Privacy Policy

1. Who is responsible

WeUplifted is operated by Sulaiman Baruwa, Marientaler Straße 24, 12437 Berlin, Germany ("we", "us"). We are the controller of your personal data under the EU General Data Protection Regulation (GDPR).

For any privacy question or request, write to hello@weuplifted.com. We answer within one month at the latest.

2. What we collect

Account details. If you create an account: your email address, or the identifier and (if you allow it) the name and email that Apple or Google share with us when you sign in with them. If you use WeUplifted without an account, we create an anonymous guest account that is not linked to your name or email.

Your profile and preferences. The name you choose to be called, your language, time zone, theme, appearance, reminder times, daily goal and the answers you give during onboarding (for example your goals, what is on your mind, and the tone of voice you prefer). We use these to personalise your affirmations.

Your private entries. Mood check-ins (including the reasons and notes you add), journal entries, gratitude, letters, letting-go and reflection exercises, intentions, wins, your own affirmations, poems you keep private, favourites, saved items, breathing and meditation sessions, challenges and your streak. Only you can see these.

Community content. If you join the community: your community name and avatar, posts, comments, likes, the ready-made encouragements you send and receive, poems you choose to share, follows, and your streak as shown on your profile. Other members can see what you share publicly. We also store reports and blocks you make, and reports made about content.

Purchases. If you subscribe to WeUplifted Plus, Apple or Google handle the payment. We never see your card details. We receive your subscription status (for example active, trial, expired), the product and the purchase dates.

Technical data. When the app talks to our servers, they log your IP address, device type, operating system, app version, time of the request and error information, to keep the service secure and working.

WeUplifted shows no ads. We do not use third-party analytics, advertising or tracking tools, and we do not collect your precise location, contacts, photos or microphone.

3. Your private entries and wellbeing data

Your moods, journal entries and similar content can say something about your emotional wellbeing. Under the GDPR this may count as health data, which is specially protected.

We process this data only to show it back to you and give you features you ask for, such as your mood insights, streaks and personalised affirmations. We do so on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give when you choose to write or log it. You can withdraw that consent at any time by deleting the entries or your account.

• Private entries are visible only to you. They are protected by access rules on our database so that other users cannot read them.
• We never use them for advertising, never share them with advertisers and never sell them.
• We do not read them. Access by us is limited to what is strictly necessary to fix a technical problem you report, to keep the service secure, or where the law requires it.
• We do not use your entries to train artificial intelligence models.

4. Why we use your data, and our legal bases

• To provide the app (your account, entries, reminders, personalised feed, streaks, widgets, audio): necessary to perform our agreement with you (Art. 6(1)(b) GDPR).
• Wellbeing data: your explicit consent (Art. 9(2)(a) GDPR), see section 3.
• Community features and keeping the community safe (showing your posts, handling reports, removing harmful content, preventing spam and abuse): performing our agreement with you and our legitimate interest in a safe community (Art. 6(1)(b) and (f) GDPR).
• Subscriptions: performing our agreement with you, and legal obligations such as tax and accounting rules (Art. 6(1)(b) and (c) GDPR).
• Security, error fixing and preventing misuse: our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR).
• Answering your messages to us: performing our agreement or our legitimate interest in helping you.

5. Who helps us run WeUplifted

We use a small number of trusted service providers. They process data only on our instructions, under data processing agreements, and only for the purposes below.

• Supabase, Inc. (USA): database, sign-in, file storage and servers that run the app.
• RevenueCat, Inc. (USA): managing subscriptions and checking whether you have WeUplifted Plus. It receives your account's random user ID (not your name or email) and your purchase information, never your entries.
• Expo (650 Industries, Inc.) (USA): delivers app updates and fixes to your phone. It receives technical data such as your IP address, device type and app version, never your entries.
• Email delivery: sign-in codes and confirmation emails are sent through our email delivery provider, which receives only your email address and the message.
• Google (Google Ireland Ltd. and Google LLC): Sign in with Google, if you use it.
• Apple (Apple Distribution International Ltd. and Apple Inc.): Sign in with Apple and App Store payments.

If you share something publicly in the community, other members can see it. Otherwise we share data only if the law requires it (for example a valid request from a court or authority), to protect someone's life or safety, or as part of a sale or transfer of the app, in which case this policy continues to apply.

We do not sell your personal data.

6. Transfers outside the EU

Some of our providers are based in the USA or may process data there. Where that happens, transfers are protected by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses together with additional safeguards. You can ask us for a copy of the relevant safeguards.

7. How long we keep data

• Your account and entries: for as long as you have an account. You can delete single entries at any time.
• When you delete your account (Settings → Delete account): your profile, private entries, community posts, comments, messages and likes are deleted immediately from the live database. Copies in encrypted backups are overwritten within 30 days.
• Reports about harmful content: up to 12 months after they are resolved, so we can deal with repeated abuse, unless the law requires longer.
• Server logs: up to 30 days.
• Purchase records: Apple, Google and RevenueCat keep records of purchases as required by tax and accounting laws (in Germany up to 10 years).

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and receive a copy;
• have incorrect data corrected;
• have your data deleted ("right to be forgotten");
• restrict how we use your data;
• receive your data in a portable, machine-readable format;
• object to processing based on our legitimate interests;
• withdraw any consent you have given, at any time, without affecting what happened before.

You can edit and delete most data directly in the app. For anything else, email hello@weuplifted.com from the address linked to your account.

You also have the right to complain to a data protection authority, for example the one where you live or ours: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany.

9. Security

Data is encrypted in transit (HTTPS/TLS) and at rest on our servers. Database access rules make sure each person can only reach their own private data. Access to our systems is limited and protected with strong authentication. No system is perfectly secure, but we work hard to protect your data, and we will inform you and the authorities if a breach puts your rights at risk.

10. Children

WeUplifted is not intended for children. You must be at least 16 years old to use it. If we learn that someone under 16 has created an account, we will delete it. If you believe this has happened, contact us at hello@weuplifted.com.

11. Reminders and notifications

Affirmation reminders and Uppy's check-in messages are scheduled on your phone itself and you can turn them off at any time in the app or in your phone's settings. In-app notifications (for example when someone encourages you) are stored with your account so you can see them.

If you add the WeUplifted widget to your home screen, the affirmation and streak it shows are stored only on your phone and removed when you sign out.

12. If you live outside the EU

We apply the same protections to everyone. If you live in a US state with a privacy law (such as California), you have the right to know, access, correct and delete your data. We do not sell or "share" personal data for targeted advertising, and WeUplifted shows no ads. We will not treat you differently for using these rights.

13. Changes to this policy

If we change this policy, we will update the date at the top. If the changes are significant, we will tell you in the app before they take effect.

14. Contact

Sulaiman Baruwa, Marientaler Straße 24, 12437 Berlin, Germany

Email: hello@weuplifted.com