Privacy Policy

2.1 Information You Provide to Us

• Account Information: When you create an account, we collect your name, username, email address, phone number (optional), and password.
• Date of Birth: We ask for your date of birth when you create an account so we can confirm you meet our minimum age requirement, and again, if we do not already hold one, before you enter a prize challenge. Your date of birth is stored privately, is never shown on your profile, and is never shared with sponsors or other users. We use it only to determine age eligibility. It is recorded once and cannot be changed in the app — contact us if you need it corrected.
• Profile Information: You may choose to provide a profile photo, bio, social media links (Instagram, LinkedIn, Facebook, Skool), and other profile customizations.
• Activity Data: Information about your habits, check-ins, streaks, goals, achievements, XP, levels, and progress tracking.
• User-Generated Content: Photos, reviews, comments, messages, and other content you create or share through the Service.
• Social Connections: Information about your partnerships, followers, friends, and accountability relationships within the Service.
• Communications: When you contact us for support or feedback, we collect the information you provide in those communications.

2.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, mobile network information, and device settings.
• Usage Information: How you interact with the Service, including features used, pages viewed, time spent, and interaction patterns.
• Location Information: Approximate location based on IP address and, with your permission, precise location from your device's GPS.
• Log Data: IP address, browser type, access times, pages viewed, and the page you visited before navigating to our Service.
• Crash and Diagnostic Data: When the app crashes or hits an error, we collect a crash report — the error and stack trace, the app version, the device model and OS version, and your account identifier so we can tell whether a fix worked. We do not attach your name, email, check-in content or health data to these reports. They are used only to find and fix defects.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to collect information and improve your experience.

2.3 Information from Third Parties

• Authentication Providers: If you sign in using Google or other third-party services, we receive basic profile information from those services.
• Social Media: If you connect your social media accounts, we may receive information from those platforms in accordance with their policies.
• Analytics Services: We use Google Analytics and similar services that may collect information about your use of the Service.

2.4 Health and Fitness Data

Some habits can be verified automatically from workout data instead of a photo. This is entirely optional, is off until you turn it on, and applies only to the habits you choose.

• Apple Health (HealthKit): With your explicit permission, ShowUp reads two things, and only to confirm that a habit you set to verify automatically was completed: workout records (activity type, distance, duration, start and end time, and which app or device recorded them) for distance-based habits, and your daily step count for step-based habits. Readings you entered into Apple Health by hand are ignored. ShowUp never writes any data to Apple Health — it does not request write access — and reads no other health category.
• Other fitness apps: Apple Health is the only fitness source ShowUp connects to. Apps and devices such as Strava, Garmin, Nike Run Club, Peloton or Apple Watch can write their workouts into Apple Health, and we then read them from Health exactly as described above. ShowUp does not log in to those services, does not hold an account or token for them, and receives nothing directly from them. You control what each app shares with Health inside that app.
• What we store: only the summary values needed to verify a check-in and show it on your habit. We do not build a health profile, and we do not use health or fitness data for advertising, marketing, or any form of profiling.
• Who sees it: the fact that a check-in was verified — and the distance or step count attached to it — is visible to the partners or group members on that habit, and appears publicly only if that habit is set to public. Health data is never sold, and never shared with advertisers, sponsors, or data brokers.
• Turning it off: revoke access at any time in iOS Settings → Health → Data Access & Devices → ShowUp, or disconnect Apple Health in ShowUp under Settings → Integrations. To stop another app feeding Health in the first place, turn off its Apple Health sharing inside that app. Your habits continue to work using photo proof. Deleting your account erases stored activity data along with everything else.

In line with Apple's requirements, health and fitness data obtained through HealthKit is used only for habit verification within the app. It is not used for advertising or marketing, and it is not disclosed to third parties for those purposes.

4.1 Information Shared Publicly

By default, certain information is visible to other ShowUp users, including your username, profile photo, bio, level and achievements, activity on public leaderboards and feeds, reviews and ratings you provide, and content you share publicly within the Service. You can control some of these settings in your account preferences. Your date of birth is never part of this — it is not visible to other users at any privacy setting.

4.2 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Cloud Hosting & Database: Supabase, for account data, habits, check-ins and media storage
• Product Analytics: PostHog, for how the app and site are used
• Crash Reporting: Sentry, for the crash and diagnostic data described in Section 2.2
• Push Notifications: Expo and Apple Push Notification service, for reminders and partner alerts
• Authentication: Google and Apple, for sign-in services
• Website Analytics & Contact: Vercel (hosting), Google Analytics, and HubSpot — these run on theshowup.app only, not inside the app
• Content Moderation: AI-powered moderation services to detect inappropriate content

4.3 Advertising Partners

We may share information with advertising partners to show you relevant ads. These partners may use cookies and similar technologies to collect information about your activities.

4.4 Business Transfers

If ShowUp is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.5 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety.

4.6 With Your Consent

We may share your information for other purposes with your explicit consent.

5.1 General Rights

• Access: You can access and review your personal information in your account settings.
• Correction: You can update or correct your information at any time.
• Deletion: You can request deletion of your account and associated data.
• Portability: You can request a copy of your data in a portable format.
• Objection: You can object to certain processing of your information.

5.2 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and share
• Right to delete your personal information (with certain exceptions)
• Right to opt-out of the sale of your personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at partnerships@theshowup.app.

5.3 European Users (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

5.4 Marketing Communications

You can opt-out of promotional emails by clicking the “unsubscribe” link in any marketing email or adjusting your notification preferences in your account settings.

5.5 Cookies and Tracking

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of the Service.

14.1 California “Shine the Light” Law

California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, contact us at the email address above.

14.2 Nevada Residents

Nevada residents have the right to opt-out of the sale of certain personal information. We do not sell personal information as defined under Nevada law. If you have questions, contact us at partnerships@theshowup.app.

14.3 Data Protection Officer

For users in the European Economic Area, you may contact our Data Protection Officer at partnerships@theshowup.app with any questions about your data rights.