🔒 Privacy Policy

T-Up, developed and operated by Arian Weinbaum, provides a mobile application that helps users estimate and track testosterone-related health indicators and lifestyle habits. This Privacy Policy explains how we collect, use, and protect your information when you use the T-Up app (the "App").

---

1. Information We Collect

We collect only the information necessary to operate the App and deliver its features.

Account Information

• Email address (used for authentication and communication)
• Sign-in method (Apple Sign-In, Google Sign-In, or email OTP — no passwords are stored)
• Age or birth date

Health & Lifestyle Data

• Answers you provide in questionnaires (e.g., sleep, weight, height, habits)
• Weekly check-ins and T-Score entries

Health & Lifestyle Data Use

T-Up collects health-related information (such as sleep patterns, weight, and lifestyle habits) solely to provide you with personalized T-Score estimates and tracking. This data:

• Is never shared with third parties for advertising or marketing purposes
• Is never used for data mining or sold to data brokers
• Remains under your control and can be deleted at any time
• Is not connected to Apple Health, Google Fit, or any external health platforms

Automatically Collected Data

• Device type, operating system, and app version
• Anonymous usage and crash analytics from Supabase and RevenueCat

We do not collect GPS location data, connect to Apple Health or Google Fit, display ads, or sell user data.

---

2. How We Use Information

We use your information to:

• Provide core features (T-Score estimator, tracking, 8-week plan)
• Personalize your experience and progress tracking
• Maintain and improve app performance and stability
• Manage subscriptions and send account-related notifications (e.g., trial-ending emails)
• Respond to support requests and bug reports
• Comply with legal and App Store requirements

We may send limited service-related emails about your account or subscription, but we never send marketing emails without consent.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Performance of contract (to provide app features and subscriptions)
• Legitimate interests (to improve app performance and security)
• Consent (where explicitly requested for optional features)

---

3. Data Storage and Security

All user data is securely stored on Supabase servers located in the EU and transmitted over encrypted connections. RevenueCat manages subscription data and billing through Apple's App Store systems; we never see or store your full payment details.

We apply reasonable administrative and technical measures to protect your data, but no method of storage or transmission is completely secure.

Data Breach Notification

In the event of a data breach that may affect your personal information, we will notify you and relevant authorities as required by applicable law.

---

4. Data Sharing

We only share information with trusted providers who help us operate T-Up:

• Supabase — database and authentication
• RevenueCat — subscriptions and billing
• Apple / Google Sign-In — authentication

These service providers operate under strict data protection agreements:

• Supabase complies with GDPR and uses EU-based servers with encryption
• RevenueCat processes subscription data in accordance with Apple's privacy standards
• Apple/Google Sign-In providers handle authentication under their respective privacy policies

We never sell or share personal information for advertising purposes. These providers process data only on our behalf under contractual obligations to provide the same or equal protection of your data.

---

5. Data Retention and Deletion

We retain your data while your account is active. You can delete your account at any time from the App's settings menu.

When deleted, your personal data is permanently removed from Supabase and dissociated from subscription identifiers in RevenueCat. Backup copies are automatically purged within 30 days of account deletion. Anonymous analytics data may be retained longer for app improvement purposes but cannot be linked back to you.

---

6. Children's Privacy

T-Up is intended for users aged 13 and older. We require users to confirm their age during account creation.

If we become aware that a user under 13 has created an account, we will promptly delete their data and terminate their access. Parents or guardians can request deletion of a minor's data by contacting arianw02@gmail.com.

---

7. Your Rights

You may:

• Access, correct, or delete your data
• Request information about how your data is used
• Withdraw consent for optional features
• Request a copy of your data in a portable format
• Object to processing of your data

Requests can be sent to arianw02@gmail.com. We will respond within 30 days as required by applicable law.

---

8. International Data Transfers

Your data is stored on Supabase servers located in the European Union. If you are accessing T-Up from outside the EU, please be aware that your data will be transferred to and processed in the EU, which provides strong data protection under GDPR.

---

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date reflects the most recent revision.

If we make material changes, we'll notify you in-app or via email at least 30 days before the changes take effect. Continued use of the App after such changes constitutes acceptance.

---