Signal Layer

Privacy Policy

Last updated: 17 July 2026 · Applies to the UPLINK mobile app and uplinkapp.live

UPLINK ("the app," "we," "us") is an entertainment and self-reflection experience. This policy explains, in plain language, what data we collect, why, how long we keep it, and how you can access or delete it. We designed UPLINK to collect as little as possible and to let you erase your data yourself at any time.

The short version. We collect the details you enter during setup (your name, entry/birth date, optionally time and place), your coarse location if you allow it, and a notification token so we can send you transmissions. You can permanently delete everything from inside the app at any time — see Deleting your data. Uninstalling the app does not delete your data from our servers; the in-app option does.

Who we are

UPLINK is operated by an individual founder based in the European Union. For any privacy question or request, contact privacy@uplinkapp.live.

Data we collect

DataWhyWhen
NameUsed on your device only, to derive a number used in your signals. It is not stored on our servers.You enter it at setup
Birth date (and optional time and place)Used to compute your personal daily signals. The place is turned into coordinates and the raw birth time and city are not kept on our servers.You enter it at setup
Approximate (coarse) locationTo factor local environmental conditions into your signals, to draw the sky above you, and to send you an occasional weather notification when the day is genuinely worth acting on. For weather notifications we store your coarse location (rounded to about 11 km — a city, never a street) on your profile; it is deleted when you delete your account. If you do not grant location, none of this happens and nothing is stored.Only if you grant location permission
Push notification tokenTo deliver your daily transmissionsOnly if you grant notification permission
Step countSo a transmission can refer to the day you actually had. A count only — never a route and never a location trace.Only if you grant activity permission
How many entries are in your calendar todayTo time your signals around a busy or an empty day. We read only the number of entries. The titles, people, locations and notes in your calendar are never read, never stored, and never sent anywhere.Only if you grant calendar permission
Battery levelMinor context for timingOnly if you grant the signals permission
In-app activity (which transmissions you open and acknowledge)To improve the app and personalise what you receive. Stored on our own servers only.As you use the app

We do not collect precise/GPS location (we request only coarse accuracy), your contacts, your photos, or your browsing history. We do not sell your data, and we do not use it for third-party advertising.

Health data (Bio Link) — optional, and it stays on your phone

If you choose to connect Bio Link, UPLINK reads recent heart-rate-variability, heart-rate and sleep data from your device's health platform (Health Connect on Android), with your separate explicit permission.

Your raw health data never leaves your phone. It is compared, on the device, against your own recent baseline, and the only thing that is ever sent to our servers is a single coarse word describing relative strain (for example "high"). No numbers, no readings, no history. We do not use health data for advertising and we do not share it with anyone. UPLINK is not a medical or health app: it gives no diagnosis, no health advice, and no warnings.

You can revoke this at any time in your device's health settings, or by severing your account.

How the app adapts to you

UPLINK personalises what it sends based on how you engage with it — for example, which kinds of transmissions you open or act on. We disclose that the system adapts to you; the internal method is part of the experience and is not described here. This adaptation always serves you: we never use your data or your state to pressure, guilt, or manipulate you.

Legal basis (GDPR)

For users in the EU/EEA and UK, our lawful basis for processing your personal data is your consent, which you give during the setup ("sync") step with a plain-language summary. You may withdraw consent at any time by deleting your data (below). You have the right to access, correct, export, or erase your personal data, and to lodge a complaint with your local data protection authority. Data is stored in the European Union (Frankfurt region).

Deleting your data

Self-service (recommended). Open UPLINK → Settings → SEVER LINK. This permanently and immediately erases your profile, your devices, and your transmission history from our servers, along with your account. This is a real deletion, not a deactivation, and it cannot be undone.

If you have uninstalled the app and can no longer reach the in-app option, email privacy@uplinkapp.live from the address associated with your account (or with enough detail to identify it) and we will erase your data. See our dedicated account & data deletion page.

Important: simply uninstalling the app does not delete the data held on our servers. Use SEVER LINK, or contact us, to erase it.

What is deleted: your profile, your registered devices, your transmission history, and your account record — every row tied to your identity, in a single verified transaction.

What is kept: only anonymous, aggregate counts (for example, "how many transmissions were opened on a given day") that contain no name, no identifier, and nothing that could be traced back to you. These figures cannot be linked to any person and are retained to understand overall product performance.

Data retention

Your identifiable data is kept only while your account exists. When you delete your account, it is erased as described above. Anonymous aggregate counts, which contain no personal data, are retained indefinitely.

Data sharing & sub-processors

We use a small number of infrastructure providers to run the app. They process your data only to provide their service to us, under contract, and never for their own purposes. Here is exactly who they are and what each one receives:

ProviderWhat it does & receivesLocation
SupabaseOur database, authentication, and email (the sign-in codes). Holds your profile, devices and transmission history, and your email if you anchor an account.Data hosted in the EU (Frankfurt); company US-based
Expo (Expo Application Services)Delivers your push notifications. Receives your notification token and the title and body of each transmission (so it can be delivered to your phone).United States
Anthropic (Claude API)Writes the wording of your transmissions. Receives only the derived signals used to phrase a line — your archetype/thread and any measured context you opted into (for example, "walked ~12,000 steps today"). It is never sent your name, birth date, email, or precise location. Per Anthropic's API terms, it does not use this to train its models.United States
hCaptchaA bot check when you first create a thread (details below).United States
Open-MeteoWeather for your area, requested by our server (details below).EU (Germany)
SentryCrash reporting. Receives a technical error report (what failed and where) when the app hits a fault, so we can fix it. Configured to never receive your IP address or identity.EU (Germany)

International transfers. Some of these providers are in the United States. Where your personal data is transferred outside the EU/EEA, the transfer is covered by the European Commission's Standard Contractual Clauses (SCCs) with the provider, as permitted under Article 46 GDPR. Your core records (profile, devices, transmissions) are stored in the EU.

Two of these services are contacted in ways worth spelling out further:

Your birth city never leaves your phone. The list of cities is built into the app itself, so when you type where you were born, nothing is sent anywhere — not the city, not even the letters you type. (City data © GeoNames, CC BY 4.0.)

We use one crash-reporting service (Sentry, EU-hosted) to detect and fix errors; it is configured never to receive your IP address or identity. We use no analytics SDK, no advertising SDK, no data broker, and no tracking of you across other apps or websites. We do not sell your data and we do not share it for advertising.

Children

UPLINK is not directed to children and is intended for users aged 18 and over.

Changes to this policy

If we make material changes, we will update this page and the "last updated" date above.