Privacy policy

This English version is a translation of the French reference text (version 1.4). It reflects the same practices; in the event of a discrepancy, the French version prevails, subject to section 64.

Version: 1.4
Effective date: October 24, 2026

SUMMARY — PRIVACY BY DESIGN

Upchin is built on a simple principle: the sensitive information needed to control screen time should, as far as possible, stay on the User’s device.

In the current version of Upchin:

no Upchin account is required to use the Application;
UPCHIN CORPORATION does not sell Users’ personal data and does not use any data for behavioral advertising or cross-app tracking;
the selections of apps, categories and websites made through Apple Screen Time / Family Controls remain processed locally, using the mechanisms provided by Apple;
the names or identifiers of the targeted apps, the targeted websites, actual screen time, the detailed history of phone use, the content of custom messages and the User’s location are not transmitted to UPCHIN CORPORATION;
unless the User declines, Upchin measures one thing only: the installation journey — the introductory screens, the answer to the Screen Time access request, the offers displayed and the one selected, the outcome of a purchase, then two markers, the first protection put into service and the first block;
this measurement stops at the first block, or at the latest thirty days after the end of installation; day-to-day use of Upchin — blocks, rules, schedules, how often the app is opened — is measured nowhere;
it is tied to a random identifier created on the device, unrelated to the User’s identity, deleted from the device as soon as the measurement stops; it is processed on behalf of UPCHIN CORPORATION by a processor, PostHog, Inc., and stored in the European Union; the IP address is not retained;
the User can turn it off at any time in Settings → Privacy, which stops all sending and deletes the identifier from their device;
Upchin’s notifications are produced locally by the device: no registration on our servers, and no notification token is transmitted;
some data may also be processed when a User voluntarily contacts support, visits the upchin.app website or makes a purchase through Apple.

This summary is intended to make the Policy easier to read; it does not replace the detailed provisions below.

I. IDENTITY AND SCOPE

1. Data controller

This Privacy Policy describes the processing of personal data relating to the Upchin mobile application, its extensions and widgets, and the upchin.app website, when they are operated by:

UPCHIN CORPORATION
Société par actions simplifiée (SAS) with a share capital of €500
Registered office: 78 avenue des Champs-Élysées, bureau 326, 75008 Paris, France
Paris Trade and Companies Register (RCS): 109 154 351
SIREN: 109 154 351
SIRET (registered office): 109 154 351 00018
EU VAT number: FR86 109154351
Privacy and support e-mail: support@upchin.app
Phone: +33 6 87 35 36 29

Hereinafter “UPCHIN CORPORATION”, “Upchin”, “we”, “our” or “the Publisher”.

UPCHIN CORPORATION is the controller of the processing operations whose purposes and means it determines itself. Apple processes certain data for its own purposes, under its own terms and policies.

No data protection officer (DPO) has been appointed as of the effective date of this Policy. Any question relating to data protection may be sent to support@upchin.app.

2. Scope

This Policy applies to:

the Upchin Application;
its extensions, widgets and associated components;
the features that use the Apple Screen Time, Family Controls, Managed Settings, Device Activity, StoreKit interfaces and other required system interfaces;
the upchin.app website;
exchanges with Upchin support;
the information the Publisher receives from Apple in connection with the distribution and sale of the Application.

It does not govern the processing that Apple, a telecommunications operator, a browser, another application or any other third party carries out for its own purposes.

3. Definitions

For the purposes of this Policy:

“Application” means Upchin, its extensions and widgets;
“Apple” means Apple Inc., its subsidiaries and the entities operating the relevant Apple services;
“local data” means information processed or stored only on the User’s device or in an associated Apple system space to which UPCHIN CORPORATION has no server-side access;
“personal data” means any information relating to an identified or identifiable natural person within the meaning of applicable law;
“Apple Services” means in particular iOS, the App Store, StoreKit, Screen Time, Family Controls, Managed Settings, Device Activity and the system services used by Upchin;
“User” means any person using the Application or the website.

II. UPCHIN’S PRIVACY PRINCIPLES

4. Local processing by default

Upchin is designed so that its core digital-habit features can work without creating a user profile on UPCHIN CORPORATION’s servers.

Whenever the information needed for a feature to work can stay on the device, Upchin favors that local processing.

The fact that a piece of information is technically accessible to the Application on the device does not mean that it is transmitted to UPCHIN CORPORATION.

5. No Upchin account

In the current version, normal use of Upchin does not require creating a user account with UPCHIN CORPORATION.

For the normal operation of the Application, we therefore do not ask you to create an Upchin profile containing a name, an e-mail address, a password or a social sign-in identifier.

An Apple account may nevertheless be required to download the Application, use certain Apple features or make a purchase. That account is administered by Apple, not by UPCHIN CORPORATION.

6. No sale of data and no behavioral advertising

UPCHIN CORPORATION:

does not sell Users’ personal data;
does not rent out User databases;
does not use Screen Time or motion data to build advertising profiles;
does not use such data for targeted or behavioral advertising;
does not share personal data for cross-context behavioral advertising;
does not track Users across third-party companies’ apps or websites for advertising purposes.

7. No decisions producing legal effects

Upchin’s automated mechanisms serve to apply the rules chosen by the User, for example a schedule, a usage delay, a manual block or a motion-related rule.

They do not constitute automated decision-making producing legal effects or similarly significant effects on the User within the meaning of applicable data protection legislation.

III. DATA PROCESSED IN THE APPLICATION

8. Selections of apps, categories and domains

Upchin may allow the User to select apps, app categories or internet domains through the interfaces provided by Apple.

Depending on the Apple features used, these selections may be represented by identifiers or tokens designed by Apple to preserve privacy.

Upchin uses this information solely to carry out the rules chosen by the User, in particular to:

apply a block;
schedule a block;
trigger a restriction after a set duration;
display the status of a rule;
allow the User to change their configuration.

These selections and tokens are meant to remain on the device or in the Apple system spaces needed for the Application to work. In the normal operation of the Application, UPCHIN CORPORATION does not receive on its servers the list of apps, categories or domains selected by the User.

9. Usage data and Screen Time

Depending on the iOS version, the permissions granted and the features used, Apple’s interfaces may allow Upchin to monitor certain usage events, duration thresholds or activity information needed to run the configured rules.

Where more detailed usage information is made available by Apple with the User’s explicit permission, Upchin uses it only for the features the User has requested.

This information is meant to be processed locally.

In the normal operation of the Application, UPCHIN CORPORATION does not receive on its servers:

the detailed history of apps used;
the detailed history of websites visited;
the content viewed within apps;
the messages, photographs or documents contained in other apps;
the individual Screen Time history used to operate Upchin’s restrictions.

Upchin is not intended to read the personal content displayed inside blocked or monitored apps.

10. Restriction settings

The Application may store locally the settings defined by the User, such as:

the times and days of a Weekly Schedule;
the durations and thresholds of a Delay Lock;
the duration of a block;
the activation and configuration of Motion Lock;
the configuration of Back IRL;
the apps, categories or domains associated with a rule;
the Application’s general preferences;
the states needed for widgets and extensions to work.

These settings are processed locally. The usage statistics described in section 26 include only one piece of information about them: when a first protection is put into service during the installation journey, which of the four it is (Delay Lock, Motion Lock, widget or schedule). Neither the content of a schedule, nor the number of time slots, nor the durations configured, nor the size of an app selection is transmitted.

The usage statistics never transmit the names or identifiers of the selected apps, the name of a rule or schedule, or the detailed times configured.

11. Custom messages

When the User writes a custom message intended to appear on a block screen, that text is stored in order to provide the corresponding feature.

In the current version, this content is meant to be kept locally, and UPCHIN CORPORATION is not intended to receive it.

The User should not use a custom message as a place to store highly sensitive or irreplaceable information.

12. Progress data and estimates

Upchin may compute and display information about digital habits, progress, blocking periods or potentially reclaimed time.

These computations may rely on:

locally available data;
Screen Time events or thresholds;
the configured rules;
values entered or confirmed by the User;
computation assumptions.

The detailed data used for operation and estimates stays local. The usage statistics described in section 26 receive none of it: not the number of days the app was opened, not the number of blocks, not the durations configured, not the time reclaimed. Only the occurrence of the first block is measured, during the installation journey — and it is what brings the measurement to an end.

UPCHIN CORPORATION does not receive the User’s actual screen time or their detailed history of phone use.

13. Motion data and Motion Lock

Motion Lock may use the device capabilities that detect motion or movement.

Depending on the version of the feature and the capabilities of iOS, the processing may rely in particular on:

motion sensors;
physical activity or derived information;
movement information;
and, where technically necessary and authorized by the User, location information.

This information is used to determine locally whether the condition chosen for Motion Lock is met.

UPCHIN CORPORATION does not receive the User’s position, geographic coordinates, location history or the raw motion data used by Motion Lock.

The status of the location permission is not transmitted either: the usage statistics described in section 26 cover no motion or location permission.

UPCHIN CORPORATION does not use Motion Lock to build a server-side movement history, sell location data, track a User for advertising purposes or analyze their movements remotely.

14. Notifications

Upchin may request permission to display notifications when they are useful to the operation of the Application.

All of Upchin’s notifications are local. They are scheduled and displayed by the device’s system features, from rules evaluated on the device. UPCHIN CORPORATION sends no remote notifications.

Accordingly, the Application requests no notification token from Apple, transmits none, and registers no installation on UPCHIN CORPORATION’s servers. No technical installation identifier and no device secret are created or kept for this feature.

Versions of Upchin released before October 24, 2026 did create such a record when notifications were enabled. That mechanism has been removed from the Application: the corresponding items are erased from the device the first time an up-to-date version is launched, including the entries held in the keychain.

Displaying notifications still depends on the corresponding iOS permission, which the User may withdraw at any time.

15. Widgets and App Group

Upchin may use the Apple mechanisms that allow the Application and its extensions or widgets to share locally the information strictly necessary for their operation.

These exchanges may concern in particular:

the status of a block;
a duration;
a preference;
the information needed for the Back IRL action;
configuration states.

The use of a shared Apple space between the Application and its own extensions does not mean that data is sent to UPCHIN CORPORATION’s servers.

IV. APPLE PERMISSIONS

16. Screen Time / Family Controls permission

Certain features require the explicit permission provided for by Apple in order to use the Screen Time / Family Controls interfaces.

The User may refuse or withdraw this permission through the options offered by iOS.

Withdrawing the permission may render certain features inoperative and may invalidate the tokens or selections previously provided by Apple.

17. Motion and location permissions

Where Motion Lock requires a motion, physical activity or location permission, iOS presents the corresponding system prompt.

Upchin uses the permission only for the functional purposes presented to the User.

The User may change or withdraw a permission in the iOS settings. Withdrawal may prevent Motion Lock from working properly.

18. Principle of permission minimization

Upchin seeks to request only the permissions needed for the features in use.

A system permission is not a general authorization allowing UPCHIN CORPORATION to use the information concerned for another purpose.

V. DATA PROCESSED OUTSIDE THE APPLICATION

19. Support and voluntary communications

When a User contacts support@upchin.app, UPCHIN CORPORATION may receive:

their e-mail address;
their name or nickname if it appears in the message;
the content of their request;
the attachments they choose to send;
technical information they provide voluntarily;
the date and the metadata needed to route the message.

Purposes:

responding to the request;
providing support;
diagnosing a problem;
preventing abuse;
keeping evidence of an exchange where necessary.

Legal basis for the EEA:

performance of the contract or pre-contractual measures where the support relates to the service;
legitimate interest in responding to requests and securing the service;
legal obligation where retention of information is required.

Users are asked not to send unnecessary screenshots containing third parties’ personal data, medical data, passwords, authentication codes or other highly sensitive information.

20. The upchin.app website and technical logs

When the upchin.app website is visited, the hosting infrastructure may automatically process technical information needed to deliver and secure the site, such as:

IP address;
date and time of the request;
page or resource requested;
HTTP response code;
browser type or user agent;
technical connection information;
data needed to detect errors, attacks or abusive use.

Purposes:

providing the website;
ensuring security;
detecting errors;
preventing attacks and abuse;
performing technical diagnostics.

Legal basis for the EEA: UPCHIN CORPORATION’s legitimate interest in operating and securing its website.

Technical logs are retained for a limited period matching security and diagnostic needs, in principle 30 days at most, unless longer retention is required because of a security incident, an investigation, a legal obligation or a dispute.

21. Cookies and tracking technologies on the website

UPCHIN CORPORATION does not use advertising cookies or technologies designed to track visitors across different websites for behavioral advertising purposes.

Mechanisms strictly necessary for the operation or security of the website may be used where required.

If UPCHIN CORPORATION later adds an audience measurement solution, a third-party service or a mechanism requiring consent, this Policy and, where necessary, the website’s consent interface will be updated before it is used.

22. Apple purchases and subscriptions

In-app purchases, one-time purchases, subscriptions, renewals and refunds offered in the Application are administered by Apple.

Apple may process in particular:

the Apple account;
payment details;
purchase history;
tax information;
receipts and transactions;
the account territory;
the information needed for fraud prevention.

UPCHIN CORPORATION does not receive the full number of the payment card used with Apple.

To verify an entitlement, Upchin may process the necessary StoreKit information, for example the status of a purchase, subscription, entitlement or transaction.

UPCHIN CORPORATION may also receive from Apple commercial, financial, tax or performance reports relating to the distribution of the Application. This information is processed to administer the business, accounting, tax obligations, refunds and fraud prevention.

Apple independently determines a significant part of the processing carried out in connection with the App Store and the Apple account. That processing is governed by Apple’s policies.

23. App Analytics and diagnostics provided by Apple

Apple may make available to UPCHIN CORPORATION, through App Store Connect and Apple’s developer tools, statistics relating in particular to downloads, sessions, performance and crashes of the Application.

The usage and diagnostic data that Apple shares with developers depends in particular on the sharing choices the User makes in the Apple environment. Apple applies its own privacy mechanisms and may provide certain statistics in aggregated form or subject to privacy thresholds.

UPCHIN CORPORATION may use this information to:

measure the general operation and adoption of the Application;
detect and fix crashes or anomalies;
improve stability and compatibility;
understand the Application’s general commercial performance.

This information provided by Apple is not used by UPCHIN CORPORATION to build an advertising profile of the User or to track the User across third-party companies’ apps and websites.

VI. WHAT UPCHIN DOES NOT COLLECT FOR ITS OWN SERVERS

24. No centralization of behavioral data

Even when the usage statistics described in section 26 are enabled, UPCHIN CORPORATION does not centralize on its servers:

the detailed list of installed apps;
the names or identifiers of the apps selected in Family Controls;
the selected domains or websites;
actual screen time;
the detailed history of apps used;
browsing history;
the content of messages or communications;
the device’s photographs and videos;
contacts;
the position or detailed location history;
the raw motion data used by Motion Lock;
the content of custom messages;
the answers to the onboarding questionnaire, personal goals or first name;
the name of a rule or schedule;
the User’s detailed personal restriction times;
the time of the User’s actions in the Application, outside the installation journey;
the User’s IP address;
a stable device or installation identifier: the measurement described in section 26 relies on a temporary identifier, deleted when the journey closes;
any identity data: name, e-mail address, Apple ID, IDFA, IDFV.

The statistics described in section 26 concern the installation journey only, and rely on a closed catalog of measurements.

25. No advertising SDK

UPCHIN CORPORATION does not knowingly integrate into Upchin any SDK whose purpose is to build an advertising profile or to track the User across third-party companies’ apps and websites.

26. Usage statistics: measuring the installation journey

What is measured, and nothing else

Upchin measures the installation journey: the sequence of introductory screens, the answer to the Screen Time access request, the display of the offers screen and the offer selected, the outcome of a purchase or a restore, the completion of installation, then two markers — the first protection put into service and the first block.

This measurement is enabled by default from the first launch. The User is informed of it by this Policy and by the short version available in the Application, and may turn it off at any time (“Declining and turning off” below).

The list of measurements is closed: the Application can emit only the measurements set out in a catalog fixed in its code, and any measurement not found there is discarded before sending. That catalog comprises:

the very first launch of the Application;
the start of the installation journey, the arrival on each of its screens, and its completion;
the fact that the optional questionnaire was skipped;
the outcome of the Screen Time permission request: granted or denied;
the display of the offers screen, the offers shown on it and the one selected;
the start of a purchase, its outcome — completed, cancelled, pending, failed — and, where applicable, a restore;
the first protection put into service, with the sole indication of which one: Delay Lock, Motion Lock, widget or schedule;
the occurrence of the first block.

For a completed purchase, the measurement includes the product identifier, the plan type, whether or not it is a free trial, and the price paid with its currency. For a failed purchase, it includes a technical code from a closed list, never an error message.

When the measurement stops

The measurement is temporary by design. It ceases at the first block, or at the latest thirty days after installation is completed. At that point the Application sends nothing further, the measurement component is no longer initialized at launch, and the identifier described below is deleted from the device.

Day-to-day use of Upchin is measured nowhere: not the blocks, not the rules, not the schedules, not the settings toggles, not how often the app is opened, not the User’s return over the following weeks.

If paid access ends and the offers screen reappears, only that screen is measured again, kept distinct from the installation measurement.

Journey identifier

The measurements of a single journey are linked together by an identifier with the following characteristics:

it is a random number (UUID) generated on the device when the journey opens;
it is derived from no information about the User or the device: no IDFA, no IDFV, no Apple ID;
it is never matched with an account, an e-mail address, a named purchase or any other identity data;
no person profile is created at the processor: the measurements remain anonymous events there and are not gathered under an individual record;
it is kept on the device in folders excluded from iCloud backup;
it is deleted from the device when the journey closes, if the User declines, when the Application is reset, and on uninstallation.

Information accompanying each measurement

Each measurement is accompanied by: the time of the event; the Application language; the country of the App Store account; the Application version and build number; the iOS version; the device type; a flag indicating that it comes from a test version (TestFlight or development); and a journey version number, which prevents two successive versions of the installation from being confused.

The following are not transmitted: the exact device model, its name, its manufacturer, the system language, screen dimensions, network status, or any device identifier belonging to the processor.

When the Application queries the processor to determine which variant of a screen to present, that request carries the journey identifier and the device’s time zone. It occurs only while a journey is open.

IP address

The IP address is required for network transport. The processor is configured not to retain it and not to derive any location from it; it does not appear in the measurements.

Purpose

These measurements are used only to:

understand where the installation journey breaks down;
compare two versions of the same screen and keep the clearer one;
understand which protection a User puts into service first;
improve the payment and restore flows;
detect certain technical errors, by means of closed codes;
improve Upchin.

They are not used for advertising, behavioral marketing, individual scoring, cross-app tracking or building a personal profile. They are neither sold nor cross-referenced with other applications or services.

Legal basis

In the EEA, this processing relies on UPCHIN CORPORATION’s legitimate interest in measuring and improving its own product. It is implemented using minimized data limited to the installation journey, a temporary identifier deleted when that journey closes, a single processor that does not reuse the data for its own purposes, information provided from installation onwards, and an immediate and permanent right to object. Where the law applicable to the User makes this type of measurement subject to prior consent, UPCHIN CORPORATION complies with it.

Declining and turning off

The User may decline or turn off these statistics at any time in Settings → Privacy.

Turning them off takes effect immediately: no further measurement is recorded or transmitted, the measurement component is stopped, its local storage is erased and the journey identifier is deleted from the device. A full reset of the Application (“Reset all data”, after confirmation) also erases that storage and that identifier; it does not undo a refusal already expressed.

If measurement is turned back on, a new identifier unrelated to the previous one is created, and only if there is still something to measure.

Declining or turning off entails no loss of functionality.

Processor and hosting

These measurements are processed on behalf of UPCHIN CORPORATION by a single processor, PostHog, Inc., bound by a data processing agreement within the meaning of Article 28 GDPR. They are hosted in the European Union.

At that processor, the following are left disabled: session recording and screen replay, surveys, website audience measurement, error tracking, the data warehouse, and person profiles. The Application likewise transmits none of the events the measurement component produces automatically: no application lifecycle, no screens viewed outside the installation journey, no clicks.

Transmission from the device

Only the main Application transmits. The Screen Time extensions, the blocking extension and the widget are incapable of it: the measurement component is not compiled into them.

When the network is unavailable, measurements wait in a local queue and are sent later, bearing their original time. The corresponding files are excluded from iCloud backup.

Retention

These measurements are kept for one year at most, then deleted.

Because they are linked to no identity and no profile is built, they cannot be retrieved individually after the fact — not by UPCHIN CORPORATION, not by the User, and not upon request (see section 43).

Internal access

The measurements received are consulted through the processor’s interface, with restricted access, which presents funnels and aggregates. Measurements coming from the Publisher’s test versions are excluded from them by default.

Regions where this measurement is disabled

No Upchin usage statistics are collected or transmitted in the following regions:

mainland China;
Hong Kong;
Macao;
Taiwan.

This exclusion is determined locally from signals such as the country of the App Store account, the iOS region or the time zone, and it is re-evaluated at each launch. Those signals serve to prevent measurement in the regions concerned and are transmitted to no one for those Users.

Remote deactivation

UPCHIN CORPORATION may also disable the measurement remotely, globally or for certain regions or versions of the Application. To that end the Application queries, at each launch, a configuration address belonging to the Publisher; that request is anonymous and carries no identifier. When such a deactivation is applied, the local storage of the measurement component and the journey identifier are deleted.

VII. PURPOSES AND LEGAL BASES

27. Table of processing operations controlled by UPCHIN CORPORATION

Processing	Purpose	Main legal basis in the EEA
Functional configuration processed locally	Providing the chosen features	Performance of the requested service
Screen Time processed locally	Triggering and displaying Upchin features	Performance of the requested service; system permission where required
Motion/location processed locally	Operating Motion Lock	Performance of the requested service; system permission where required
Installation journey measurement (section 26)	Understanding where installation breaks down, comparing screen variants, improving the Application	Legitimate interest (measurement limited to the installation journey, temporary identifier deleted when it closes, single processor with no reuse for its own purposes, information at installation, immediate and permanent objection); express consent wherever local law requires it
Support e-mails	Responding, assisting, diagnosing	Contract / pre-contractual measures / legitimate interest
Website technical logs	Providing and securing the website	Legitimate interest
Transaction information received from Apple	Paid access, accounting, fraud	Contract / legal obligation / legitimate interest
Data required by a legal obligation	Tax, accounting, authorities	Legal obligation

Where consent is the legal basis for a processing operation, the User may withdraw it at any time without affecting the lawfulness of the processing carried out before withdrawal.

VIII. RECIPIENTS AND SHARING

28. Internal access

Data actually received by UPCHIN CORPORATION is accessible only to the people who need it for their role, in particular for:

support;
administration;
security;
accounting;
compliance with legal obligations.

29. Technical service providers

UPCHIN CORPORATION may use strictly necessary service providers, in particular for:

hosting the infrastructure or the website;
the installation journey measurement described in section 26;
hosting e-mail;
connectivity and security;
infrastructure maintenance;
accounting or legal obligations.

These providers act according to their applicable legal role and are authorized to process data only for the services concerned.

The installation journey measurement described in section 26 is entrusted to a single processor, PostHog, Inc., bound by a data processing agreement within the meaning of Article 28 GDPR. It acts only on UPCHIN CORPORATION’s instructions, does not reuse this data for its own purposes, and hosts it in the European Union.

No advertising SDK, no ad network and no cross-app tracking solution is integrated into Upchin.

Using a hosting or infrastructure provider does not give it access to the Screen Time data, the names of the selected apps, the position or the motion data, which remain on the device.

30. Apple

Apple receives and processes the data needed for its own services, in particular the App Store, StoreKit, the Apple account, billing and certain system interfaces.

UPCHIN CORPORATION does not control all of the processing carried out by Apple.

31. Authorities and legal obligations

UPCHIN CORPORATION may disclose information it holds where such disclosure is required by a legal obligation, a court decision or a competent authority, or where it is necessary for the establishment, exercise or defense of legal claims.

UPCHIN CORPORATION cannot hand over to an authority local data that it does not possess and to which it has no access.

32. Corporate transactions

In the event of a merger, acquisition, restructuring, transfer of business or transfer of assets, the data actually held by UPCHIN CORPORATION may be transferred to the successor to the extent permitted by law and subject to the applicable safeguards.

Such a transfer does not automatically turn the User’s purely local data into data held by the company.

IX. INTERNATIONAL TRANSFERS

33. Principle

UPCHIN CORPORATION is established in France.

The data actually held by the company may be processed in France, in the European Economic Area or, depending on the technical service providers used, in other countries.

Where an international transfer of personal data is subject to the GDPR or comparable legislation, UPCHIN CORPORATION uses the applicable legal mechanism, for example:

an adequacy decision;
standard contractual clauses;
another safeguard recognized by the regulations;
or a legally available derogation in appropriate cases.

The installation journey measurement described in section 26 is hosted in the European Union. Its processor is a company incorporated in the United States; the data processing agreement entered into with it provides for the safeguards applicable should access from a third country be necessary to provide the service.

The User may contact support@upchin.app for further information on the safeguards applicable to a transfer concerning them.

34. Data remaining on the device

Data that remains exclusively on the User’s device and is not transmitted to UPCHIN CORPORATION is not the subject of an international transfer by UPCHIN CORPORATION.

X. RETENTION

35. Local data

Local functional data is retained according to the operation of iOS and the User’s choices.

It may be deleted in particular when:

the User erases a configuration in the Application;
the User uninstalls the Application;
iOS deletes or resets the data concerned;
Apple permissions are revoked;
the device is reset or replaced.

The journey identifier and the local ledger of measurements already sent are kept on the device as long as the installation journey is open. They are deleted when that journey closes, when the User disables the statistics, when the Application is reset, and on uninstallation.

The files concerned are excluded from iCloud backup. A reinstallation starts from scratch, with a new identifier.

UPCHIN CORPORATION cannot guarantee the recovery of local data it has never received.

36. Support

Support exchanges are retained for the time needed to handle the request and then, in principle, for 24 months at most after the last exchange, unless longer retention is justified by:

a legal obligation;
the prevention of abuse;
a warranty;
a dispute or risk of dispute;
the establishment, exercise or defense of legal claims.

37. Technical logs

The website’s technical logs are retained for 30 days at most in principle, subject to longer retention strictly necessary for the analysis of a security incident, a legal obligation or legal proceedings.

38. Accounting and transaction information

Information that the law requires to be kept for accounting, tax or proof-of-transaction purposes is retained for the applicable statutory period.

XI. SECURITY

39. Security measures

UPCHIN CORPORATION applies technical and organizational measures proportionate to the nature of the data actually processed and the risks involved.

Upchin’s local design reduces the amount of behavioral data that needs to be centralized.

Measures may include in particular:

data minimization;
access control;
security updates;
protection of administrative systems and accounts;
encryption provided by the protocols and infrastructure used;
limitation of retention periods;
separation of environments where relevant.

No computer system can, however, guarantee absolute security.

40. Security incident

Where an incident concerns data actually held by UPCHIN CORPORATION, the company applies the obligations to notify the persons concerned and the competent authorities imposed by applicable legislation.

Data that has never left the User’s device cannot be compromised by a breach of a UPCHIN CORPORATION server.

XII. USER CHOICES AND CONTROL

41. iOS permissions

The User can control the available permissions from the iOS settings, in particular those relating to:

Screen Time / Family Controls where the system allows it;
motion and physical activity;
location;
notifications.

Withdrawing a permission may prevent a feature from working.

Independently of system permissions, the User may also enable or disable the usage statistics in Settings → Privacy.

42. Deleting local data

Where data is exclusively local, UPCHIN CORPORATION has no remote copy to delete.

Depending on the data concerned, the User may:

change or delete a rule in Upchin;
reset the settings concerned;
withdraw permissions;
uninstall the Application.

Uninstalling may cause the irreversible loss of local data.

43. Requests relating to data held by UPCHIN CORPORATION

For data actually held by the company that can be linked to an identifiable person, for example a support exchange, the User may send their request to:

support@upchin.app

UPCHIN CORPORATION may request the information strictly necessary to verify the identity of the requester before disclosing or deleting data.

For installation journey measurements already transmitted, disabling in Settings → Privacy immediately stops all sending and deletes the journey identifier from the device. Those measurements are linked to no identity and no profile is built at the processor: neither UPCHIN CORPORATION nor the User has any means of retrieving them in order to erase them one by one, and a request made by e-mail could not identify them. They are deleted automatically at the end of the period set out in section 26.

The company will not artificially create a personal database solely in order to respond to a request concerning information it does not hold or cannot reasonably link to the requester.

XIII. RIGHTS IN THE EUROPEAN UNION AND THE EEA

44. GDPR rights

Where the GDPR applies, the data subject may, under the statutory conditions, have the following rights:

right of access;
right to rectification;
right to erasure;
right to restriction of processing;
right to object;
right to data portability where the conditions are met;
right to withdraw consent at any time;
right not to be subject to certain solely automated decisions;
right to lodge a complaint with a supervisory authority.

A request may be sent to support@upchin.app.

45. Complaints in France

The User may lodge a complaint with the:

Commission nationale de l’informatique et des libertés (CNIL)
3 Place de Fontenoy — TSA 80715
75334 Paris Cedex 07
France
www.cnil.fr

This option does not prevent the User from first contacting UPCHIN CORPORATION in order to try to resolve their request directly.

46. Data processed only locally

The rights provided for by the GDPR concern data processed by the controller.

Where UPCHIN CORPORATION does not receive and cannot identify data kept exclusively on the device, certain requests will in practice have to be carried out by the User using the controls of the Application or of iOS.

UPCHIN CORPORATION will, where possible, explain the corresponding procedure.

XIV. CHILDREN AND MINORS

47. Positioning of the service

Upchin is rated 9+ on the App Store.

A minor should use the Application only with the prior permission and under the effective supervision of their legal representative, and where applicable law allows it; subscribing is a matter for the Apple account holder, who must have the legal capacity to enter into a contract.

Upchin requests no information that would identify the User and does not seek to build profiles of children.

48. Collection from minors

UPCHIN CORPORATION does not seek to build a database of children’s profiles.

Upchin’s local architecture is designed to limit the transmission to the Publisher of information about digital use, whatever the User’s age.

If UPCHIN CORPORATION learns that it has directly collected personal data from a child in breach of an applicable mandatory rule, it will take the reasonable steps necessary to delete that data or bring the processing into compliance.

Local rules requiring parental consent remain applicable.

XV. UNITED STATES LAW

49. United States — general principles

Residents of the United States have the rights provided for by federal law and by the law of their State where it applies.

UPCHIN CORPORATION does not sell personal data and does not use Users’ personal data for cross-context behavioral advertising.

50. States with comprehensive privacy laws

Where a State law grants an applicable right, the User may in particular have the right to request:

access to, or confirmation of, processing;
correction;
deletion;
a copy or portability;
information about certain disclosures;
to opt out of certain uses, in particular sale, targeted advertising or certain profiling.

UPCHIN CORPORATION does not unlawfully discriminate against a person who exercises a legal privacy right.

Requests may be sent to support@upchin.app.

51. California

For California residents, UPCHIN CORPORATION does not “sell” or “share” personal data for cross-context behavioral advertising within the meaning given to those terms by applicable California legislation.

To the extent that California law applies to UPCHIN CORPORATION and to the processing concerned, a resident may exercise the rights provided for by that legislation by writing to support@upchin.app.

XVI. INDIA

52. Data protection

Where Indian digital personal data protection legislation applies, UPCHIN CORPORATION processes digital personal data in accordance with the applicable obligations, in particular regarding:

notice;
purpose;
security;
the exercise of rights;
the handling of grievances;
deletion when retention is no longer necessary or legally required.

53. Grievances in India

A data principal may address a grievance relating to Upchin to:

UPCHIN CORPORATION — Privacy / Grievance Contact
Grievance Officer: Mingran SUN, President of UPCHIN CORPORATION
78 avenue des Champs-Élysées, bureau 326
75008 Paris, France
support@upchin.app

Local obligations requiring the appointment or publication of an additional contact will be applied when they become applicable to UPCHIN CORPORATION in view of its activity.

XVII. JAPAN

54. Users in Japan

Where the Act on the Protection of Personal Information (APPI) applies, UPCHIN CORPORATION complies with the rights and obligations applicable to the personal data it actually holds.

Requests for access, correction, cessation of use or deletion provided for by applicable law may be sent to support@upchin.app.

Where personal data is provided to a service provider or recipient located abroad, the rules applicable to international transfers are complied with.

XVIII. SOUTH KOREA

55. Users in South Korea

Where the Personal Information Protection Act (PIPA) applies, UPCHIN CORPORATION processes personal information in accordance with the applicable local requirements, in particular regarding:

transparency;
minimization;
security;
retention;
the exercise of rights;
international transfers;
breach notification where necessary.

Requests may be sent to:

UPCHIN CORPORATION — Privacy Contact
support@upchin.app
78 avenue des Champs-Élysées, bureau 326, 75008 Paris, France
Phone: +33 6 87 35 36 29

Mandatory local rules applicable to children and to the consent of legal representatives prevail over any contrary provision of this Policy.

XIX. MAINLAND CHINA, HONG KONG, MACAO AND TAIWAN

56. Distinct territories

Mainland China, Hong Kong, Macao and Taiwan have distinct regulatory frameworks.

This section must be read together with the mandatory rules of the territory concerned.

57. Mainland China

Where the Personal Information Protection Law (PIPL) or another applicable Chinese rule governs processing carried out by UPCHIN CORPORATION, the required information concerning:

the purpose;
the categories of information;
the processing methods;
the retention periods;
the recipients;
transfers outside China;
the exercise of rights,

is provided in accordance with applicable law.

Upchin’s local design limits the amount of digital-usage information that could be transferred to UPCHIN CORPORATION outside China.

Where personal information is actually transferred from mainland China to a recipient located outside China, UPCHIN CORPORATION applies the transparency obligations, the separate-consent requirements and the transfer mechanisms required where they are legally applicable.

58. Hong Kong

Where the Hong Kong Personal Data (Privacy) Ordinance applies, UPCHIN CORPORATION complies with the principles applicable to the collection, use, security, retention of and access to the personal data it holds.

59. Taiwan

Where the Taiwan Personal Data Protection Act applies, Users have the mandatory rights provided for by that legislation with respect to the personal data actually held by UPCHIN CORPORATION.

Requests for these territories may be sent to support@upchin.app.

XX. OTHER TERRITORIES

60. Precedence of mandatory local rights

Where the User resides in a territory that grants them additional mandatory rights, those rights are not removed by this Policy.

UPCHIN CORPORATION applies this Policy subject to the mandatory local rules actually applicable to its activity.

XXI. APPLE AND APP PRIVACY

61. App Store declarations

UPCHIN CORPORATION keeps the “App Privacy” declarations on the App Store listing consistent with the Application’s actual practices.

Data processed exclusively on the device is not declared as collected by UPCHIN CORPORATION when it never leaves the device.

For the usage statistics described in section 26, the App Store listing declares four categories — “Device ID”, “Product Interaction”, “Other Usage Data” and “Purchase History” —, collected for analytics purposes, as “Data Not Linked to You” and not used for tracking: the journey identifier is a random number that is associated with no identity, no account and no contact details, and no person profile is built at the processor.

No notification token is declared or processed: Upchin’s notifications are local.

The App Store declarations must be updated whenever a version of the Application actually changes these practices.

62. Technical changes

If a future version of Upchin introduces, in particular:

an Upchin account;
server synchronization;
a cloud backup controlled by UPCHIN CORPORATION;
an analytics SDK other than the one described in section 26;
a crash-reporting service that transmits identifiers or personal data;
a social feature;
a new use of Screen Time data;
remote collection of motion or location data;

UPCHIN CORPORATION will update this Policy and, where necessary, the App Privacy declarations, the information screens and the consent mechanisms before or upon the rollout of that feature, in accordance with applicable law.

XXII. CHANGES TO THE POLICY

63. Updates

UPCHIN CORPORATION may amend this Policy to take account of:

a change to the Application;
a change in the law;
a change in Apple’s services;
a new service provider;
a new feature;
a change in security or retention practices.

The version in force states its effective date.

Where a change substantially affects the way personal data is used and the law so requires, the User is informed appropriately and new consent is requested where required.

XXIII. LANGUAGES

64. Translations

This Policy may be translated into several languages so as to be accessible to international Users.

Translations must faithfully reflect the practices described in the reference version.

Where a local law requires a local-language version to prevail or imposes a particular interpretation, that mandatory rule applies.

XXIV. CONTACT

65. Questions, rights and complaints

For any question relating to privacy, to exercise a right or to report a problem concerning personal data:

UPCHIN CORPORATION
Privacy / Support Upchin
78 avenue des Champs-Élysées, bureau 326
75008 Paris
France

E-mail: support@upchin.app
Phone: +33 6 87 35 36 29

Where the request concerns data stored exclusively on the device and never received by UPCHIN CORPORATION, we may not be technically able to access that data. We will indicate, where possible, how to manage it directly in Upchin or in iOS.