Privacy

Who is responsible

Treebook AS (Norway) is the data controller for this website and for UpandOut. You can reach us at hello@upandout.app.

What this website collects

No form, no account and no cookies. To learn which parts of the page help people, we count visits with Vercel Web Analytics: the pages viewed, the page that sent you here, your country, your browser and kind of device, how far down the page you read, and taps on a few buttons (such as Get the app). It sets no cookies, stores no IP address and cannot tell who you are or follow you to other sites. Visits are counted in aggregate, and the counts are never sold or shared.

This website sets no cookies

There are no cookies, no advertising pixels and no advertising or cross-site trackers on this site. That is why you were not asked to accept anything.

What UpandOut collects

The app is a separate matter from this website. Without an account, your mornings stay on your phone and none of the account data in this section is sent to us. Weather and maps still come from the services in the next section.

When you create an account we store your sign in identity (your email address and, if you sign in with Google or Apple, the account ID and name they give us), a display handle, a display name and the picture scene you choose.

We back up the record of each morning you win so it survives a new phone: the day, when you got out, the day number, the distance, your streak, the audience you chose and, for a Friends morning, its note and photo.

We also back up what each morning measured, in a separate record only you can read: when the alarm rang and when you got out, the size of your zone, the temperature and kind of weather, and the length and duration of your walk. The sleep and mood ratings you give on a 1 to 5 scale are health related data, so they are backed up only if you say yes when the app asks. Until then, and if you say no, they stay on your phone.

Each morning has an audience you choose. A Friends morning is shared with the friends you have added: its photo, its note, the distance and your streak. A Private morning is visible only to you, and its photo and note stay on your phone.

If you use friends, we store who you are friends with, the reactions you leave, and the invite codes you send and who claimed them. If you use cloud dictation, we count how many notes and seconds you dictate each day, so the service has a daily limit. If the app lends you a snooze or a sick day because the store could not sell it, we store how many of each you still owe, so a new phone keeps the same count.

Location is used on your device to decide whether you have left your zone. Your route, your map and your coordinates are never stored on our servers.

We do not sell data, and we do not share it with advertisers. There is no advertising and no analytics tracker in the app.

Who else receives data

Supabase hosts our database, sign in and photo storage in the EU (Stockholm, Sweden). Everything described above is stored there.

Groq, in the United States, turns a dictated note into text. Before the first cloud dictation the app asks you to agree. The recording is sent through our server, turned into text and deleted straight after; it is not stored by us. If you say no, your phone’s own speech recognition is used instead, which Apple or Google may process under their terms.

MET Norway (the Norwegian Meteorological Institute) provides the weather forecast. It receives the coordinates of your position, or of a place you searched for, to about 10 metres, with no account or device ID. Place search and place names use your phone’s own map service, run by Apple or Google.

Mapbox, in the United States, draws the maps. Your phone asks it for the map tiles of the area on screen, so it learns which area you are viewing. The app switches off Mapbox’s own usage statistics.

OpenFreeMap, an open map service, supplies the plain map drawn around your zone, and the app checks it can reach it while the alarm rings. Your phone asks it for the map tiles of that area, so it learns which area you are viewing. It gets no account or device ID.

Vercel, in the United States, hosts this website and counts its visits as described above, without cookies and without storing your IP address.

Google and Apple handle sign in with Google and sign in with Apple. The App Store and Google Play handle payments and subscriptions: we never see your card, only whether a subscription is active.

Where data goes to the United States, it is protected by the safeguards the law requires, such as the European Commission’s standard contractual clauses.

Why we may use it

We store your account, your mornings, your stats, your friends and any snoozes or sick days you owe because you asked for an account that keeps them and shares what you choose. That is the contract between us.

We back up your sleep and mood ratings only with your explicit consent, the yes you give when the app asks. You can take it back at any time, and the ratings then stay on your phone and are removed from our servers.

We send a dictated note to transcription and share a Friends morning because you chose to. That is your consent too, and you can take it back: stop dictating, set a morning to Private, or delete your account.

We keep the daily dictation count and the diagnostic log from test versions because we have a legitimate interest in stopping abuse and in finding faults in the alarm.

How long we keep it

Your account, mornings, stats, photos, friends, reactions, invites, dictation count and any snoozes or sick days you owe are kept until you delete them or delete your account. Deleting your account removes all of it at once; a copy can remain in a rolling backup for up to 30 days.

A photo you take back to Private is removed from our storage. Diagnostic logs from test versions are deleted after 30 days.

Diagnostic logs

The app keeps a short log on your phone of what the alarm did, so a problem can be found. It never leaves your phone unless you share it yourself from the app. Test versions used by our own team send this log to our hosting, where it is kept for 30 days.

Your rights

You can ask for a copy of your data, ask for it to be corrected, or ask for all of it to be deleted. Write to hello@upandout.app. Account deletion is also available inside the app and is described on our deletion page. Download my data on the My Account page saves a copy of what the app keeps on your phone, with your photos, wherever you choose. For a copy of what our servers hold, write to us.

If you think we have handled your data badly, you can complain to your national data protection authority.