Privacy Policy

1. Who we are and what this covers

Tupp is a productivity service for focus sessions, time tracking, daily checklists, habit tracking, routines and group accountability (Rooms). This policy covers the Tupp iOS app, the Tupp Apple Watch app, the web app at app.tupp.io and this website, tupp.io. When we say "Tupp", "we", "us" or "our" in this policy, we mean the developer of Tupp. If you have questions, contact us.

2. What data we collect

We collect what we need to provide the service:

• Account data — your name, email address, profile picture (if supplied), authentication-provider identifier, and optionally a phone number. You may sign in with Google, Apple, email and password, or phone verification.
• Session data — the sessions you record, including start time, end time, duration, activity type, paused time, notes, and custom field values.
• Profile and productivity data — profile names and colours; activities, routines, tasks and completions; habit logs; points, streaks and badges; and any notes, tags or custom fields you choose to enter.
• Activity data — the activities you create, including names, icons, and colours.
• Location data — only if you enable location-based reminders. We store the coordinates of reminder places and may save a session-start location to suggest a reminder place. We do not collect continuous location history.
• Camera, photos and microphone — only when you use a feature that needs them. If you take or pick a photo to import a schedule with the AI assistant, or choose a profile picture, the app uses the camera or the photo you select. If you speak to the AI assistant, the app uses the microphone and Apple's speech recognition to turn your voice into text; Apple may process that audio under its own privacy policy. We receive the resulting text, not the recording.
• Rooms content — if you join a Room: your membership, the sessions on the activities that Room tracks, and the posts, comments, reactions, reports and blocks you make.
• Support, feedback and waitlist — messages you send through our contact form, in-app feedback (rating, comment, app version, platform and language), help-article ratings, and the email address you give if you join the Android waitlist.
• Device and service data — device push tokens, app version and platform, IP address and country inferred at sign-up, the time you were last active, and limited error-reporting data, used to deliver notifications, prevent abuse, and diagnose faults.
• Website and web app analytics — when you visit tupp.io or app.tupp.io, our own servers record the page address, the referring website (domain only), any campaign tag in the link (such as utm_campaign or ref), your IP address and browser user agent, and the country and device type (mobile, tablet or desktop) derived from them. These records are not linked to your Tupp account.
• Billing data — if you subscribe, we store plan status and provider customer identifiers. Apple and RevenueCat handle personal in-app subscriptions; Stripe handles organization subscriptions. We do not store payment-card details. New accounts may get a free 7-day PRO trial automatically; it needs no payment details, and we only record when it ends.
• App Store offers — when you buy PRO in the App Store, Apple and RevenueCat tell us which offer applied, if any: an introductory free trial, a promotional or win-back offer for past subscribers, or an offer code you redeemed. We use this to unlock PRO and to show you only the offers you're eligible for. Apple decides eligibility and processes every purchase and redemption.

The app asks for camera, photo, microphone, speech-recognition and location access only when you use a feature that needs it, and you can turn each of them off in iOS Settings. We do not access your contacts.

3. How we use your data

• To provide, operate, and improve Tupp
• To sync your data across your devices and the web app via our API
• To manage your subscription, billing status and any free trial
• To calculate your stats, streaks, badges and the weekly Coach digest. The Coach digest is computed on our own servers from your own data; no AI provider is involved
• To provide the optional AI assistant when you use it (see section 4)
• To show your activity to members of Rooms and organizations you join (see section 5)
• To respond to support requests and feedback
• To send service emails and reminders (see section 7)
• To understand, in aggregate, how the website and web app are used, and to keep the service secure

We do not use your data to serve ads. We do not sell your data to anyone.

4. The AI assistant

The AI assistant is optional and only runs when you send it a message. To answer, we send our AI provider, Anthropic: your message and the earlier messages in that chat; the photo, if you attach one; and context from the profile you are using — the names of your activities, your routines and their schedules, your tasks and their schedules, your habits, your timezone and today's date. We do not send your name, email address, session notes or location. Tupp does not keep your chat messages or photos after the reply is generated; only the changes you confirm (for example a new routine) are saved as ordinary Tupp data. Anthropic processes this data as our service provider under its commercial terms.

5. What other people can see

Most of your data is visible only to you. Two features share some of it with other people:

• Rooms — other members of a Room can see your name and profile picture, whether you are focusing right now, the sessions you record on the activities that Room tracks (activity name, time and duration), your position on the Room leaderboard, and the posts, comments and reactions you add. Sessions on other activities are not shared. If you report content or a person, the report, including a copy of the reported content, is stored and reviewed by Tupp staff, who may remove content or restrict accounts. If you block someone, we store the block so we can enforce it.
• Organizations — if you join an organization's workspace in Tupp, its owners and admins (and any role the organization gives analytics access) can see your name, email address and the sessions you track in that organization workspace, including times, durations, activities, session names, notes and custom field values. Your personal profiles outside the organization are not shared with it.

6. Service providers and third parties

We use a small number of service providers, and each receives only what it needs for its task:

• Google and Apple — used for authentication when you choose those sign-in methods.
• RevenueCat and Apple — used to manage personal subscriptions and verify purchases. RevenueCat receives your Tupp account ID (not your name), your purchase and subscription history, including any offer used, and on the web the email and payment details you enter at its checkout, which is processed by Stripe.
• Stripe — used for organization subscription billing.
• Twilio — used to verify a phone number if you choose phone sign-in.
• Anthropic — the AI assistant, only when you use it (see section 4). Apple speech recognition — only when you use voice input.
• Resend — delivers our emails (see section 7). It receives your email address, your name and the content of the email.
• Steppa OS — a customer-management service we use to keep track of our user accounts and customers. For each account it receives the account ID, name, email address, sign-up date, the date the account was last updated, plan (Free or PRO), sign-up country, when you were last active, whether your email address is verified, and your current streak length. When you delete your account, Steppa OS sees only that the account was deleted (no name or email) for 30 days, so that it removes the account as well.
• Sentry — used for error reporting; Google Places — used when you search for a place in location reminders.
• Snapchat, Instagram and Facebook — only if you choose to share a progress card to one of these apps. The image is handed to that app on your device (for Snapchat, through Snapchat's Creative Kit), and what happens next is governed by that app's own policy.
• Google Play — if you join the Android waitlist and are invited to the test, we add your email address to Google Play's tester list.
• Vercel Analytics and Google reCAPTCHA — used on our website for aggregate measurement and to keep spam out of our forms.

7. Emails

We send emails through Resend. Some are essential and always sent: email-verification and password-reset emails, and a "you left a timer running" safety notice if a timer ran for hours without you opening the app. The rest help you get value from Tupp: a nudge if you sign up but haven't started a session yet, a one-time email if you've been inactive for a few days, a nudge when your checklist has gone untouched for a couple of days, and emails about your free PRO week — a welcome when it starts, a recap on day 5 with your own usage so far (number of sessions, time tracked, your top activity and your streak), and a note when it ends. If a paid PRO subscription ends, we may send one email asking what we could have done better; replying is optional. You can turn off all of these optional emails at any time with the unsubscribe link in each email or under Settings → Notifications → Reminder emails. Deleting your account stops all emails.

8. Data storage, security and retention

Your data is stored on secure servers. Personal and user-generated content — including your name, email address, sign-in identifiers, phone number, session names and notes, activity and task details, and room messages — is encrypted at rest in our database. We use HTTPS/TLS for data in transit, and authentication tokens are stored in your device's secure keychain. Account and productivity data are kept while your account is active. When you delete an account, we permanently remove your personal information — name, email, sign-in identifiers, and every note, name, or tag on your sessions, tasks, and habits — and revoke device and notification credentials, so the account can no longer be signed into. We retain an anonymous summary of your monthly usage (for example, total hours by activity), linked only to the disabled account record, with all identifying content stripped out, so you keep the benefit of your history without it identifying you. Expired security tokens and verification records are removed automatically. Website and web app analytics records, including IP addresses, are deleted after 90 days. Device push tokens are kept until your device replaces them or your account is deleted. AI chat messages and photos are not stored by Tupp. Reports, feedback and waitlist entries are kept only as long as we need them for that purpose, or until you ask us to delete them. Service providers may retain data under their own documented schedules.

9. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Request a copy of your data in a portable format
• Object to or restrict how we process your data

On every plan, you can download a copy of your data yourself at any time in Settings, in the app or the web app. It comes as a machine-readable JSON file with your account, sessions, activities, routines, tasks, habits, Rooms posts and other data. You can also delete your account there. For access, correction, restriction, objection, or any other privacy request, or if you'd rather we send your data, contact us.

10. Children

Tupp is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you via the app or by email. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

Questions about this policy? Contact us.

Email: contact@tupp.io