This Privacy Policy describes how Upgoo (“we,” “us,” or “our”) collects, uses, and shares information when you use the Shared Rhythm mobile application and related services (collectively, the “Service”). By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
1. Information we collect
We collect information that you provide and information generated when you use the Service, including:
- Account information. When you sign up or sign in, we may collect your email address through our authentication provider. We may also assign or display a username (including an automatically generated default username) so you can be identified within shared rhythms.
- Rhythm and profile content. Information you add in the app related to rhythms you create or join (for example, rhythm names, descriptions, schedules, and membership in a rhythm), which may be visible to other participants as designed by the Service.
- Device and technical data. We may collect device-related and diagnostic information that helps the app operate securely and reliably (for example, device type, operating system version, app version, and identifiers used for delivering notifications).
- Push notification tokens. If you enable notifications, we collect tokens or similar identifiers used to deliver push notifications to your device.
- Usage and analytics data. We may collect usage, performance, and crash-related information to understand how the Service is used and to improve stability and features.
We do not intentionally collect precise location data through this Policy’s described processing. If we add new categories of personal information, we will update this Privacy Policy as appropriate.
2. How we use information
We use the information above to:
- Provide, maintain, and improve the Service;
- Create and manage your account and authentication;
- Display rhythms, members, and invite flows as intended by the app;
- Send transactional communications and push notifications related to the Service (where you have enabled them);
- Monitor and analyze usage and performance, debug issues, and help prevent abuse or fraud;
- Comply with law and enforce our terms where applicable.
3. How we share information
We share information only as described in this policy:
- Service providers. We use third-party services to operate the Service, including cloud hosting, authentication, database storage, messaging, analytics, and crash reporting (see Section 4). These providers process information on our behalf under contractual safeguards.
- Other users. Information you contribute to a shared rhythm (such as your username and rhythm participation) may be visible to other members of that rhythm, depending on how the Service works.
- Legal and safety. We may disclose information if we believe disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Upgoo, our users, or others.
- Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to restrictions required by law.
We do not sell your personal information.
4. Third-party services
We use Google Firebase and related Google services to provide core functionality, which may involve processing data on Google’s infrastructure. This includes, depending on our implementation:
- Firebase Authentication for sign-in;
- Cloud Firestore (or other Firebase/Google Cloud data stores) for storing app data;
- Firebase Cloud Messaging for push notifications;
- Firebase Analytics and Firebase Crashlytics (or similar) for usage and crash diagnostics.
These providers have their own privacy notices. We encourage you to review Google’s privacy documentation and Firebase terms for more detail on how they handle information.
5. Data retention
We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary based on the type of data and how it is used. You may request deletion of your account or personal information as described below, subject to applicable law and legitimate business needs (for example, security logs retained for a limited period).
6. Security
We implement reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
7. Children’s privacy
The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us and we will take steps to delete it where required.
8. International users
If you access the Service from outside the country where we or our service providers operate, your information may be transferred to, stored in, and processed in other countries where data protection laws may differ. Where required, we will use appropriate safeguards.
9. Your choices and rights
Depending on your location, you may have rights to:
- Access, correct, or update certain information;
- Request deletion of your personal information;
- Object to or restrict certain processing;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with a data protection authority.
You can contact us to exercise these rights. We may need to verify your identity before fulfilling certain requests. You may also be able to manage notifications in your device settings or within the app where available.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy with a new effective date and, where appropriate, provide additional notice (for example, through the app). Continued use of the Service after the effective date means you accept the updated policy.
11. Contact us
For privacy-related questions or requests, contact us at: upgoo.tech@gmail.com