Privacy Policy
Upkeep (“Upkeep”, “we”, “us”) helps you schedule recurring maintenance, delegate tasks to others, and verify they were done with photo proof. This policy explains what we collect, why, and the choices you have. It applies to the Upkeep mobile app.
What we collect
- Account & identity. The email address and/or phone number you use to sign in, your display name, and — if you choose a third-party sign-in (Google, Microsoft, or Apple) — the basic identity that provider returns. We also store your preferences: language, time zone, and country.
- Content you create. The items, maintenance schedules, and tasks you set up, and the proof photos you or your assignees upload to confirm a task was completed.
- Reminders & delegation. If you enable push notifications, a device push token. If you connect Telegram or WhatsApp to receive reminders, the chat identifier needed to deliver them.
- People you share a task with (assignees). Someone you send a task link to does not need an account. To complete the task they only see that one task. For security and abuse-prevention we store a salted hash of their IP address (never the raw IP), retained only briefly.
- Security & diagnostics. Rate-limiting counters, timestamps, and an append-only activity log used to keep accounts secure and operate the service.
Biometrics stay on your device
Face ID / fingerprint unlock is handled entirely by your device’s operating system. Your biometric data is never transmitted to or stored by Upkeep.
How we use your data
- To provide the service: scheduling, reminders, sharing tasks, and verifying proof.
- To secure accounts and prevent abuse (rate limiting, hashed identifiers).
- To deliver notifications over the channels you explicitly enable.
We do not sell your personal data, and we do not use it for advertising.
Who we share it with
We share data only with the infrastructure providers that run the service on our behalf (our database and hosting backend), and only the message content required for a channel you turn on — for example a reminder routed through Telegram, WhatsApp/Meta, an SMS gateway, or email. A task link shares only that single task’s details with the person you send it to.
How we protect it
Data is encrypted in transit. Proof photos live in private storage. Each owner’s data is isolated by row-level security so others cannot read it. Share-link tokens are stored only as a one-way hash, and IP addresses only as a salted hash.
How long we keep it
Account and content data is kept while your account is active. Proof photos are retained according to your retention setting (default 365 days), after which the stored copy is deleted. You can ask us to delete your account and associated data at any time.
Your choices
- Access, correct, or delete your data, including requesting full account deletion.
- Turn notification channels on or off at any time.
- Adjust how long proof photos are retained.
Children
Upkeep is not directed to children under 13, and we do not knowingly collect their data.
Changes
If we change this policy we will update the date above and, for material changes, notify you in the app.
Contact
For any privacy question, or to request access to or deletion of your data, contact us at [email protected].