HomePrivacy Policy

Privacy Policy

Last updated: 16 September 2026

1. Who we are

UpTicker Ltd (“UpTicker”, “we”, “us” or “our”) provides the UpTicker mobile applications, website and related services (together, the “Service”).

UpTicker helps users plan tasks and routines, build habits, track progress and receive personalised productivity insights and coaching.

For privacy questions or requests, contact:

Email: info@uptickerapp.com

Website: https://www.uptickerapp.com

UpTicker Ltd is the controller of personal data processed through the Service, except where another organisation acts as an independent controller, such as Apple or Google for their own platform and payment services.

2. Scope of this policy

This policy explains:

  • What information we collect.
  • Why we use it.
  • Who it may be shared with.
  • How long we retain it.
  • How users can access, correct or delete it.
  • The choices and rights available to users.

This policy applies to the UpTicker iOS and Android applications, our website and associated services.

3. Information we collect

The information we collect depends on how you use UpTicker and which optional permissions or integrations you enable.

Account and profile information

This may include:

  • Name.
  • Email address.
  • Telephone number.
  • Date of birth or age information.
  • Profile picture.
  • Gender, where voluntarily provided.
  • Country, city, address or postcode, where voluntarily provided.
  • Account creation, login and account-status information.
  • Referral information.
  • Identifiers associated with Apple, Google, Facebook or other login providers.

We do not receive your Apple, Google or Facebook password.

Tasks, habits, routines and goals

This may include:

  • Tasks and to-do items.
  • Habits and routines.
  • Goals and priorities.
  • Completion history.
  • Scheduled dates and times.
  • Notes and categories.
  • Streaks, productivity scores and progress.
  • Focus sessions and time spent on activities.
  • Responses provided during onboarding.

Health and fitness information

If you choose to connect an eligible health or fitness service, UpTicker may access information such as:

  • Activity and exercise information.
  • Steps.
  • Workouts.
  • Sleep information.
  • Heart-rate or related fitness information.
  • Other health or fitness data for which you grant permission.

Depending on your device, this information may come from Apple Health, Health Connect, Google Fit or another service you choose to connect.

Health and fitness access is optional. UpTicker only accesses the categories you authorise and uses them to provide user-facing productivity, routine, recovery and wellbeing features.

We do not sell health or fitness information or use it for targeted advertising.

Calendar and connected-service information

If you choose to connect a calendar or another provider, we may process information required to deliver the requested integration, such as:

  • Calendar availability.
  • Event dates and times.
  • Event titles or details where permission is granted.
  • Provider account identifiers.
  • Connection and synchronisation status.

We do not access connected-service information until you authorise the connection.

Location information

If you enable a feature that requires location, we may process approximate or precise location information according to the permission you grant.

Location access is optional and can be withdrawn through your device settings.

AI Coach information

When you use AI-powered features, we may process:

  • Prompts and questions you submit.
  • Relevant goals, tasks, habits, routines and progress.
  • Responses generated for you.
  • Feedback you provide about AI responses.
  • Technical information required to operate and secure the feature.

We use this information to provide personalised assistance and improve the reliability and quality of the Service.

AI outputs may be inaccurate and should not be treated as medical, legal, financial or other professional advice.

Subscription and transaction information

Purchases are generally processed by Apple App Store or Google Play.

We may receive information such as:

  • Subscription product.
  • Subscription status.
  • Purchase or renewal date.
  • App-store transaction or receipt identifier.
  • Trial and entitlement status.

We do not receive or store your complete payment-card details.

Device, technical and usage information

This may include:

  • Device type and operating-system version.
  • App version and build number.
  • Language and time zone.
  • IP address.
  • Device or installation identifiers.
  • Push-notification token.
  • Login and session timestamps.
  • Screens viewed and features used.
  • Performance, diagnostic and crash information.
  • Security and fraud-prevention events.
  • Consent and permission choices.
  • Advertising or attribution identifiers where permitted by applicable law, your device settings and any required consent.

Communications

If you contact us, join a research programme, respond to a survey or request support, we may retain your message and the information needed to respond.

Website information

Our website may use cookies or similar technologies for essential operation, security, analytics and performance. Where required, non-essential cookies are used only with consent.

Download and campaign links

When you follow one of our download links, such as a link in a social media profile or a campaign, we record the time of the visit, the campaign tag contained in the link, the app store we send you to, the platform we detect from your browser, your browser user-agent string and a one-way hashed version of your IP address. No cookie is set and no account or advertising identifier is involved.

We use these records only to measure which channels lead to app installs. We rely on our legitimate interests in measuring the effect of our own marketing, and we do not use them to identify you or to build a profile about you.

4. How we use information

We may use personal data to:

  • Create and manage your account.
  • Provide tasks, habits, routines, focus tools and progress tracking.
  • Produce personalised recommendations and productivity insights.
  • Provide AI-powered coaching.
  • Synchronise authorised calendars, health services and connected providers.
  • Process subscriptions and maintain entitlements.
  • Send service, security and account messages.
  • Send reminders or marketing communications where permitted.
  • Provide customer support.
  • Measure and improve the Service.
  • Diagnose crashes and technical problems.
  • Protect users and prevent fraud, abuse and unauthorised access.
  • Meet legal, regulatory and accounting obligations.
  • Establish, exercise or defend legal claims.

5. Legal bases

Where UK or European data-protection law applies, we rely on one or more of the following legal bases:

  • Contract: processing required to provide the Service you request.
  • Consent: for optional permissions, connected services, health information, certain analytics, marketing or tracking where consent is required.
  • Legitimate interests: operating, securing and improving the Service, provided those interests are not overridden by your rights.
  • Legal obligation: retaining or disclosing information where required by law.
  • Legal claims: establishing, exercising or defending legal rights.

Where health information is treated as special-category data, we process it with your explicit consent or another legally permitted basis. You may withdraw consent by disconnecting the integration, changing device permissions or contacting us.

6. How we share information

We do not sell personal data.

We may share information with service providers that process it on our behalf, including providers of:

  • Cloud hosting, databases and secure storage.
  • Authentication.
  • AI model processing.
  • Analytics and product-experience measurement.
  • Crash reporting and performance monitoring.
  • Push notifications.
  • Email delivery and customer communications.
  • Subscription and entitlement management.
  • Customer support.
  • Security, fraud prevention and compliance services.

These providers may include services operated by Microsoft, Apple, Google, Firebase, Mixpanel, UXCam, Sentry and other contracted processors used to operate UpTicker.

We require service providers to process information only for authorised purposes and to protect it appropriately.

Apple, Google and other connected providers may process information as independent controllers under their own privacy policies.

We may also disclose information:

  • When required by law, regulation, court order or a lawful authority.
  • To protect the rights, safety or security of UpTicker, our users or others.
  • In connection with a merger, financing, acquisition, reorganisation or sale of assets, subject to appropriate safeguards.
  • When you direct or consent to the disclosure.

Information received from Google APIs is used in accordance with the Google API Services User Data Policy, including its Limited Use requirements.

7. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy.

Our standard retention periods are:

Active account and profile data

Account details, profile information, tasks, habits, routines, goals, progress and connected-service data are generally retained while your account remains active.

If you delete your account, this information is deleted or irreversibly anonymised from active production systems within 30 days, unless a longer period is required for legal, security or fraud-prevention reasons.

Health, fitness, calendar and location information

Information copied to UpTicker’s systems is generally retained while your account remains active and the relevant feature or integration is enabled.

It is deleted or irreversibly anonymised within 30 days after account deletion, subject to the backup period and legal exceptions described below.

Disconnecting an integration stops new collection but does not automatically delete information previously stored. You may request its deletion.

AI Coach content

AI prompts, responses and related personalisation context are retained while needed to provide the feature and maintain your account.

They are deleted or anonymised within 30 days after account deletion unless retention is required for security, legal compliance or the resolution of abuse.

De-identified quality and safety evaluations that can no longer reasonably identify you may be retained for longer.

Authentication and device information

Login-provider identifiers, active sessions and device tokens are retained while required to maintain your account, authentication and notifications.

Invalid push tokens are removed when identified. Remaining account-linked authentication information is deleted or anonymised within 30 days after account deletion, except for security records that must be retained temporarily.

Security, diagnostic and server logs

Routine security, access, diagnostic and server logs are normally retained for up to 90 days.

Download and campaign link records, including the browser user-agent string and the hashed IP address described above, are retained for up to 90 days. Aggregated counts by campaign tag and platform, which do not identify anyone, may be retained for longer.

Relevant records may be retained for longer where required to investigate fraud, abuse, security incidents or legal claims.

Analytics and product-improvement data

Account-linked analytics and product-experience information is normally retained for up to 24 months, subject to provider settings and applicable consent requirements.

Aggregated or irreversibly de-identified statistics that no longer identify an individual may be retained indefinitely.

Support communications

Customer-support messages and related records are normally retained for up to 24 months after the issue is closed.

Records may be retained longer where necessary for an unresolved dispute, security investigation or legal claim.

Subscription, transaction and legal records

Subscription and transaction records required for accounting, tax, fraud prevention or legal compliance may be retained for up to six years after the relevant transaction or the end of the customer relationship.

We do not retain full payment-card details.

Marketing records

Marketing contact information is retained until you unsubscribe, withdraw consent or we determine that it is no longer required.

We may retain a minimal suppression record after you unsubscribe so that we can respect your preference and avoid contacting you again.

Consent records

Records demonstrating consent, withdrawal or privacy choices may be retained for as long as necessary to demonstrate compliance and resolve disputes, normally for up to six years.

Backups

Encrypted backups used for disaster recovery are retained for up to 90 days.

When information is deleted from active systems, it may remain in encrypted backups until the relevant backup expires. Backup copies are isolated from ordinary use and are restored only when required for disaster recovery.

If a backup is restored, deletion requests and account closures are re-applied where technically and reasonably possible.

Legal and security exceptions

We may retain limited information longer where necessary to:

  • Comply with law.
  • Respond to a lawful request.
  • Resolve a dispute.
  • Prevent fraud or abuse.
  • Investigate a security incident.
  • Enforce our agreements.
  • Establish, exercise or defend legal claims.

When no longer required, the information is deleted or irreversibly anonymised.

8. Account and data deletion

You may request deletion using an account-deletion control provided in the app or by emailing info@uptickerapp.com from the email address associated with your account.

We may need to verify your identity before completing the request.

Following verification:

  • Account data is deleted or anonymised from active systems within 30 days.
  • Data may remain in encrypted backups for up to 90 days.
  • Certain transaction, consent, security or legal records may be retained for the limited periods described above.
  • Information held by Apple, Google or another independent provider must be managed through that provider.

You may also request deletion of particular information without deleting your entire account, where applicable.

9. Your choices and rights

Depending on your location, you may have the right to:

  • Access personal data we hold about you.
  • Correct inaccurate information.
  • Request deletion.
  • Restrict or object to processing.
  • Withdraw consent.
  • Request a portable copy of certain information.
  • Opt out of marketing.
  • Complain to a data-protection authority.

Withdrawing consent does not make earlier processing unlawful.

UK users may complain to the Information Commissioner’s Office. We encourage you to contact us first so we can try to resolve the issue.

To exercise a privacy right, contact info@uptickerapp.com.

10. Permissions and connected services

You can manage app permissions through your device settings.

You may withdraw access to health, fitness, calendar, location, notifications or other optional data at any time. Some features may stop working if permission is withdrawn.

You can also revoke connected-account access through the relevant Apple, Google or third-party account settings.

11. International processing

UpTicker and its service providers may process information in the United Kingdom and other countries.

Where required, we use appropriate safeguards for international transfers, such as adequacy regulations, contractual protections or other lawful transfer mechanisms.

12. Security

We use administrative, organisational and technical safeguards designed to protect information, including access controls, encryption, monitoring, backups and restricted production access.

No system can guarantee absolute security. If you believe your account or information has been compromised, contact us promptly at info@uptickerapp.com.

13. Children

UpTicker is not directed to children under 13, and we do not knowingly collect personal data from children under 13 without appropriate authorisation.

If you believe a child has provided information unlawfully, contact us and we will investigate and delete it where required.

14. Third-party services and links

The Service may link to or integrate with third-party services. Their privacy practices are governed by their own policies, and we encourage you to review them before connecting an account or providing information.

15. Changes to this policy

We may update this policy when our Service, legal obligations or data practices change.

We will publish the updated policy at this URL and revise the “Last updated” date. Where a change materially affects your rights or how we use personal data, we will provide additional notice where required.

16. Contact us

For questions, requests or complaints concerning this policy or personal data, contact:

UpTicker Ltd

Email: info@uptickerapp.com

Website: https://www.uptickerapp.com