Privacy Policy

1. Scope and who we are

This Privacy Policy applies to the EarlyUp iPhone app and the EarlyUp website. In this policy, “EarlyUp,” “we,” and “us” refer to the operator of the EarlyUp app. Questions and privacy requests can be sent to support@earlyup.app.

2. Information EarlyUp processes

App data on your device and in cloud sync

Your alarms, schedules, settings, wake-up history, mission results, streaks, and achievements are stored on your iPhone. If cloud sync is available and enabled, this information may sync through a private database linked to your device-platform account so it remains available on your devices. The platform provider processes that data under your account settings and its own terms.

Random app identifier

EarlyUp creates a random identifier and stores it in the iPhone Keychain. We use it to associate product analytics, subscription access, feedback controls, and marketing attribution with the same app installation without asking for your name or email address. This identifier may be provided to our product analytics, subscription-management and purchase-validation, and mobile attribution and marketing-measurement service providers for these purposes. It is not derived from your name, email address, platform account, or advertising identifier, but information associated with it may still be considered linked data under applicable privacy rules.

Camera, photos, and mission verification

EarlyUp asks for camera access only when you choose a mission that needs it. Guided exercise frames and Sky Photo checks are processed on your iPhone and are not uploaded by EarlyUp.

For Object Hunt, the single image you submit and the object you were asked to find are sent over an encrypted connection to our protected backend and then to a third-party AI image-recognition provider for verification. Access credentials remain on the server. EarlyUp does not add the image to a database or photo library, and model-response storage is disabled for the request. The provider states that data submitted through its business API is not used to train its models by default. Under its standard controls, content may still be retained for up to 30 days in abuse-monitoring logs unless stricter retention controls apply. Avoid including sensitive information in an Object Hunt image.

Motion data

Motion data is used only while the Shake Phone mission is active. The raw motion data stays on your device, is not uploaded, and is not saved by EarlyUp.

Analytics and approximate location

We use a third-party analytics service hosted in Europe to understand which screens and features are used, improve reliability, and diagnose problems. The events are linked to the random app identifier, not a name or email address, and may include event time, app and build version, operating-system and device information, screen views, and app lifecycle events. We do not record taps or text entered into the interface.

The analytics provider receives the network information needed to deliver these events and may derive an approximate area, such as country or region, from the IP address. EarlyUp does not request precise GPS location and does not collect your live location history.

Mobile attribution and marketing measurement

EarlyUp uses a mobile attribution and marketing-measurement service provider to understand whether an EarlyUp installation, app launch, or subscription conversion resulted from one of our marketing campaigns. EarlyUp does not display third-party advertisements inside the app.

EarlyUp requests tracking permission through the device's system privacy framework during onboarding. If you grant tracking permission, our mobile attribution provider may access the device advertising identifier to measure campaign performance. If permission is denied, that advertising identifier is not available. Limited non-advertising identifiers, technical information, and attribution data may still be processed where permitted for analytics, attribution, fraud prevention, and app functionality. This may include a provider-generated installation identifier, a device-vendor identifier, IP address and an approximate country or region inferred from it, app and device information, operating-system version, language, time zone, network information, app launch or session activity, and limited performance information.

EarlyUp supplies the mobile attribution provider with the app's random identifier. EarlyUp does not send your name, email address, photos, written feedback, alarm details, or precise location to this provider. We currently do not send custom screen views or individual interface taps directly to this provider.

The mobile attribution provider may combine EarlyUp attribution data with campaign engagement information received from advertising partners to determine which campaign contributed to an installation or subscription conversion.

Optional feedback

If you submit feedback, we process the message, category, sentiment, app and build version, iOS version, submission time, and a one-way hash of the random app identifier. Unsent feedback may remain in a local queue on your device until delivery succeeds.

Purchases

Our mobile platform and payment provider processes purchases and payment details. Our subscription-management and purchase-validation service provider processes pseudonymous user identifiers, product and transaction information, purchase receipts, subscription status, entitlement information, purchase history, and related device or attribution identifiers to validate purchases, manage and restore paid access, prevent fraud, and analyse subscription performance. We do not receive your full payment-card details.

Limited subscription lifecycle and conversion events may be provided to our mobile attribution provider to measure campaign performance. These events may include trial starts, initial purchases, trial conversions, renewals, cancellations, expirations, billing issues, product changes, and associated product or revenue information. Our subscription-management provider may also process a platform-provided advertising attribution token to measure search advertising campaigns in the mobile app marketplace.

Alarms and notifications

EarlyUp uses the device's system alarm and notification services to deliver the alarms and reminders you configure. You can change these permissions at any time in system settings.

Website data

Before EarlyUp launched, visitors could submit an email address to receive a signup confirmation and one launch notification. That form is now closed, and the website no longer accepts waitlist addresses. Existing addresses are used only to complete the requested launch notification and are not used for unrelated newsletters or advertising. You can unsubscribe through the launch email or ask us to delete the address at support@earlyup.app.

The EarlyUp website uses privacy-focused, cookie-free analytics to measure aggregated page views, referral sources, general location, device type, browser, and operating system. This information helps us understand website traffic and improve the site without creating a persistent profile of an individual visitor.

If you choose “Allow analytics” in the website banner, additional third-party analytics services load and may use first-party cookies to measure visits, campaigns, navigation, and important actions such as App Store link clicks. Advertising storage, advertising personalisation, and advertising signals are disabled. You can decline or change this choice at any time through “Cookie settings” in the website footer.

Like most hosted websites, our hosting provider also processes the request data needed to deliver and protect the site, such as an IP address, browser information, and timestamps. If you email us, we receive the address and information you choose to send.

3. How we use information

We use the limited information described above to:

• provide alarms, missions, progress tracking, and paid features;
• verify Object Hunt submissions;
• maintain security, prevent abuse, and diagnose failures;
• understand feature usage and improve EarlyUp;
• complete and close the former launch-notification list;
• respond to feedback, support, and privacy requests.

Where data-protection law requires a legal basis, we rely on performance of our service agreement, our legitimate interests in operating and improving EarlyUp, your consent or iOS permission choices where applicable, and compliance with legal obligations.

4. Third-party services and sharing

We use specialised service providers to operate and improve EarlyUp. These include providers of product analytics, subscription management and purchase validation, mobile attribution and marketing measurement, diagnostics, and mobile platform services. We share information only as needed for the purposes in this policy with the following categories of service provider:

• Mobile platform and payment providers — purchases, private cloud sync, system alarms, notifications, system privacy choices, and platform advertising attribution;
• Cloud infrastructure and security providers — protected backend functions, app-integrity checks, and optional feedback storage;
• AI image-recognition providers — Object Hunt verification;
• Product analytics service providers — product analytics, feature-usage measurement, reliability, and diagnostics;
• Mobile attribution and marketing-measurement service providers — install attribution, campaign measurement, subscription-conversion analysis, analytics, and advertising-fraud prevention;
• Subscription-management and purchase-validation service providers — subscription and entitlement management, purchase validation, purchase analytics, and routing limited subscription-conversion events to configured attribution and analytics providers;
• Website-hosting and analytics providers — website delivery, reliability, security, aggregated traffic measurement, and, when you consent, campaign and conversion analysis; and
• Email-delivery providers — temporarily storing former launch-list addresses, managing unsubscribe choices, and delivering the requested launch notification.

Depending on the feature and your privacy choices, these providers may process pseudonymous app identifiers, device and operating-system information, IP-derived coarse location, app launches and interactions, technical and performance information, advertising identifiers where permission has been granted, and limited purchase or subscription-conversion information.

We use this information to operate app features, validate purchases, provide subscription access, diagnose technical problems, prevent fraud, understand product usage, attribute installs, and measure the effectiveness of EarlyUp's own marketing campaigns.

These providers process information under their own terms and data protection commitments. We may also disclose information when required by law, to protect users or the service, or as part of a business transfer with appropriate safeguards. We do not sell or rent personal information, EarlyUp does not display third-party advertising, and we do not share information for cross-context behavioural advertising.

5. Retention

• App data remains on your device and, if enabled, in your private cloud-sync database until you delete it or your platform-account settings remove it.
• EarlyUp does not retain Object Hunt images. The AI provider's standard abuse-monitoring logs may retain content for up to 30 days.
• Optional feedback is normally retained for no more than 180 days; a related anti-abuse rate-limit record is retained for about two days. You can delete it earlier from the app.
• Analytics and subscription records are kept only as long as reasonably needed for product analysis, access restoration, security, and applicable legal obligations, subject to the provider's settings and retention rules.
• Attribution and marketing-measurement information is retained only as reasonably necessary for attribution, campaign analysis, fraud prevention, and legal obligations, subject to EarlyUp's provider settings, applicable partner requirements, and legal obligations. Aggregated or partner-restricted information may follow different retention periods.
• Support emails are kept only as long as needed to answer the request and maintain necessary business records.
• Former launch-list addresses are deleted from the active list within 90 days after the launch email, unless you unsubscribe or request deletion sooner. We may keep a minimal suppression record where needed to honour an unsubscribe choice.

6. Your choices and deletion

You can allow or deny cross-app tracking when EarlyUp displays the device's system tracking-permission prompt. You can later change this choice in Settings → Privacy & Security → Tracking. Denying or withdrawing tracking permission prevents our mobile attribution provider from accessing the device advertising identifier, but it does not necessarily stop limited non-advertising-identifier attribution, fraud prevention, or subscription measurement.

EarlyUp's in-app analytics setting controls product-analytics events sent to our product analytics service provider. It does not control mobile attribution, subscription processing, or platform advertising attribution. You may contact support@earlyup.app to exercise applicable privacy rights concerning attribution or subscription information. Some transaction, fraud-prevention, aggregated, or legally required records may remain after a deletion request.

If you joined the former launch list, you can use the unsubscribe link in the launch email or contact us to request deletion. A minimal suppression record may remain where needed to honour an unsubscribe choice.

You control camera, motion, alarm, notification, and cloud-sync access through EarlyUp and system settings. The Delete Account control in EarlyUp removes alarms, history, mission progress, settings, submitted feedback, scheduled notifications, and related app data; requests deletion of synced cloud data; resets the analytics identity; and replaces the random app identifier. Some processor or transaction records may remain for the limited periods explained above or where law requires them.

Depending on where you live, you may also have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to complain to your local data-protection authority. Email us to exercise a right. We may need enough information to verify and locate the request, but we will not ask for more than is reasonably necessary.

7. Security and international processing

We use measures intended to protect information, including encrypted transport, server-side secrets, backend integrity checks, device attestation, and access controls. No system is completely secure. Our providers may process information in countries other than your own; where required, transfers are handled using legally recognised safeguards.

8. Children

EarlyUp is not directed to children under 13, or the minimum age required by local law to consent to digital services. We do not knowingly request a child's name or other profile information. If you believe a child submitted an email address to the former launch list or provided other personal information, contact us so we can review and delete it where appropriate.

9. Changes to this policy

We may update this policy when EarlyUp's features, providers, or legal obligations change. We will update the effective date and, when appropriate, provide notice in the app or on the website.

10. Contact

Questions, privacy requests, and deletion requests can be sent to support@earlyup.app.

You may contact us at privacy@earlyup.app to request the current list of service providers and information about where they process personal information.