Privacy

What UpFresh stores

Your things and their upkeep: what you own, what each needs doing, when you last did it, how many you have left, and where you bought them.

Your account: the name and email address Apple or Google pass on when you sign in. UpFresh never sees or stores a password.

Your profile: the country and town you are based in, that you declared you are 18 or over, and which version of this policy you agreed to and when.

Each phone you use UpFresh on: a random code the app makes up for that install, the phone's time zone setting (for example "America/Toronto"), the reminder choices you made in Settings, and when the app was last opened there. Once you allow notifications, also the address Apple and Expo use to deliver them to that phone.

A short log of reminders sent: which phone, which day, and how many. Nothing about what they were about.

If you answer the four questions UpFresh asks when you start: whether you live in a condo, a house or a dorm; whether you own it or rent it; which vehicles you have; whether anyone depends on you — a baby or toddler, school-age children, or another adult you look after; and which pets you have. Also which of the suggestions that follow you ticked or dismissed. The questions are optional and you can skip them.

If you tap a shop link on the Buy tab: which link, for which of your jobs, and when. Not whether you bought anything — UpFresh never learns that.

Why each of those

Your things are the product. Without them there is nothing to remind you about.

Your country decides which shop a reorder link sends you to, so you are not pointed at a retailer that will not deliver to you.

Your town is chosen from a list of places in your country rather than typed. It is not used for anything today. It is asked because it cannot be reconstructed later, and because UpFresh may one day be able to tell you a part is in stock near you. If your town is too small to be listed, you pick the nearest one that is, so it is roughly where you are rather than exactly.

Your age declaration is because UpFresh links out to shops, so it is meant for adults. It is taken at your word.

Your phone's details are so a reminder can reach you at the hour you chose, where you are. "9am" means nothing without a time zone, and a reminder worked out at 9am from what is true at 9am is right even if a housemate marked the job done the evening before. The log exists so the same morning is never sent twice.

Your answers to the four questions decide what is suggested to you: a house is offered the gutters and the roof, a dog a vet check-up, a baby a car seat. That is the only thing they are used for.

Your taps on shop links show which links get used and which do not, so the list of links is worth keeping up. Once UpFresh earns a commission from a shop, they also let it check what it is paid against what was tapped.

What UpFresh does not collect

Not your location. UpFresh never asks the phone where you are. It reads the time zone the phone is set to, which says roughly which part of the world you are in and nothing closer.

Not your date of birth, your address, your payment details, or anything about your health, beliefs or background.

No tracking across other apps or websites, and no advertising identifiers.

Who else sees it

Supabase stores the data on UpFresh's behalf and cannot use it for anything else. Its servers are in the United States, so your information is held there and is subject to US law. Apple and Google know you signed in, because you signed in with them.

Reminders sent from UpFresh's servers pass through Expo, which runs the delivery service, and then Apple, to reach your phone. Both are in the United States. What they carry is a count — "2 things are due today" — and never which things, so they learn that you use UpFresh and how many reminders you got, not what you own.

If you join a household, its members see your name and when you joined. They see an item of yours only if you share it, and then they see its jobs and their history, and can edit it and mark its jobs done. Items you do not share stay private. Leaving a household makes your shared items private again. They never see your answers to the four questions, or which suggestions you ticked or dismissed.

Nothing is sold or given to anyone else, except as described under Research below.

If you tap a reorder link you leave UpFresh for that shop's website, and what happens there is between you and them. A link on the Buy tab may carry a code telling the shop the visit came from UpFresh, so that UpFresh earns a commission on what you buy. The code names UpFresh, not you, and the price is the same either way.

Research

Patterns across many households — how often things get replaced, what people buy, and where they buy it — may be studied, published, or sold as aggregate findings.

Only ever in aggregate. Never one household's records, never anything naming or identifying you, and never groups small enough that a household could be picked out.

Your answers to the four questions are never part of this. They are not studied, published or sold, in aggregate or otherwise.

If UpFresh ever wants to use your information in some other way, this policy changes, the version changes, and you are asked again. Agreeing to this version is not agreeing to a future one.

How long it is kept

For as long as you have an account. Your history is the point — a filter replaced three years ago is what makes the schedule work.

Deleting your account removes your things, their history, your profile and your phones' details. Aggregate findings already produced do not identify you and are not reversed.

Signing out of a phone stops reminders being sent to it. The log of reminders sent is kept for two weeks.

Your answers to the four questions are kept until you change them by answering again, forget them in Settings, or delete your account.

Your rights

You can see and correct your profile in Settings at any time.

Under Canadian privacy law you can ask what is held about you, ask for it to be corrected, withdraw consent, or complain to the Office of the Privacy Commissioner of Canada. If you are in Quebec, your rights under Law 25 apply as well.

Withdrawing consent means closing your account, because the data is what the app is.

Children

UpFresh is not for under-18s and does not knowingly keep their information. If you believe a child has an account, get in touch and it will be removed.

Changes

When what is collected, why, or who sees it changes, the version below changes and you are asked to agree again. You will not be assumed to have agreed to something written after you signed up.

Getting in touch

TO DO: a contact address is required before release. Canadian law requires a named, reachable person accountable for this.