Privacy Policy
For the Uphill mobile application
1. Who handles your data
The Uphill app is published and operated by Bence Józsa, an individual developer based in Hungary trading as Halom Studios, who acts as the data controller.
For any privacy matter, contact: support@halomstudios.com
2. What data we handle
Only what the app needs in order to work:
- Account: your email address and password. We neither store nor see the password itself — it is handled in encrypted form by the authentication provider.
- Profile: the display name you choose, sex, birth year, height, activity level.
- Goals: starting weight, target weight, target date or daily commitment.
- Daily entries: the day’s energy balance (a single number), the date, and whether you entered it manually.
- Weigh-ins: date and body weight, when you record them.
- Derived data: experience points, metres climbed, streak, peaks reached.
- Teams: which expeditions you belong to and the events generated there.
What we do not collect: location, contacts, photos, advertising identifiers, device identifiers, browsing history. There are no ads, no tracking pixels and no third-party analytics.
3. Why we handle it — legal basis
We process your data to perform our contract with you — that is, to make the app do what you downloaded it for (GDPR Art. 6(1)(b)).
Data about your body weight and physical characteristics may qualify as health data. We process it solely on the basis of your explicit consent (GDPR Art. 9(2)(a)), which you give by entering the data and can withdraw at any time by deleting your account.
We do not profile you for advertising, and there is no automated decision-making that produces legal effects concerning you.
4. Where it is stored
Your data is stored in a database operated by Supabase (Supabase Inc.) running in the European Union. Supabase acts as a data processor.
We use Expo (Expo, Inc.) to distribute and update the application, and the Apple App Store. These providers operate under their own privacy policies.
We do not sell, rent or otherwise share your data with third parties beyond the above.
5. What your teammates can see
If you join an expedition, other members see: the display name you chose, your progress toward your goal as a percentage, the name of your next peak, the length of your streak, and your summit events in the feed.
What they cannot see: your body weight, your target weight, your daily numbers, or your email address.
This is not a settings toggle. The database’s row-level security rules prevent any other user from querying those fields — the restriction is structural, not a matter of the interface.
6. How long we keep it
For as long as your account exists. When you delete your account, all data belonging to you is removed immediately and permanently; there is no archive and no backup from which you could be restored.
7. Your rights
Under the GDPR you may at any time request access to your data, its rectification or erasure, restriction of processing, and data portability; you may also object to processing and withdraw your consent.
Write to support@halomstudios.com for any of these. We respond within one month at the latest.
If you believe your data is being handled unlawfully, you may lodge a complaint with the Hungarian data protection authority (NAIH, naih.hu) or with your local supervisory authority, or go to court.
8. How to delete your account
In the app: Profile → Danger zone → Delete account permanently. You will be asked to type a confirmation word, after which deletion is immediate.
If you cannot access the app, use the web deletion request here.
9. Children
Uphill is not intended for people under 16, and we do not knowingly collect data from them. If we learn that someone under 16 has created an account, we delete it.
10. This is not medical advice
The app estimates using general formulas, and those estimates can be wrong. It does not replace the opinion of a doctor or dietitian. If you have any medical condition, take medication, are pregnant, or plan a large change in weight, speak to a professional first.
11. Changes
If this policy changes materially, we will say so in the app before the change takes effect. The version in force is always the one on this page.