Privacy Policy

Last updated: February 2026

1. Information We Collect

We collect information you provide directly:

  • Account Information: Email address, display name, date of birth, gender, profile photo
  • Activity Locations: The venue or place you attach to an activity you post, and the optional home neighborhood you set. We do not collect your live device location — your position on the map is computed on your device and never uploaded
  • Activity Data: Activities you create, join, and participate in, and comments you post
  • Group Data: Groups you create and your membership in others' groups
  • Contacts (optional, with your explicit consent): If you choose "Find Friends," your contacts' phone numbers are compared against Up4 accounts to find matches, then immediately discarded — they are never stored or shared
  • Device Information: Device type, operating system, app version, push notification token

2. How We Use Your Information

  • To provide and improve the Service
  • To show your availability and activities to the friends and groups you choose
  • To send notifications about activities, friend requests, and group updates
  • To communicate with you about the Service, including updates and security alerts
  • To detect and prevent fraud, abuse, and security issues

3. Location Privacy

Here's how location works in up4:

  • No live location sharing: up4 never displays your real-time location to other users. The map shows the locations of activities you choose to post — never where you are.
  • You choose the audience: Each activity's location is visible only to the audience you select (friends or a group). For extended-network viewers, activity locations are shown only as an approximate area until they join.
  • No background tracking: Location access is "While Using the App" only. We never request always-on location, and the app works if you decline location entirely.
  • Home neighborhood: If you set a home location, other users only ever see a neighborhood name — never a pin or address.
  • No third-party selling: We never sell your location data to advertisers, data brokers, or any third parties.

4. Information Sharing

We share your information only in these limited circumstances:

  • With the audience you choose: Friends and group members see your profile, availability, and the activities you share with them
  • Service Providers: We work with trusted providers who process data on our behalf to operate the Service — Supabase (data hosting), Vercel (web hosting), Apple (push notifications), Google and Foursquare (venue search and photos when you attach a place to an activity), and Resend (transactional email)
  • AI Features: Some features use Anthropic's AI services as a processor (for example, generating activity suggestions from your interests and activity history). This data is used only to provide the feature, is not used to train third-party models, and is never sold
  • Legal Requirements: When required by law, subpoena, or legal process
  • Safety: When we believe disclosure is necessary to protect the safety of our users or the public

5. Data Retention

We retain your data while your account is active. Specific retention periods:

  • Contacts matching: Phone numbers are discarded immediately after matching — nothing is stored
  • Activity history: Retained while your account is active
  • Account data: Permanently removed within 30 days of account deletion
  • Waitlist data: Retained until the waitlist is no longer needed, then deleted

6. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Delete your account and all associated data
  • Portability: Export your data in a standard format
  • Opt-out: Unsubscribe from marketing communications at any time
  • Restrict Processing: Request that we limit how we use your data

7. Security

We use industry-standard security measures to protect your data, including:

  • Encryption in transit (TLS) and at rest
  • Secure authentication with support for Apple Sign-In, Google Sign-In, and email/password
  • Row-level security on all database tables
  • Regular security reviews and updates

8. Children's Privacy

up4 is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will promptly delete that information.

9. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for any international transfers of personal data.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes through the app or by email. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact Us

Questions or concerns about this privacy policy? Contact us at privacy@up4anything.app