Privacy Policy

Who We Serve

Uplyft is a mixed-audience platform. Our users include:

• Parents and guardians (18+) — Full access to all features.
• Young Adults (18–22) — Full access to age-appropriate features.
• Teen users (13–17) — Access via parent or guardian invitation only.
• Little Uplyfters (under 13) — Accounts created and managed entirely by a parent or guardian. Children under 13 do not create their own accounts.

We do not knowingly allow children under 13 to register independently. If we discover that a child under 13 has created an account without verified parental consent, we will delete that account and any associated data promptly.

Children's Privacy (COPPA)

We comply fully with the Children's Online Privacy Protection Act (COPPA) as amended by the FTC's 2025 final rule, effective June 23, 2025.

Little Uplyfters (Under 13)

• Accounts are created, controlled, and managed by a parent or guardian.
• We do not collect personal information directly from children under 13.
• Parents may review, update, or request deletion of their child's information at any time by contacting privacy@uplyftlife.com.
• We do not use a child's personal information for advertising, profiling, or any purpose beyond delivering the core service.
• We do not share a child's personal information with third parties except as strictly necessary to operate the service.
• We do not retain a child's personal information longer than necessary.

Teen Users (13–17)

• Teen accounts are created via a parent or guardian invitation.
• Messages sent by teen users are screened using AI sentiment analysis before delivery.
• Teen data is treated with the same care and protections as data belonging to younger users.

What We Collect

Information You Provide

• Account registration: name, email address, date of birth, and password.
• Profile information: display name, family or group names, and optional profile photo.
• Messages: content you write or generate using AI assistance.
• Groups: names and member details for groups you create.

Information Collected Automatically

• Usage data: features used, pages visited, and actions taken within the app.
• Device information: browser type, operating system, and device type.
• Log data: IP address, timestamps, and error reports for security and performance.
• Analytics: We use Google Analytics 4 to collect aggregated, anonymized usage data. No behavioral profiles are built from this data.

Daily Uplyft Chrome Extension

The Chrome Extension collects minimal data to function:

• storage Used locally to track which messages have been shown, to avoid repetition across sessions.
• alarms Used to schedule a daily motivational notification at 9 AM.
• notifications Used to deliver the daily message as a system notification.
• tabs Used to detect when a new tab is opened so a message can be displayed at the right moment.

The Chrome Extension does not collect, store, or transmit any personally identifiable information. All 365 messages are bundled locally inside the extension — no external API calls are made to fetch content.

How We Use Your Information

• Create and manage your account.
• Deliver motivational messages to your family or group members.
• Generate AI-assisted message suggestions (parent and adult accounts only).
• Screen teen-originated messages for safety using AI sentiment analysis.
• Track streaks, achievements, and gamification progress.
• Send push notifications or, when enabled, SMS messages.
• Improve our platform, fix bugs, and develop new features.
• Respond to support requests.
• Comply with legal obligations.

We do not sell your personal information. We do not use your data to build advertising profiles.

AI-Generated Content

Uplyft uses the Anthropic Claude API to assist parents in generating personalized messages. When you use AI message generation:

• The message context you provide is sent to Anthropic's API to generate a response.
• Teen-originated messages are screened by the same API for content safety before delivery.
• We do not store your prompts beyond what is needed to generate and deliver the message.

Anthropic's own privacy and data use policies apply to API interactions. You can review them at anthropic.com/privacy.

Sharing Your Information

We do not sell, rent, or trade your personal information. We may share information only in these limited circumstances:

• Service providers — Trusted vendors who help us operate the platform, contractually required to protect your data.
• Legal requirements — When required by law, court order, or government authority.
• Safety — To protect the safety of a user, especially a minor, when we believe there is a credible risk of harm.
• Business transfer — In the event of a merger or acquisition, your data may be transferred with advance notice.

Third parties we work with include: Supabase, Vercel, Google Analytics 4, Anthropic, and Twilio (SMS, when enabled).

Data Security

• All data in transit is encrypted using TLS.
• Sensitive data stored in our database is encrypted at rest.
• Authentication is managed via Supabase, which follows SOC 2 Type II security standards.
• Access to user data is restricted to personnel who need it to operate the service.
• Our platform enforces tier-based access rules tied to verified birthdates.
• We collect only what is necessary to operate the service.

In the event of a data incident affecting your personal information, we will notify affected users as required by applicable law.

Data Retention

• Account data — Retained while your account is active.
• Message content — Retained to support streak tracking and history. You may request deletion at any time.
• Children's data (under 13) — Deleted promptly upon parent request or account closure.
• Analytics data — Aggregated and anonymized. No retention limit applies.
• Chrome Extension data — Stored locally on your device only. Not retained by Uplyft servers.

Your Rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to withdraw consent at any time. Parents of children under 13 have the right to review, correct, and delete their child's information at any time. Contact us at privacy@uplyftlife.com to exercise any of these rights. We will respond within 30 days.

Cookies and Tracking

The Uplyft app uses cookies to keep you logged in, support Google Analytics 4, and remember your preferences. We do not use cookies for behavioral advertising. You may manage cookie preferences through your browser settings.

Push Notifications and SMS

• Push notifications can be disabled in your device settings at any time.
• SMS messaging is opt-in and requires a verified phone number. Opt out by replying STOP to any SMS from Uplyft.
• We do not send marketing SMS messages without your explicit consent.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date above and notify registered users via email or in-app notification. Continued use of Uplyft after changes are posted constitutes acceptance of the updated policy.