Last updated: 6 September 2026
UpliftBuddy exists to help you recover — and recovery requires trust. This notice explains, in plain language, what data we collect, why, who processes it on our behalf, and the choices you have. The short version: we collect the minimum we need, we never sell your data, we show no ads, and your recovery data is used for one purpose only — helping you. Questions: support@upliftbuddy.com.
Account data: your name, email address, password (stored only as a secure hash — we cannot read it), your stated age (to confirm you are 18+; we do not collect your date of birth), and whether your email is verified. If you sign in with Google, we receive your name, email, and profile picture from Google; we never receive your Google password.
Recovery data: what you choose to enter — daily check-ins (including slips and, optionally, when they happened), reflection notes, journal entries, your answers to plan and lifestyle questions, habits, your EARN effort-and-reward tasks, and your conversations with Iro (Pro). This is sensitive by nature, and we treat it that way.
Subscription data: your membership tier and subscription status. Payments are handled entirely by the Apple App Store or Google Play when you subscribe through the app — we never see or store your card, bank, or full payment details. The app store processes your payment under its own terms and privacy policy, and shares with us only what we need to confirm your subscription is active (for example, a purchase confirmation), not your payment method.
Technical data: basic logs needed to run and secure the Service (such as timestamps and error reports). We do not run third-party advertising or cross-site tracking, and we do not build advertising profiles.
When you write a journal entry, you can choose to turn on “Share with UpliftBuddy.” This is off by default and entirely optional. If you turn it on for an entry, that entry is submitted to us so we can, over time, build anonymous, aggregated recovery overviews that help other people on the same path. Your identity stays private: shared entries are not published with your name or email, and are reviewed before being used. You can stop sharing an entry at any time from the entry’s menu, and you can simply leave the toggle off to keep every entry private to your account. Entries you do not share are never used for this purpose.
Content Shield is an optional tool that helps you block adult sites by pointing your phone’s built-in Private DNS setting at a free public filtering resolver operated by Cloudflare. This is configured in your device’s own settings and runs on your device — your browsing does not pass through UpliftBuddy, and we do not see, log, or store the sites you visit. When enabled, your device’s network requests are handled by Cloudflare’s public resolver under Cloudflare’s own privacy policy. You can turn it off at any time in your device settings.
Privacy is not only about servers. You can set a 4-digit app lock in Settings; the PIN is stored in your device's secure keystore, never leaves the device, and is never sent to us. Our notifications and email subject lines are deliberately neutral (for example "Your 10-second check-in") so nothing about what UpliftBuddy is for appears on a lock screen or in a shared inbox. The app is named UpliftBuddy everywhere, with no wording about its purpose on your home screen.
Pro features (Iro chat, plan generation, insights) are powered by Anthropic (Claude), which processes the relevant text to generate responses — for example, your message to Iro, or a summary of your recent check-ins when composing insights. We send the minimum context needed, our provider processes it as a service provider on our behalf, and we do not permit its use for advertising. AI outputs are generated for you and stored in your account like any other content of yours. We use Anthropic's commercial API, under which your messages are not used to train their models. We do not send your name or email address with these requests.
One page on our site - the post-checkout confirmation page - carries a Google Ads measurement tag so we can tell that our advertising led to a subscription. It carries no account information.
We also use Google Analytics to understand, in aggregate, how people find and use the website - which pages are visited, from which channels, on which kinds of devices. Google Analytics uses cookies. We do not send it your name, email address, account id, or anything you write in the app; your check-ins, chats and recovery data are never shared with it.
We use a small number of infrastructure providers, each bound to process data only to provide their service to us: cloud hosting for our application and database, an email delivery provider for verification codes and service emails, Google (only if you choose Google sign-in), Anthropic, our AI model provider (Section 6), and the Apple App Store or Google Play when you subscribe (they process your payment; we do not). We do not sell or rent personal data to anyone, and we do not share your recovery data with advertisers or data brokers — ever.
All traffic is encrypted in transit (HTTPS). Passwords and one-time codes are stored only as cryptographic hashes. Access to production systems is restricted. No system is perfectly secure, but minimising what we collect in the first place is our strongest protection — for example, we never store your date of birth or payment details at all.
Iro conversations are automatically deleted after 90 days. Iro only reads your most recent messages, so nothing useful is lost, and it means there is far less stored about you at any moment. We keep your other data while your account is active so the Service can work for you. You can delete your account at any time from the app's settings; this permanently deletes your account and recovery data from our production systems, with residual copies removed from backups on their normal cycle. Any billing records that the Apple App Store or Google Play must retain for tax and accounting law (such as invoices) are kept by them under their own policies; we do not hold your payment records.
We honour applicable data-protection laws, including India's Digital Personal Data Protection Act and, where it applies, the EU/UK GDPR.
Our infrastructure providers may process data in countries other than your own. Wherever data is processed, this notice and our providers' contractual commitments continue to apply.
If we make material changes, we will notify you by email or in-app before they take effect.
UpliftBuddy · support@upliftbuddy.com
Terms of Service · Refund & Cancellation Policy · Disclaimer