Skip to content

Legal

Privacy Policy

What Upform collects, why, who we share it with, how long we keep it, and how you stay in control. Written to be read, not skimmed past.

Last updated
22 October 2026
Effective
22 October 2026

At a glance

  • No ads, no trackers

    The app has no advertising, analytics or third-party tracking tools.

  • We never sell your data

    Your information goes only to the providers that host the Service for us.

  • Only what's needed

    An email address to sign in. Body measurements are optional.

  • Saved on your phone first

    Workouts are stored on your device and backed up to your account to sync.

  • You're in control

    Edit or delete workouts, plans and weigh-ins, or your whole account.

  • Ask us anything

    hello@upform.fitness

On this page

1.Who we are

Upform Fitness ("Upform", "we", "us") is a workout planner and tracker. This policy covers the Upform mobile app, the Upform service that backs up and syncs your data, and our website at upform.fitness (together, the "Service").

The Service is operated by SOZANCE TECHNOLOGIES LLC, 30 N Gould St, STE R, Sheridan, WY 82801, United States. For data protection law, we are the controller of the personal information described in this policy. You can reach us about privacy at hello@upform.fitness.

2.Information we collect

We collect only what the Service needs to work. Most of it you give us directly; a small amount is created automatically when the app talks to our servers.

Account information

  • Email address. You sign in with your email address and a 6-digit code we send to it. An account is required to use the app.
  • Name. Optional. We ask for it during setup and you can change it in Profile.
  • Sign-in codes. When you request a code, we store it with your email address until it is used, expires or is locked after too many wrong attempts.

Training profile

When you set up the app, you answer a short questionnaire. We store your answers:

  • your goal, experience level, where you train (equipment), focus areas, workouts per week and preferred session length;
  • optionally, your gender, birth year, height and body weight, and whether you prefer kilograms or pounds.

Your answers are saved to your account so another device can skip setup. The app uses them to build your starter plan on your phone.

Workouts, plans and progress

  • Plans and schedules: plan names and notes, training days, exercises, target sets, reps, times, weights and rest periods, the weekdays you train and any days you skip or move.
  • Workouts: title, start and end time, time zone and calendar day, notes, the exercises you did and each set's weight, reps or duration and when you completed it.
  • Body weight log: the weight you record and the day you recorded it.

Device and technical information

  • Session records. When you sign in, we store a record of that session: a random identifier the app creates for your installation (not your phone's hardware or advertising identifier), your platform (iOS or Android), your device's user-agent string and the IP address the request came from. We use this to keep you signed in and to detect stolen sessions.
  • Sync records. To keep your devices in step, we keep a log of the changes each device has uploaded and which device made them.
  • Server logs. Our hosting provider processes standard request information, such as IP address, time, requested address and errors, to run and secure the Service.

Information that stays on your phone

Some things are worked out or stored only on your device and are not sent to us: your body mass index (BMI) and estimated daily calories, personal records, charts and consistency figures (calculated from your workouts), your display preferences (units, light or dark appearance) and unfinished setup answers.

What we don't collect

The app does not access your location, contacts, photos, camera or microphone, and does not read from Apple Health or other health platforms. It contains no advertising, analytics or third-party tracking tools, and does not use your device's advertising identifier. We don't take payments. If this changes, we will update this policy first and, where the law requires it, ask for your permission.

3.Health and fitness information

Your body weight, height, birth year, gender, fitness goal and workout history can say something about your health. Some laws treat this as sensitive or "consumer health" data, for example the EU and UK GDPR (in some cases), and health data laws in US states such as Washington and Nevada.

  • Body measurements, gender and birth year are optional. You can skip them.
  • We use this information only to provide the Service to you: building your plan, showing your progress and syncing it between your devices.
  • We do not sell it, use it for advertising, or share it with anyone except the service providers that host the Service for us.
  • We only collect your height, weight, year of birth and weigh-ins after you agree to it separately in the app, with a box that is not ticked in advance. If you don't agree, you can still use the app without them.
  • You can withdraw your consent at any time in Profile → Training profile. This deletes your height, weight, year of birth and every weigh-in from your account and your devices.

4.How we use your information

  • To run your account: to sign you in, keep you signed in and send you sign-in codes.
  • To provide the app's features: to build your starter plan, back up your plans, workouts and weigh-ins, and sync them across your devices.
  • To keep the Service secure: to limit repeated requests (for example, guesses at sign-in codes), detect misuse and stolen sessions, and fix errors.
  • To meet legal obligations and to establish, exercise or defend legal claims.

We only send emails needed to use the Service, such as sign-in codes. We don't send marketing emails. Your starter plan is generated automatically from your answers, but we don't make decisions about you that have legal or similarly significant effects.

6.How long we keep it

We keep information only as long as we need it:

Account and training profile
Until you delete your account. After a year without activity we erase your name and training profile, but keep the account itself (see below).
Plans, workouts and weigh-ins
Until you delete them or your account, or until your account has been inactive for a year. See below for what happens when you delete an item.
Sign-in codes
Valid for 10 minutes and locked after 5 wrong attempts. Expired codes are deleted by a daily clean-up.
Session records (installation ID, platform, user agent, IP address)
A session lasts up to 7 days unless renewed. Expired session records, and renewed ones after a further 7 days, are deleted by a daily clean-up.
Sync upload records
Records of each change a device uploaded are deleted after 180 days.
Server logs
Request logs are kept for 7 days and then deleted.
Backups
Database backups are kept for 1 day and then overwritten.

When you delete a workout, plan or weigh-in

It disappears from the app on all your devices. On our servers, a deleted workout's exercises and sets, and a deleted plan's days and exercises, are erased. To stop an older device from bringing a deleted item back, we keep a deletion marker: for a workout or plan, its top-level record (such as its title, notes and dates); for a weigh-in, the day's entry, including the weight recorded. These markers are not shown in the app and are kept until your account is deleted or its data is erased for inactivity.

Inactive accounts

If you don't sign in or open the app while signed in for a year, we erase your account's data from our servers: your name, training profile, plans, workouts, weigh-ins, deletion markers, sync records and sessions. Your account itself, meaning your email address, is kept, so you can sign in again with the same email and start fresh. If you want the account removed too, delete it as described below.

On your phone

The app stores your data on your phone so it works offline. Signing out does not delete it: it stays on the device, separate for each account, until you sign back in, delete your account in the app, or delete the app. Erasing an inactive account's data on our servers doesn't reach your phone: if you sign in again on a phone that still has a copy, the app asks you to review the plans and workouts on it, and uploads its weigh-ins again.

7.Your choices and controls

  • Edit: change your name and training profile in Profile, and edit finished workouts in Progress.
  • Delete items: delete individual workouts, plans and weigh-ins at any time.
  • Skip optional details: gender, birth year, height and weight are not required.
  • Delete your account: in the app, go to Profile → Delete account, or email hello@upform.fitness from the address on your account. Deleting your account permanently deletes your account, training profile, plans, workouts, weigh-ins, deletion markers, sync records, session records and profile photo from our servers, and the app removes your data from that phone. We keep nothing apart from anything we must keep by law. Data in backups is removed when those backups expire.

8.Your privacy rights

Depending on where you live, you may have the right to:

  • know what personal information we hold about you and get a copy of it;
  • correct information that is wrong;
  • have your information deleted;
  • receive your information in a portable format;
  • object to or restrict some processing, and withdraw consent you have given;
  • appeal our decision if we decline your request;
  • complain to us, and to a data protection authority.

To make a request or a complaint, email hello@upform.fitness. We will confirm we received it, may ask you to confirm you control the email address on the account, and will respond within the time the law allows (for example, one month under the GDPR, or 45 days under California law). We won't treat you differently for exercising your rights.

9.Security

We protect your information with measures that include:

  • encryption in transit (HTTPS) between the app and our servers;
  • storing only a one-way hash of your session tokens on our servers, and keeping the token on your phone in the system's secure storage (the iOS Keychain or Android Keystore);
  • sign-in codes that expire after 10 minutes and lock after 5 wrong attempts, plus limits on repeated requests;
  • separating each account's data so it can only be read with that account's access.

Data stored by the app on your phone is protected by your device's own security, such as its passcode. No system is completely secure. If a breach affects your information, we will notify you and the authorities as the law requires.

10.Children

The Service is not directed to children. You must be at least 18 to use it. We don't knowingly collect information from anyone younger. If you believe a child has given us information, contact us at hello@upform.fitness and we will delete it.

11.Our website

This website does not use cookies, analytics or advertising tools, and does not ask you for any information. Our hosting provider may keep standard server logs (such as IP address and pages requested) to deliver and secure the site. If you email us, we use your message and email address only to reply.

12.Changes to this policy

We will update this policy when our practices change, and change the "Last updated" date above. If a change is significant, we will tell you in the app or by email before it takes effect and, where the law requires it, ask for your consent.

13.Contact us

Questions, requests or complaints about privacy:

  • Email: hello@upform.fitness
  • Post: SOZANCE TECHNOLOGIES LLC, 30 N Gould St, STE R, Sheridan, WY 82801, United States