Privacy Policy
For the Uphill mobile application
1. Who handles your data
The Uphill app is published and operated by Bence Józsa, an individual developer based in Hungary trading as Halom Studios, who acts as the data controller.
For any privacy matter, contact: support@halomstudios.com
2. What data we handle
Only what the app needs in order to work:
- Account: your email address and password. We neither store nor see the password itself — it is handled in encrypted form by the authentication provider.
- Profile: the display name you choose, sex, birth year, height, activity level.
- Goals: starting weight, target weight, target date or daily commitment.
- Daily entries: the day’s energy balance (a single number), the date, and whether you entered it manually.
- Weigh-ins: date and body weight, when you record them.
- Derived data: experience points, metres climbed, streak, peaks reached.
- Teams: which expeditions you belong to and the events generated there.
What we do not collect: location, contacts, photos, advertising identifiers, device identifiers, browsing history. There are no ads, no tracking pixels and no third-party analytics.
3. Why we handle it — legal basis
We process your data to perform our contract with you — that is, to make the app do what you downloaded it for (GDPR Art. 6(1)(b)).
Data about your body weight and physical characteristics may qualify as health data. We process it solely on the basis of your explicit consent (GDPR Art. 9(2)(a)), which you give by entering the data and can withdraw at any time by deleting your account.
We do not profile you for advertising, and there is no automated decision-making that produces legal effects concerning you.
4. Where it is stored
Your data is stored in a database operated by Supabase (Supabase Inc.) running in the European Union (Frankfurt). Supabase acts as a data processor.
System messages — email confirmation and password reset — are sent on our behalf by Resend (Resend, Inc.) through European servers. Resend receives your email address and the contents of the message; we do not use it for marketing and do not pass it on.
This website, and the forwarding of mail sent to halomstudios.com, are provided by Cloudflare (Cloudflare, Inc.).
We use Expo (Expo, Inc.) to distribute and update the application, and the Apple App Store. These providers operate under their own privacy policies.
Every provider listed above acts as a data processor on our instructions. We do not sell, rent or otherwise share your data with third parties beyond the above.
5. Cookies and local storage
This website uses no cookies. There is no analytics, no tracking code, no embedded third-party content and no externally loaded font — so we do not ask for consent either: there is nothing to consent to.
Cloudflare, which serves the site, may place a strictly necessary security cookie in your browser to filter out attacks. It does not identify you as a person, does not track your browsing, and is required for the service to work — the law does not require consent for cookies of this kind.
The app itself stores a few settings on your phone (your chosen language, the reminder state, your sign-in session). These never leave your device and never reach us.
6. What your teammates can see
If you join an expedition, other members see: the display name you chose, your progress toward your goal as a percentage, the name of your next peak, the length of your streak, and your summit events in the feed.
What they cannot see: your body weight, your target weight, your daily numbers, or your email address.
This is not a settings toggle. The database’s row-level security rules prevent any other user from querying those fields — the restriction is structural, not a matter of the interface.
7. How long we keep it
For as long as your account exists. When you delete your account, all data belonging to you is removed immediately and permanently; there is no archive and no backup from which you could be restored.
8. Your rights
Under the GDPR you may at any time request access to your data, its rectification or erasure, restriction of processing, and data portability; you may also object to processing and withdraw your consent.
Write to support@halomstudios.com for any of these. We respond within one month at the latest.
If you believe your data is being handled unlawfully, you may lodge a complaint with the Hungarian data protection authority (NAIH, naih.hu) or with your local supervisory authority, or go to court.
9. How to delete your account
In the app: Profile → Danger zone → Delete account permanently. You will be asked to type a confirmation word, after which deletion is immediate.
If you cannot access the app, use the web deletion request here.
10. Children
Uphill is not intended for people under 16, and we do not knowingly collect data from them. If we learn that someone under 16 has created an account, we delete it.
11. This is not medical advice
The app estimates using general formulas, and those estimates can be wrong. It does not replace the opinion of a doctor or dietitian. If you have any medical condition, take medication, are pregnant, or plan a large change in weight, speak to a professional first.
12. Changes
If this policy changes materially, we will say so in the app before the change takes effect. The version in force is always the one on this page.