Privacy Policy
The short version
Upheld keeps your health data on your iPhone. There's no Upheld account and no Upheld server that receives it, so we never see it. We don't sell or share your data, we don't use it for advertising, and the app has no ads, analytics or tracking.
Who we are
Upheld is an iPhone app made by Lea Dahms, an independent developer in Wesley Chapel, Florida, United States ("Upheld", "we", "us"). She is responsible for this policy and for how Upheld handles your data. You can reach us at [email protected]. This policy covers the Upheld app and this website, getupheld.app.
What Upheld does
Upheld helps you keep the promises you make about your health and training. You set daily goals and weekly promises, log your workouts, and get graded each week on how you did. Upheld is in early development and testing.
Data the app uses
- From Apple Health, if you allow it: steps, walking, running and cycling distance, active energy, exercise minutes, heart rate, resting heart rate, heart rate variability, sleep, weight, and workouts recorded by an Apple Watch. Upheld only reads this data. It never writes to or changes Apple Health.
- From Oura, if you connect it: sleep, readiness, stress, heart rate, heart rate variability, resting heart rate, activity and workouts. Upheld only reads this data and never changes anything in your Oura account.
- What you enter: goals, promises, check-ins, routines, logged workouts, weight, sick days and settings.
Upheld does not use your location, contacts, photos, camera or microphone. There's no Upheld account yet, so it doesn't ask for your name, email or birthday.
How Upheld uses it
Only to show you your own day, week and progress: your steps and goals on Today, your promises and grade on Week, your workouts on Train, and your reminders and widgets. Nothing else.
Where your data is stored
Everything is stored on your iPhone, in Upheld's own storage. Your Oura sign-in is kept in the iPhone's secure Keychain and expires after about 30 days. Your numbers come to your phone directly from Apple Health and from Oura's servers. They are never sent to us.
Like any app's data, Upheld's data is included in your iPhone's own backups (iCloud Backup or a computer) if you have them turned on. Apple handles those backups under its own privacy policy.
Health data rules we follow
Data from Apple Health and Oura is used only to run Upheld for you. It is never used for advertising or marketing, never sold, never shared with data brokers or anyone else, and never used to make decisions about you such as insurance, credit or employment.
Who else is involved
- Apple provides the App Store, Apple Health, notifications and widgets. If you've chosen to share analytics with app developers in your iPhone settings, Apple may send us anonymous crash reports and usage statistics. These never include your health data, and you can turn sharing off in Settings, then Privacy & Security, then Analytics & Improvements.
- Oura, if you connect it. Your use of Oura is covered by Oura's own privacy policy.
- Buttondown, Cloudflare and Google Fonts for this website, described below.
We may disclose information if the law requires it, but because your health data never reaches us, we have none of it to disclose.
Sign-in with Oura
When you connect Oura, you sign in on Oura's own page. Oura then sends you briefly to a page on app.getupheld.app, which passes the sign-in straight back to the app. The sign-in key travels in a part of the web address that browsers never send to a server, and that page doesn't store or log anything.
Widgets, the Lock Screen and reminders
If you add Upheld widgets, start a workout timer or turn on reminders, some of your numbers (like steps or your next session) appear on your Home Screen, Lock Screen or in notifications. They're created on your phone, and reminders are scheduled on your phone, not sent from a server. Anyone who can see your phone can see them, so you decide which ones to use.
Backups and sharing
If you tap Back up, Upheld saves a file wherever you choose, for example in Files or iCloud Drive. That file contains your Upheld data, including health numbers, and isn't password-protected by Upheld, so keep it somewhere private. If you tap Share after a workout or program, only the summary text you see is shared, with the app you pick.
Security
Upheld's data is protected by your iPhone's built-in encryption and your passcode, Face ID or Touch ID. Connections to Oura use encrypted HTTPS. No method of storage is perfect, so keep your phone locked and its software up to date.
How long it's kept, and deleting it
Upheld keeps your data on your phone until you delete it. Settings, then Delete all data, erases everything Upheld keeps and signs you out of Oura. Deleting the app does the same. Apple Health and the Oura app keep their own data.
To stop Upheld reading Apple Health, go to your iPhone's Settings, then Health, then Data Access & Devices, then Upheld. To stop it reading Oura, disconnect in Upheld's Settings or in your Oura account.
Your rights
Depending on where you live (for example, in the European Union, the United Kingdom or California), you have the right to see, copy, correct and delete your personal information, and to withdraw consent. Because Upheld's data lives on your phone, you can do all of this yourself: everything is visible in the app, Back up gives you a copy, and Delete all data removes it. For anything we hold, such as your email address on our list or emails you've sent us, write to [email protected] and we'll respond within 30 days. You can also complain to your local data protection authority.
We read your health data only with your permission (your consent), and send launch emails only if you sign up. We don't sell or share personal information as California law defines those terms.
The email list
If you sign up on this website, your email address is stored by our email provider, Buttondown, so we can send you Upheld news and launch updates. Every email includes a link to unsubscribe, and we delete your address when you do or when you ask.
If you email us
If you write to us, we keep your message and email address so we can reply, and delete them when you ask. Please don't send health details by email.
This website
This website does not use advertising or tracking cookies. It is hosted on Cloudflare and loads fonts from Google Fonts, so those services may receive basic technical information such as your IP address when you visit.
Where we are
Upheld is run from the United States, and Buttondown, Cloudflare and Google are based there too. If you sign up for the email list from another country, your address is handled in the United States.
Not medical advice
Upheld is not a medical device and does not diagnose, treat or give medical advice. Read the full health disclaimer.
Children
Upheld is not intended for children under 13, and we don't knowingly collect personal information from them. If you think a child has signed up for our email list, write to us and we'll delete it.
Changes
Upheld will grow. Later versions are planned to add accounts (asking for your email, a password, your first name and your birthday, to confirm you're old enough) and optional features that send some information off your phone. Before anything like that arrives, we'll update this page and the date at the top, and tell you in the app. You'll always know what's collected and why before you share it.
Contact
Questions about privacy: [email protected]