Privacy policy

Effective 17 September 2026

Uphill is a private ledger of what you own and owe, month by month, with optional competitions between people you know. This policy says what we store about you, why, who can see it, and what you can do about it.

Who is responsible

Uphill is run by Bogdan-Florin Cutur, an individual, who is the data controller for your personal data. You can reach us at support@uphilltracker.com.

What we store

Your account

Your email address and display name.
Your password, held by Firebase Authentication (Google). We never see it. If you sign in with Google, we receive your name and email from Google.
Your settings: main and display currencies, time zone, appearance, privacy choices, and which version of the terms you accepted and when.
If you choose to give them, your age range and the country you live in. Both are optional and you can clear them at any time.

Your figures

Your ledgers, categories and monthly figures, including estimates, and for holdings the instrument and how many you hold.
Your milestones.
When you import a file, it is read in your browser. Only the categories and figures you approve are sent to us, never the file itself.

Competitions and your circle

The competitions you are in, and which of your categories you chose to disclose in each.
The people you are connected with, invitations you send or receive — including an email address you type to invite someone — and invite links you create.

Premium

If you press a Premium plan before it can be bought: which plan, where you pressed it, and whether you asked us to email you once when it opens. You can withdraw that request at any time.

Technical data

Server logs — IP address, the page or request, and the time — kept for security and to fix faults, for 30 days.
To limit how often an invite link can be looked up, a one-way hash of your IP address, kept for one minute.
Error reports, which never contain your figures.
Analytics, only if you agree: we ask once, when you first sign in, and you can change your answer at any time under My Account, Privacy. Your answer and when you gave it are stored with your account. If you agree, we record which kinds of screens are used, your device and browser type, and Google's analytics identifiers — never a figure, a name, a competition, or an id. Google keeps this for 14 months. Our public pages, including the home page, use no analytics at all.

On your device

Your sign-in session and your appearance and view preferences, which Uphill needs to work. If you agree to analytics, Google Analytics also stores its identifiers on your device; if you do not, nothing is stored for it.

Why we use it

To provide Uphill to you — your account, your ledger, the figures we derive from it, and competitions you join. This is necessary for our agreement with you.
To keep it secure and working — preventing abuse, fixing faults. This is our legitimate interest.
With your consent — analytics, the one email about Premium opening, and your age range and country, which are used only in aggregate to compare members with people like them and are never shown to anyone.
Where the law requires it.

We do not sell your data, we do not show you advertising, and we never ask for bank credentials. We make no automated decisions about you that have legal or similarly significant effects.

To have an account you must give an email address, which we need to sign you in. Everything else — your name aside, which you can choose freely — is optional, and not giving it only means the feature that uses it is not available to you.

Who can see it

Other members see only what you disclose: the categories you choose for a competition, from the month your membership starts. Everything else in your ledger is visible to nobody but you.
People connected to you see your display name. An invite link's preview never shows figures or your email address.
When you leave a competition, or an owner removes you, the members still in it see a notice with your display name for up to sixty days. If you delete your account, that notice says only that a former member left.
Us. Your email address and name are encrypted in our database, so the figures stored there are not linked to you on sight. Uphill still has to compute every total, so this is not end-to-end encryption, and we do not claim it is.
The services that run Uphill for us, only as far as they need to:
- Google Cloud — the application and the database, in Belgium (EU). Pages reach you through Google's global network (Firebase Hosting).
- Firebase Authentication and, if you agree, Google Analytics — Google, in the United States.
- Cloudflare — our domain name, and forwarding email you send to our support address.
- Sentry — error reports, without figures.
- Resend — delivering email.
- Twelve Data — market prices. We send it only the instrument symbols being priced, never anything about you.

Exchange rates are published by the European Central Bank (ECB) and residential property price statistics by the Bank for International Settlements (BIS) alongside national central banks and statistical offices. Market prices are provided by Twelve Data. We fetch public data from them and send nothing about you.

Transfers outside the EU

Firebase stores your email address and sign-in identity in the United States, and Google Analytics data, if you agree to it, is processed there too. Those transfers rely on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses. Your figures stay in the EU.

How long we keep it

For as long as you have an account.
When you delete your account, your email address, name, sign-in identity, ledgers, figures, milestones, connections, invitations and choices are erased. You leave any competition still running first. Competitions that had already finished keep their record, with your figures in it shown under "Former member" and nothing that names you — so the other members' results do not change.
Backups are kept for 7 days, after which deleted data is gone from them too. If a backup is ever restored, deletions made since are applied again before it is used.

Your rights

You can ask us to:

give you a copy of your data, including in a machine-readable format;
correct it — most of it you can change yourself in the app;
delete it, which you can also do from your account settings;
restrict or object to how we use it;
withdraw consent you gave, without affecting what was done before.

Write to support@uphilltracker.com. You can also complain to the Romanian data protection authority (ANSPDCP) or to the authority where you live.

Children

Uphill is not for anyone under 16.

Changes

When this policy changes, the date above changes with it. If a change affects how your data is used, we will tell you in the app before it takes effect.