Privacy Policy

Georges Anthony Boum is responsible for the personal information described here. Under Québec’s Law 25, the person in charge of protecting personal information is Georges Anthony Boum, reachable at georges.boum18@gmail.com.

Account information: your email, chosen username, and a securely hashed password (handled by our authentication provider).

Recovery information you enter: injury, sport, recovery stage, milestones, journal notes, and any photos you attach.

Circle activity: which recovery you choose to share, and the cheers and milestone reactions you send or receive.

Technical information: limited, privacy-light usage analytics; and email-delivery information when we send you account emails.

Recovery notes and photos may reveal information about your health. You control what you write and whether you share it. Recoveries are private to you unless you explicitly share one to a circle, and you can turn sharing off at any time.

To provide the Service: run your account, save your recovery, match you to a circle at your stage, and show your shared updates to that circle.

To communicate with you: transactional emails such as confirming your address or resetting your password.

We rely on your consent to create your account and, separately, to share a recovery to a circle. We do not use your recovery content for advertising, and we do not sell your personal information.

With other members of a circle: only a recovery you have chosen to share, and only with members of that circle.

With service providers who process data on our behalf: Supabase (database, authentication, and file storage), Vercel (hosting and privacy-light analytics), and Resend (transactional email). These providers process and store data in the United States.

We may disclose information if required by law or to protect the rights and safety of members.

Your data is protected by database row-level security so you can only access your own data and recoveries shared to your circle. Photos live in a private storage bucket and are served through short-lived signed links. Data is encrypted in transit. No system is perfectly secure, but we work to protect your information.

We keep your information while your account is active. When you delete your account (Settings → Account), your profile, recoveries, milestones, journal entries, circle presence, and uploaded photos are permanently deleted from our live database. upfield currently runs on our hosting provider’s free tier, which does not include long-term backups, so residual operational copies are cleared shortly afterward.

You can access and correct your information in the app, stop sharing a recovery at any time, and permanently delete your account and its data from Settings → Account.

Depending on where you live (including under Québec’s Law 25 and Canada’s PIPEDA), you may also have the right to obtain a copy of your information (portability) and to withdraw consent. To make a request, email georges.boum18@gmail.com and we’ll provide a copy of your data within 30 days. You may also complain to your privacy regulator (in Québec, the Commission d’accès à l’information).

upfield is not intended for anyone under 16. If you are under the age of majority where you live, use upfield only with a parent’s or guardian’s consent.

Your information is processed and stored in the United States by the providers listed above. We rely on their contractual and security commitments to protect it.

We may update this policy. We’ll change the date above and, for material changes, notify you where appropriate.

Questions or privacy requests? Email georges.boum18@gmail.com.