Privacy policy
In short: your camera video and images never leave your phone. Upstak's server keeps your email address (to sign you in), your onboarding answers and plan, the numbers each scan produces (angles in degrees), and the exercises you tick off. Nothing is sold or used for advertising, and you can delete all of it from the app or from this page.
Who we are
Upstak is a posture and mobility app for Android, published on Google Play. "Upstak", "we" and "us" mean the developer of the app named on its Google Play listing. For anything about your data, email hello@upstak.app.
What stays on your phone
- Camera video and images. Body tracking and the scan run on your phone. The video is analysed as it is filmed and is not recorded, uploaded or stored by us.
- Body-tracking data (the positions of your joints, frame by frame) stays on your phone too.
- Reminders are scheduled on your phone. We don't use a push-notification service.
If we ever want to use scan recordings to improve accuracy, that will be a separate choice you have to switch on, explained in the app, and this page will be updated before it exists.
What the server keeps, and why
| Data | Why |
|---|---|
| Your email address | To send you a sign-in code and to know it's you on a new phone. We don't send marketing email. |
| A sign-in token for each phone, stored only as a hash, and an optional label such as the phone model | So your phone stays signed in, and so you can sign one phone out. |
| Your birth year and time zone | Birth year turns off late-evening streak warnings for anyone under 18. Time zone sets when your day starts for streaks. |
| Your onboarding answers (for example where you feel stiff, desk hours, minutes a day) and your plan | To build your routine. |
| Scan results: angles and other measurements, with quality flags | To work out your Posture Score and show your progress over the weeks. |
| The exercises you tick off each day | For your streak and your consistency score. |
We keep this data for as long as you have an account. When you delete your account it is erased at once, with no grace period. Your IP address is used to limit how often requests can be made, which protects sign-in from abuse. Those counts are kept in memory for minutes and never written to the database.
Where privacy law asks for a legal basis: we process this data to provide the app you asked for (a contract), and to keep the service secure (our legitimate interest).
Who else handles data
- Resend sends the sign-in code email, so it receives your email address and the code.
- Cloudflare runs the network in front of this website and our server. Requests, including your IP address, pass through it.
- Google Play handles downloads and updates under Google's own privacy policy.
- Spoken coaching may use your phone's own text-to-speech engine, which follows your phone's settings.
That's the full list. There are no advertising or analytics SDKs in the app, and this website sets no cookies.
Your choices and rights
- Delete your account: in the app, Settings → Account → Delete account, or on upstak.app/delete-account. Your email, answers, plans, scans, check-offs and every phone's sign-in are deleted together.
- Get a copy of your data, or have something corrected: email hello@upstak.app from the address you sign in with, and we'll reply within 30 days.
- Sign out of a phone at any time in Settings. That phone's sign-in is revoked.
- You can also complain to your local data protection authority.
Children
Upstak is not meant for children under 13, and we don't knowingly hold data about them. If you think a child under 13 has an account, email us and we'll delete it. For users aged 13 to 17 we turn off evening streak warnings.
Health information
Upstak is a wellness app, not a medical device. Its measurements describe how you move; they are not a diagnosis. We never sell them or share them for advertising, and they are only used to run the app for you.
Changes
If this policy changes, we'll update the date above. If a change affects data you've already given us, we'll tell you in the app first.