Uphill

Privacy policy

Effective 17 October 2026

Uphill is a private ledger of what you own and owe, month by month, with optional climbing parties with people you know. This policy says what we store about you, why, who can see it, and what you can do about it.

Who is responsible

Uphill is run by Bogdan-Florin Cutur, an individual, who is the data controller for your personal data. You can reach us at support@uphilltracker.com.

What we store

Your account

  • Your email address and display name.
  • Your password, held by Firebase Authentication (Google). We never see it. If you sign in with Google, we receive your name and email from Google.
  • Your settings: main and display currencies, time zone, appearance, privacy choices, and which version of the terms you accepted and when.
  • If you choose to give them, your age range and the country you live in. Both are optional and you can clear them at any time.
  • Your language, so Uphill and its emails reach you in it.
  • The last calendar month you used Uphill while signed in: one month, with no day, device or count of visits. We use it to count how many people use Uphill each month, and to pause the monthly reminder when you have not been back for three months.
  • Whether you have claimed early-access Premium, and when.
  • Your email choices: whether you get the monthly reminder and cheer emails, and the last month each was sent to you.

Your figures

  • Your ledgers, categories and monthly figures, including estimates, and for holdings the instrument and how many you hold.
  • Your goals, each on your whole account, a ledger or a category, and your plans: the routes you save in Goals, with what you add each month, the yearly return and inflation you assume, and the spending and withdrawal rate behind your independence number. Plans are only shown to you.
  • What you say you put aside in a month, when the monthly check-in asks. It is only shown to you.
  • Which months you completed, and which milestones you have already celebrated, so each is celebrated once.
  • The names and notes you give a year in History. Like your other notes, they are only ever shown to you.
  • Your view preferences, such as a chart's range and a party's default view.
  • Any notes you write on a month of a category. Notes are personal: they are only ever shown to you, never to a climbing party, your trail mates or anyone else, and they are erased with your account.
  • When you import a file, it is read in your browser. Only the categories and figures you approve are sent to us, never the file itself.

Climbing parties and your trail mates

  • The climbing parties you are in, and which of your categories you chose to show in each.
  • Cheers: when you cheer someone's month or goal, who sent it, to whom and about what. Only the person cheered and the sender see it.
  • Party scenarios: the monthly amount and yearly return you try out on a party's Goals tab. Everyone in that party sees them; only you can change or delete yours.
  • If you turn it on (it is off unless you do), the shape of your account's climb, without any figures, so your trail mates can see a small mountain on your card.
  • The people you are connected with, invitations you send or receive (including an email address you type to invite someone), and invite links you create.

Premium

  • If you press a Premium plan before it can be bought: which plan, where you pressed it, and whether you asked us to email you once when it opens. You can withdraw that request at any time.

Technical data

  • Server logs (IP address, the page or request, and the time), kept for security and to fix faults, for 30 days.
  • To limit how often Uphill can be called, your IP address is counted in memory for up to a minute and then forgotten. To limit how often an invite link can be looked up, a one-way hash of your IP address is kept for one minute.
  • When you are signed in, Google reCAPTCHA checks that requests to Uphill come from our app in a real browser rather than from an automated script. To do this, reCAPTCHA collects information about your browser and device and how the page is used, and Google turns it into a score. We receive only whether the check passed, never the information behind it. Our public pages, including invite links, do not use reCAPTCHA.
  • Errors from the app, our server and your browser, sent to Google Cloud Logging with every amount, email address and name removed first, and kept for 30 days.
  • Visits to our public pages, counted from the request logs of our hosting (Firebase Hosting): the address requested, the time, your IP address and browser type, kept for 30 days. Public pages still load no analytics.
  • Analytics, only if you agree: we ask once, when you first sign in, and you can change your answer at any time under My Account, Privacy. Your answer and when you gave it are stored with your account. If you agree, we record which kinds of screens are used, your device and browser type, and Google's analytics identifiers, never a figure, a name, a climbing party, or an id. Google keeps this for 14 months. Our public pages, including the home page, use no analytics at all.

On your device

Your sign-in session and your appearance and view preferences, which Uphill needs to work. When you are signed in, the app also keeps a security token from the reCAPTCHA check for up to six hours, and reCAPTCHA stores what it needs to run that check. These are part of keeping Uphill secure, not tracking. If you agree to analytics, Google Analytics also stores its identifiers on your device; if you do not, nothing is stored for it.

Emails we send you

The monthly reminder on the 1st, saying a new month is open, with no figures in it; after three months away it says it will pause, and it starts again when you come back. And a cheer email, at most once a month, when someone in your party cheers you on after the 4th and your month is still open. Both are on by default, and each can be turned off in My Account, Notifications, or with one click in the email itself. Resend delivers these two. The emails your account needs (verification and password reset) are sent by Firebase Authentication.

Why we use it

  • To provide Uphill to you: your account, your ledger, the figures we derive from it, your goals and plans, the monthly reminder and the climbing parties you join. This is necessary for our agreement with you.
  • To understand how much Uphill is used: the month you last used it and visits to the public pages, counted in total and never used to profile you. This is our legitimate interest.
  • To keep it secure and working: preventing abuse, including limiting how often Uphill can be called and checking that requests come from our app, and fixing faults. This is our legitimate interest.
  • With your consent: analytics, the one email about Premium opening, and your age range and country, which are used only in aggregate to compare members with people like them and are never shown to anyone.
  • Where the law requires it.

We do not sell your data, we do not show you advertising, and we never ask for bank credentials. We make no automated decisions about you that have legal or similarly significant effects.

To have an account you must give an email address, which we need to sign you in. Everything else (your name aside, which you can choose freely) is optional, and not giving it only means the feature that uses it is not available to you.

Who can see it

  • Other members see only what you show them: the categories you choose for a climbing party, from the month you joined it, your cheers to them, your party scenarios in that party, and, if you turn it on, your mountain's shape without figures. Everything else is visible to nobody but you.
  • People connected to you see your display name. An invite link's preview never shows figures or your email address.
  • When you leave a climbing party, or an owner removes you, the members still in it see a notice with your display name for up to sixty days. If you delete your account, that notice says only that a former member left.
  • Us. Your email address and name are encrypted in our database, so the figures stored there are not linked to you on sight. Uphill still has to compute every total, so this is not end-to-end encryption, and we do not claim it is.
  • The services that run Uphill for us, only as far as they need to:
    • Google Cloud: the application and the database, in Belgium (EU). Pages reach you through Google's global network (Firebase Hosting).
    • Firebase Authentication and, if you agree, Google Analytics: Google, in the United States.
    • Google reCAPTCHA, when you are signed in: checking that requests come from our app in a real browser.
    • Cloudflare: our domain name, and forwarding email you send to our support address.
    • Google Cloud Logging, in the EU: error reports with amounts, email addresses and names removed, and server logs.
    • Resend: delivering the monthly reminder and cheer emails.

Exchange rates are published by the European Central Bank (ECB) and residential property price statistics by the Bank for International Settlements (BIS) alongside national central banks and statistical offices. Market prices come from publicly available sources. We fetch public data from all of them and send nothing about you: for market prices, only the symbols of the instruments being priced.

Transfers outside the EU

Firebase stores your email address and sign-in identity in the United States, and Google Analytics data, if you agree to it, and the information reCAPTCHA collects are processed there too, as may your email address when Resend delivers an email to you. Those transfers rely on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses. Your figures stay in the EU, and no email carries one.

How long we keep it

  • For as long as you have an account.
  • When you delete your account, your email address, name, sign-in identity, ledgers, figures, notes, year names, goals, plans, what you put aside, celebrations, cheers you sent and received, party scenarios, connections, invitations and choices are erased. You leave any climbing party still running first. Parties that had already finished keep their record, with your figures in it shown under "Former member" and nothing that names you, so the other members' results do not change.
  • Backups are kept for 7 days, after which deleted data is gone from them too. If a backup is ever restored, deletions made since are applied again before it is used.

Your rights

You can ask us to:

  • give you a copy of your data, including in a machine-readable format;
  • correct it (most of it you can change yourself in the app);
  • delete it, which you can also do from your account settings;
  • restrict or object to how we use it;
  • withdraw consent you gave, without affecting what was done before.

Write to support@uphilltracker.com. You can also complain to the Romanian data protection authority (ANSPDCP) or to the authority where you live.

Children

Uphill is not for anyone under 16.

Changes

When this policy changes, the date above changes with it. If a change affects how your data is used, we will tell you in the app before it takes effect.

See also the Terms.