1. Information We Collect
We collect information you provide directly and information generated through your use of Up2.
Account Information: When you create an account, we collect your name, email address, username, phone number, and profile photo. We send a 6-digit code to your email address and a 6-digit code by text message to your phone number to confirm both are yours. A phone number can only be attached to one Up2 account. Business and Government accounts also provide an organization name, category or government level, contact phone number, and contact email. A Business account's address comes from Google.
Verification Information: Business accounts sign in with Google and select their Google Business Profile. We receive the business name, address and profile identifier from Google, together with confirmation that you manage that profile. We do not receive your Google password. Government accounts verify an official government email address.
Content You Post: This includes listings, events, photos, descriptions, pricing, dates, and location data associated with your published content.
Messages: We store chat messages you send and receive through Up2's messaging system, including text, images, and other media.
Location Data: With your permission, we collect your device location to show nearby listings and events. You can disable location access in your device settings at any time.
Payment Information: Subscriptions and credits are purchased through in-app purchase, with Apple on iPhone and Google Play on Android. Your payment details are handled entirely by that store and never reach Up2. The store tells us that a purchase happened and what it was for; we store transaction records, billing history, and subscription status from that.
Usage & Analytics: When you view or tap a business's post, we record that it happened so the business can see how its posts are doing. We also note the days you open Up2, so we can see how many people use it. We don't record when in the day, where you are, or what you look at. Search stays on your phone and is not saved.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account.
- Verify Business and Government accounts.
- Display your profile, listings, and events to other users.
- Deliver relevant local and global content based on your location.
- Process subscription payments and credit purchases.
- Send notifications about account activity, messages, and billing.
- Analyze usage patterns to improve features and fix issues.
- Enforce our Terms of Service and prevent fraud or abuse.
- Respond to support requests.
3. How We Share Your Information
We do not sell your personal information. We share data only in the following circumstances:
With Other Users: Your public profile, listings, and events are visible to other Up2 users. If you have a Business or Government account, your profile's name, username and photo are also shown on every listing and event you publish, so members can open your profile and follow you. Messages are visible to conversation participants.
Service Providers: We share data with trusted third-party providers who help us operate Up2, including Apple and Google for payments, Google for business verification, Google Firebase Crashlytics, which receives anonymous crash reports (never your name or account), and providers of cloud hosting, email delivery, text messaging and push notifications. These providers are contractually obligated to protect your data.
Legal Requirements: We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to protect the rights, safety, or property of Up2 or its users.
Business Transfers: If Up2 is acquired, merged, or sold, your information may be transferred as part of that transaction.
4. Location Data
Up2 uses location data to show you nearby listings and events and to help businesses and organizations reach local users. Location data is collected only when you grant permission through your device settings.
We use your approximate location to determine your local area. We save the area you set as your home on your account, along with its country, and we count how many people use Up2 in each country. These are totals only. We do not continuously track your precise location in the background. You can revoke location permission at any time through your device settings, though some features may be limited without it.
Friend Location Sharing: Up2 includes an optional feature that lets you share your live location with friends on the map. It is off by default and shares your location only with the mutual friends you choose, and only while you have it turned on. You can stop at any time, and we never sell your location data.
5. Data Retention
We keep your account information while your account is active.
When you delete something, or your whole account, it disappears from Up2 straight away. We then keep a hidden copy for a limited time, so we can recover from mistakes and answer safety reports and legal requests. After that it is permanently deleted:
• 90 days: your account details (name, username, email address, phone number, profile photo), business and government accounts and their verification details, plans and who was in them, listings and events with their photos, photos sent in chats, messages you unsend, and blocks.
• 30 days: lists, saved items, follows, notifications, business analytics, and photos you replace or remove. A photo is permanently deleted once nothing in Up2 has used it for 30 days.
• 6 years: purchase records (what a business bought and when), as Canadian tax law requires.
To stop free offers being claimed twice and to keep accounts Up2 removed from coming back, we keep a scrambled code made from your phone number and email address after you delete your account. It is used only to recognize a phone number or email that has already used a free offer or belongs to a removed account.
Messages you send to Up2 support, in the app or by email, are deleted 1 year after your request is closed. Records of reports and of decisions about an account are deleted after 2 years. We may keep information longer when the law requires it, or while it is needed for an open safety report or a request from law enforcement.
Chat messages are kept while your account is active. When you delete a message, it is removed from your view but may stay in the other person's conversation. When you unsend a message, it disappears for everyone straight away and we keep a hidden copy for 90 days. If you delete your account, the messages and photos you already sent stay in the conversations of the people you sent them to, shown as “Up2 User” with no name or photo, until they delete those conversations.
Published content (listings and events) stops being shown when you unpublish it, when it goes on hold, or when your account is closed.
6. Your Rights
You have the following rights regarding your personal information:
Access: You can request a copy of your data from Settings › Your Data, choosing what to include and the period, once every 7 days. We email you a private link to view it in your browser and to download the file. Most files are ready within an hour; large ones can take up to 7 days. It includes your own information we still hold after you deleted it. For anything else, contact us.
Correction: You can update your profile information at any time through the app. For other corrections, contact us.
Deletion: You can delete your account through the app settings. This will initiate deletion of your personal information as described in the Data Retention section.
Data Portability: Your download includes a machine-readable copy of your data (JSON).
Opt-Out: You can opt out of non-essential communications through the app's notification settings.
To exercise these rights, contact us at privacy@up2app.com.
7. Data Security
We implement industry-standard security measures to protect your information, including encryption in transit and at rest, secure authentication, and access controls. However, no system is completely secure, and we cannot guarantee the absolute security of your data.
What our staff can see: Staff never read your chats. Staff see only your account details and your public profile. For a Business account, that includes the address Google gave us, kept so we can confirm the business is real. We see private messages, photos or plans only when someone reports them to us, and only the part that was reported: the messages around what was reported, including any photos in them. Every look is recorded.
8. Children's Privacy
Up2 is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has created an account, we will promptly delete it and all associated information.
Users between 13 and 18 should use Up2 with parental awareness. Business and Government accounts are available only to users 18 and older.
9. Third-Party Links & Services
Up2 may contain links to third-party websites or services. We are not responsible for the privacy practices of these external services. We encourage you to review their privacy policies before providing any personal information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through the app or via email. The "Last updated" date at the top reflects the most recent revision.
11. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, contact us at:
