Privacy Policy

1. Introduction

Superstrata ("we," "our," or "us") operates the Uplifto mobile application (the "App"). This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our App.

By using Uplifto, you agree to the collection and use of information in accordance with this policy. If you do not agree with our practices, please do not use the App.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Authentication data: Email address, name, and profile photo (if you sign in with Google)
• Profile information: Display name you choose to use within the App

2.2 Habit and Progress Data

To provide our core service, we collect:

• Goals: Names and descriptions of habits you create
• Completions: Records of when you log progress on your goals
• Challenges: Challenge participation and progress data
• Mood data: Optional mood check-ins you choose to record

2.3 Social Features Data

When using social features, we collect:

• Circle memberships: Groups you create or join
• Cheers: Support interactions with other users
• Invite links: Referral and invitation data

2.4 Technical Information

We automatically collect:

• Device information: Device type, operating system, and app version
• Usage data: Features used and general usage patterns
• Error logs: Crash reports to improve app stability

2.5 Payment Information

If you purchase an Uplifto Plus subscription, payment is processed by Google Play. We do not collect or store your payment card details. We receive only:

• Subscription status: Whether you have an active subscription
• Purchase history: Records of subscription purchases for customer support
• Transaction IDs: For resolving billing issues

3. How We Use Your Information

We use your information to:

• Provide and maintain the Uplifto service
• Enable habit tracking and progress visualization
• Facilitate social features like Circles and cheering
• Generate personalized weekly insights and recommendations
• Send important notifications about your account or the service
• Improve and optimize the App experience
• Respond to your requests or support inquiries

4. Data Sharing and Disclosure

4.1 With Other Users

Certain information is visible to other users based on your choices:

• Your display name and profile photo are visible to Circle members
• Your goal names and progress are shared within your Circles
• Challenge participation is visible to other challenge participants

4.2 With Service Providers

We share data with trusted third parties who help us operate the App:

• Supabase: Database and authentication services
• Google: Authentication via Google Sign-In
• Firebase: Push notifications and analytics

4.3 Legal Requirements

We may disclose your information if required by law, legal process, or to protect our rights, privacy, safety, or property.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication via trusted providers
• Regular security assessments and updates
• Access controls limiting who can view your data

While we strive to protect your information, no method of electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Portability

You can export a copy of your personal data at any time using the "Export Your Data" feature in Settings > Data & Privacy. You can download your data in JSON or CSV format. You may also contact us directly to request your data.

6.2 Correction

You can update your profile information directly in the App or request corrections by contacting us.

6.3 Deletion

You can delete your account and all associated data through the App settings or by contacting us. Upon deletion:

• Your personal profile data will be permanently removed
• Your goals and completion history will be deleted
• Your membership in Circles will be removed

6.4 Notifications

You can manage notification preferences in your device settings and within the App.

6.5 Additional Rights for EU Users (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Object: You may object to processing of your personal data for direct marketing purposes
• Right to Restrict Processing: You may request that we limit how we use your data
• Right to Data Portability: You may receive your data in a structured, commonly used, machine-readable format (JSON or CSV via our export feature)
• Right to Lodge a Complaint: You may file a complaint with your local data protection authority

Our legal basis for processing your data includes: performance of contract (providing the service), legitimate interests (improving the App), and consent (optional features like mood tracking).

6.6 Additional Rights for California Users (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request information about the categories and specific pieces of personal information we collect
• Right to Delete: You may request deletion of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

Do Not Sell My Personal Information: We do not sell your personal information to third parties. We have not sold personal information in the preceding 12 months.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain anonymized, aggregated data for analytical purposes, but this data cannot be linked back to you.

8. Children's Privacy

Uplifto is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover such data has been collected, we will delete it promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy in the App and updating the "Last Updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us:

• Email: privacy@superstrata.dev
• Company: Superstrata