Privacy Policy

1. Who operates UpAI

UpAI is operated by Ali Tanriyar. In this policy, “UpAI,” “we,” and “our” refer to the app and its operator.

2. No UpAI account

UpAI does not require an UpAI account and does not create a profile containing your name or email. A random anonymous installation identifier authorizes protected backend features. It is linked to operational records inside UpAI systems but is not an advertising ID.

3. Data stored on your device and in private iCloud

Alarm definitions, your wake-up QR code, streak, and completed or missed wake-up history sync through your private iCloud database. Language and theme may sync through iCloud key-value storage. Alarm activation, current ringing state, and device permission state stay on each device. A synced alarm does not automatically activate on a second device.

Apple operates iCloud under your Apple Account and Apple’s privacy terms. UpAI does not copy QR codes or alarm definitions into Supabase.

4. Operational data sent to Supabase

UpAI stores operational telemetry under the anonymous installation identifier. That data can include an alarm ID; mission type, result, failure reason, and target; alarm events such as started, completed, missed, or snoozed; and timestamps.

Object verification records can also include the alarm ID, target, request status, AI provider and model, confidence, reason, request counts, and timing. We use this data for app functionality, rate limits, reliability, support, fraud prevention, and product analytics. We do not use it for advertising or cross-app tracking.

Supabase authentication and security audit logs may contain the anonymous user ID, IP address, and user-agent or device information. This linked device and other diagnostic data supports authentication, security, fraud prevention, and support. Security audit and provider logs follow Supabase retention and security or legal requirements and may remain after an in-app deletion.

5. Camera and Object AI

QR scanning is processed on your device. For an Object AI mission, UpAI sends one compressed still image only after you tap Verify. The image travels through the UpAI verification service to its AI processor. UpAI does not save the image in its database and requests non-stored AI processing. The AI provider may process or retain request data under its API data policies and safety requirements.

6. Subscription and purchase data

Apple processes purchases, payment methods, billing, refunds, and cancellation. UpAI receives signed transaction information and keeps limited product, status, date, environment, and original transaction identifiers in a Supabase subscription ledger. UpAI never receives your payment-card details.

The ledger is not tied to a user-facing UpAI account. It is retained for purchase verification, billing support, fraud prevention, server notification processing, and legal obligations.

7. Data categories and purposes

• User ID: the anonymous installation identifier, for app functionality.
• Photos or videos: the Object AI still image, for app functionality.
• Product interaction and other usage data: alarm and mission telemetry, for functionality, reliability, support, and analytics.
• Purchase history: signed subscription status and identifiers, for entitlement and billing functionality.
• Device ID: the anonymous identifier and device information in authentication or security logs, for app functionality and security.
• Other diagnostic data: IP address and user-agent information in security audit logs, for authentication, security, fraud prevention, and support.

None of these categories is used for tracking.

8. Retention and deletion

Installation-linked operational Supabase records are retained until Delete My UpAI Data succeeds. Object images are not stored in the UpAI database. The subscription transaction ledger is retained as described above. Daily Object AI attempt totals are also retained by Apple subscription transaction identifier after deletion to enforce usage limits and prevent abuse. These totals contain no installation or alarm identifiers, images, or object targets.

Delete My UpAI Data immediately clears local data and schedules deletion from private iCloud and the anonymous Supabase installation. If a service is unavailable, deletion remains pending and UpAI blocks creation of replacement alarms or QR data. Connect to the internet and tap Retry on the pending-deletion screen. If the iCloud account changed, reconnect the account that held the data. Data deletion does not cancel an Apple subscription. Supabase security audit and provider logs follow their own retention and security or legal requirements.

9. No sale, advertising, or tracking

UpAI does not sell personal information, show third-party advertising, use advertising identifiers, or combine app data with third-party data for advertising measurement or targeting.

10. Security, children, and changes

We use access controls, signed requests, least-privilege database policies, and transport encryption. No system can promise absolute security. UpAI is not directed to children under 13. We may update this policy as the app changes; the effective date above will change when a material revision is published.

11. Contact