Last updated: October 12, 2026
This document has been drafted for upfield with the operator's real details, but it has not yet been reviewed by a legal professional. Please have it reviewed before relying on it.
This policy explains what personal information upfield collects, why, how it's shared, and the choices you have. Because recovery notes and photos can reveal health-related information, we keep your recovery private by default and only share it when you choose to.
Georges Anthony Boum is responsible for the personal information described here. Under Québec's Law 25, the person in charge of protecting personal information is Georges Anthony Boum, reachable at georges.boum18@gmail.com.
Account information: your email, chosen username, and a securely hashed password (handled by our authentication provider).
Recovery information you enter: injury, sport, recovery stage, milestones, journal notes, and any photos you attach.
Circle activity: which recovery you choose to share, and the cheers and milestone reactions you send or receive, including any short line you add to a cheer.
Technical information: limited, privacy-light usage analytics; and email-delivery information when we send you account emails.
Recovery notes and photos may reveal information about your health. You control what you write and whether you share it. Recoveries are private to you unless you explicitly share one to a circle, and you can turn sharing off at any time.
To provide the Service: run your account, save your recovery, and show the recovery you choose to share to the other members of your circle. For now, your circle is everyone else who shares a recovery. Later, circles may be formed by recovery stage.
To communicate with you: transactional emails such as confirming your address or resetting your password.
We rely on your consent to create your account and, separately, to share a recovery to a circle. We do not use your recovery content for advertising, and we do not sell your personal information.
With other members of a circle: only a recovery you have chosen to share, and only with members of that circle. A line you add to a cheer is shown to the circle under the update you cheered, and to the person who posted it.
With service providers who process data on our behalf: Supabase (database, authentication, and file storage), Vercel (hosting and privacy-light analytics), Resend (transactional email), Sentry (error monitoring — technical diagnostics only, configured to exclude personal information such as IP addresses), and Discord (operator alerts when a member reports content — limited to identifiers such as usernames, never the report’s details).
We may disclose information if required by law or to protect the rights and safety of members.
Your data is protected by database row-level security so you can only access your own data and recoveries shared to your circle. Photos live in a private storage bucket and are served through short-lived signed links. Data is encrypted in transit. No system is perfectly secure, but we work to protect your information.
We keep your information while your account is active. When you delete your account (Settings → Account), your profile, recoveries, milestones, journal entries, and circle presence are permanently deleted from our live database, and your uploaded photos are removed from file storage at the same time. Reports are kept after either account is deleted, as a record for safety review; a report about a line added to a cheer keeps a copy of that line.
Our database provider takes an automated backup each day and keeps the most recent 7 days. A copy of your information may therefore remain in those backups for up to 7 days after you delete your account, until it ages out. Backups exist only to restore the Service after a failure — they are never used to repopulate a deleted account, and we do not read them for any other purpose.
We keep a register of confidentiality incidents affecting personal information, as Québec's Law 25 requires.
If an incident involving your information presents a risk of serious injury to you, we will notify you and the Commission d'accès à l'information promptly, and tell you what happened, what information was involved, and what you can do about it.
If you think you have found a security problem, please email georges.boum18@gmail.com.
You can access and correct your information in the app, stop sharing a recovery at any time, and permanently delete your account and its data from Settings → Account.
Depending on where you live (including under Québec's Law 25 and Canada's PIPEDA), you may also have the right to obtain a copy of your information (portability) and to withdraw consent. To make a request, email georges.boum18@gmail.com and we'll provide a copy of your data within 30 days. You may also complain to your privacy regulator (in Québec, the Commission d'accès à l'information).
upfield is not intended for anyone under 16, and we ask you to confirm you are 16 or older when you create your account. If you believe someone under 16 has an account, email georges.boum18@gmail.com and we will remove it.
Your account, your recoveries, your journal entries and your photos are stored in Canada, in the Montréal region, by Supabase and Vercel.
Three providers handle limited information in the United States: Resend (your email address, to send account emails), Sentry (technical error diagnostics, with personal information excluded) and Discord (a username and identifier when a member reports content). We rely on their contractual and security commitments to protect it.
We may update this policy. We'll change the date above and, for material changes, notify you where appropriate.
Questions or privacy requests? Email georges.boum18@gmail.com.