentation; it does not receive permission to use your prompts for model training from UpgradingYou.
You can reset your user data within the app, which deletes your chat history, habits, memories, activity logs, assistant data, and notebook entries. Your account and profile will remain active.
You can permanently delete your account and associated personal data directly within the app, under Settings. From your side, deletion takes effect when you confirm it. We then remove account data from our systems and instruct our processors to delete it, which we complete within 30 days, except for the limited anti-fraud and billing records described in Section 5 or where retention is required by law. You may also request deletion by contacting us at the email below. Note that deleting your account does not automatically cancel any subscription billed through the Apple App Store. You must cancel that separately in your Apple ID subscription settings. Web subscriptions billed by Stripe can be cancelled through the billing controls in Settings.
A waitlist signup may exist without an account. Contact us from the waitlisted address if you want that signup removed.
You have the right to receive a copy of your personal data. While a self-service in-app export feature is in development, you may request a machine-readable copy of your data at any time by contacting us at the email below, and we will provide it within 30 days.
You can control which notifications you receive and their frequency through the app's settings.
UpgradingYou, LLC is a United States company. If you use the Service from another country, including in Europe or California, you can still email us to ask for a copy of your data, to correct it, or to delete it. We will respond within 30 days. We do not sell personal information.
We do not sell personal information. If you are a California resident, you can email us to ask what we have collected about you or to request deletion, the same way anyone else can.
We implement reasonable technical and organizational measures to protect your personal data, including:
No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal data, please contact us at the email below.
Users between 13 and 17 may use the Service only with the consent and involvement of a parent or legal guardian (see our Terms of Service). If the law where you live sets a higher minimum age, you must meet that age.
We are based in the United States. If you use the Service from another country, your information is processed in the United States, including by the providers listed in Section 3. Those countries may have different data protection laws than your own.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Effective Date" above. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
Email: [email protected]