2. What Data We Collect
When you use Upwise, we may collect and process the following data:
- Challenge data: Your challenge titles, progress, targets, and units. This data is stored locally on your device and, if you sign in, synced to Firebase Cloud Firestore.
- Authentication data: If you sign in with Google or Email/Password, we process your email address and authentication tokens through Firebase Authentication (operated by Google LLC).
- No tracking or analytics data is collected. We do not use advertising SDKs.
3. How We Use Your Data
Your data is used solely to:
- Display and track your challenges within the app
- Sync your challenge data across devices when you sign in (cloud backup)
- Authenticate your identity for the backup feature
4. Data Storage and Processing
- Local data is stored on your device using SharedPreferences.
- Cloud data is stored in Firebase Cloud Firestore in the EU region (europe-west1), operated by Google LLC.
- Firebase Authentication is provided by Google LLC (Google Ireland Limited for EU users).
5. Data Sharing
We do not sell, rent, or share your personal data with third parties. Data is only processed by:
- Google LLC (Firebase services) — as a data processor under our instructions
6. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access: You can request a copy of your stored data.
- Right to rectification: You can correct any inaccurate data.
- Right to erasure: You can delete your account and all cloud data through the app's Settings screen, or contact us directly.
- Right to data portability: You can request your data in a machine-readable format.
- Right to restriction: You can request that we limit processing of your data.
- Right to object: You can object to data processing at any time.
To exercise any of these rights, contact us at appfactorymalaga@gmail.com.
7. Data Retention
- Local data remains on your device until you uninstall the app or clear app data.
- Cloud data is retained until you delete your account through the app or contact us.
- Upon account deletion, your Firestore data and Firebase Authentication account are immediately removed.
8. Security
We implement appropriate technical measures to protect your data, including:
- Firestore security rules ensuring users can only access their own data
- Authentication via Firebase Auth with industry-standard protocols
- Data transmission encrypted via HTTPS/TLS
9. Changes to This Policy
We may update this policy from time to time. The current version is always available within the app.