På svenska

Your data, and your consent

Upbound reads health data — sleep, steps, heart rate, workouts — and, if you allow it, your calendar, so your coach can see how your days really go. Health data is sensitive, so we ask for your explicit consent before we read any of it. This is what happens to it.

What we keep

• Your e-mail address and your sign-in.
• What you tell us during setup: age group, gender, role and your targets.
• The health data you give access to in Health Connect or Apple Health: steps, heart rate, heart rate variability, sleep, workouts, weight and more.
• Your calendar events, if you choose to share them.
• Your conversations with the coach, and what it remembers and works out about you.

Where it goes

• Everything is stored in our database (Supabase) on a server in the EU, run by Elestio.
• The coach’s chat and the reading of quick inputs are done by Google’s Vertex AI in the EU (Google’s EU multi-region), so this processing stays in the EU. Google does not train its models on what is sent, but may keep it for a short time to detect abuse.
• Notifications are delivered through Google Firebase.
• The web version of the app is served through Cloudflare. The phone app talks to our server directly.
• We do not sell your data or use it for ads, and no one beyond the services above receives it.

Your choices

• Calendar and health access are optional: you can skip them now, and turn them off later in your phone’s settings.
• You can read this notice again at any time under Profile.
• We keep your data until you delete your account. An account nobody has signed in to for a year is deleted, with its data.
• You can download a copy of your data at any time: Profile → Manage my personal account → Download my data. You can also ask us to correct it.
• If you think we handle your data wrongly, you can complain to a data-protection authority: in Switzerland the FDPIC, or the one in your own country.
• To withdraw your consent, delete your account: Profile → Manage my personal account → Delete the account. That deletes your data from our database and from the coach.

What deletion does not reach yet

• The system that runs our background jobs keeps a log of each run, and those logs are not yet cleared automatically, so parts of a request can remain there after your account is deleted.
• Database backups keep what they hold until they expire.
• Google may keep requests for a short time to detect abuse.

Questions

Upbound Sàrl publishes this app and is responsible for your data. For questions about your data, write to support@upbound.ch, or use Send feedback in the app (shake your phone).

The same text the app shows under Profile → Privacy notice. Last updated 27 October 2026.