Privacy policy
Upmark has no accounts and no sign in. Almost everything it knows about your mornings never leaves your phone. This page is the exceptions.
Last updated 30 August 2026
Who is responsible
Upmark is a product of Devaprime LLC. Questions about this policy go to hello@devaprime.com.
You never give us an identity
No email address, no phone number, no name that leaves the device, no social login. There is nothing to sign into.
On first launch the app generates a random code and keeps it in the iOS Keychain. Only a one way SHA-256 hash of it is ever sent anywhere. That hash is what our subscription provider and our invite service use to recognise a device, and it cannot be turned back into anything about you.
The Keychain survives deleting the app, which is deliberate. Reinstalling gives you back the membership you paid for instead of a fresh free trial.
What stays on your phone
- Your wake time, the days you picked, and whether the promise is paused.
- Every result, the minutes after your alarm, your streak and your wake rate.
- The name you type during setup and your answers to the setup questions.
- The line you write about why tomorrow matters, and any voice note you record. Both are deleted after the morning they were meant for.
- Step counts. Upmark asks iOS how many steps you took inside the Wake Walk window. That is read on the device, sent nowhere, and never stored as health history.
Notifications are scheduled locally by your phone. There is no push server and no device token, so nobody can send your phone anything from outside it.
What leaves your phone
Product analytics
Upmark uses PostHog to see how the app is used, for example which setup step people stop at. PostHog Inc. processes this in the United States as our processor. Events describe interactions with the app and carry a random analytics identifier, not your name or your email, because we do not have either.
Some builds enable session replay, which records how the interface was used. When it is on, all text you type is masked before anything is sent, so the line you write about tomorrow is not captured.
None of it is used to track you across other companies’ apps or websites, and none of it is sold or shared with data brokers or advertisers. Upmark carries no advertising and no advertising SDK, and its App Store privacy manifest declares no tracking.
Membership
Apple handles payment. We never see your card, your Apple Account or your billing address. We use RevenueCat to tell the app whether a membership is active. It receives the hashed identifier above and the purchase status Apple reports, as our processor.
Invite codes
Opening or redeeming an invite code talks to a small service we run on Cloudflare. It stores the code, the hashed identifier it belongs to, and how many times it has been used. It handles no money and holds nothing else.
Legal basis
Where the GDPR applies we rely on performance of a contract to deliver the app and your membership, and on legitimate interests to keep it working, to stop abuse of free codes, and to understand aggregate usage. Where your region requires consent for analytics, the app asks first.
How long it is kept
- On device data lives until you delete it in the app, or delete the app.
- Voice notes and nightly reason lines are deleted after one morning.
- Analytics events are kept for up to twelve months.
- Membership records are kept by RevenueCat as long as the subscription requires.
- Redeemed codes are kept so a code cannot be spent twice.
Your choices
- Turn off Motion and Fitness in Settings whenever you like. The Wake Walk stops working, because there is nothing left to measure.
- Delete everything by deleting the app. To also drop the identity that survives a reinstall, reset it in Settings first.
- Ask us to erase what we hold. Write to hello@devaprime.com with your invite code or the identifier shown in Settings. We answer within thirty days.
- Depending on where you live you may also have the right to access, correct, port or object to any of the above, and to complain to your local data protection authority.
Children
Upmark is not directed at children under thirteen and we do not knowingly collect anything from them. Write to us if you believe otherwise and we will remove the records.
Changes
If this policy changes in a way that matters, the app shows the new version before it takes effect. The date at the top is always current.