Upwardo
WhyHow it worksComparePricingFAQPrivacyDownloadSee the price — it’s on the door
Privacy

Upwardo Privacy Policy

Last updated: 2026-09-07

No account and no bank connection: your ledger lives on your phone, and sync between your devices is encrypted end to end so our server never reads it. The only plain text that reaches us is the entry text you confirm for an AI draft.

Seller: WaveApp LLC

Checkout: Apple · Google

Contact: support@upwardo.app

Product domain: upwardo.app

1. What never happens

  • Upwardo never connects to a bank, never asks for a login, and never holds a password.
  • Our server never sees your amounts, merchants, envelopes or notes in readable form; sync carries only ciphertext your devices can open.
  • Receipt images and voice recordings never leave your phone. Text is read from them on the device.
  • The 1.0 app sends no usage analytics from your device. No ads, no sale of data.

2. Data we touch

2.1 Data on your device

Data: a local database holding your envelopes, entries, budgets, exchange rates and settings.

Used to: run the app. It is read by nothing else.

Kept: until you export, run "Delete everything" or uninstall. Export to a lossless Upwardo CSV, restorable, or a spreadsheet CSV is free, always.

2.2 Sync between your devices

Data: an encrypted operation log and the two newest encrypted snapshots of your ledger, a sync group identifier, and the public keys of the devices you paired. Pairing passes a one-time code through our relay.

Used to: keep your devices in step. Only your devices hold the key, so the relay stores what it cannot read.

Who: WaveApp LLC and its hosting and security providers in the United States.

Basis: performing the contract with you.

Kept: until you run "Delete everything" in the app, which wipes the phone and tells the relay to delete the group. A pairing code is wiped within 10 minutes. After deletion a tombstone remains with the group identifier and an opaque analytics subject, and nothing else.

2.3 Purchase and entitlement

Data: the store receipt and transaction identifiers for a Plus purchase, plus an anonymous app-instance identifier.

Used to: unlock Plus, restore it on a new device, and keep it working offline.

Who: Apple App Store or Google Play takes the payment; RevenueCat checks the receipt. We never see your card number.

Basis: performing the purchase contract.

Kept: by the store under its own terms; by RevenueCat while Upwardo is on sale, so Restore purchase keeps working.

2.4 AI drafts and monthly review

Data: the receipt or voice text you confirm, its locale and currency, and up to 64 envelope names. A monthly review uses per-currency and per-envelope totals, comparison amounts, anomaly flags and envelope labels. Receipt images and voice recordings stay on your device.

Used to: ask OpenAI for an editable draft or review. Nothing enters your ledger until you confirm it.

Who: OpenAI processes the request for WaveApp LLC. OpenAI states that API data is not used to train its models by default. Its default abuse-monitoring logs keep request content for up to 30 days. We do not claim Zero Data Retention or regional processing until the production project proves those settings.

Basis: performing the AI feature you requested.

2.5 Usage analytics — none in 1.0

The 1.0 build ships no analytics key, so no usage event leaves the device. If a later release adds analytics, this page and the store data declarations change first. Even then, no event will carry an amount, a merchant, an envelope name, a memo, a receipt, a transcript or free text.

2.6 Support email

Data: what you write to support@upwardo.app, and your address.

Used to: answer you.

Kept: 12 months after the thread closes.

2.7 The website

upwardo.app sends no analytics and keeps no access log. Hosting and security providers process your IP address to deliver the page.

3. Processors

  • Apple App Store and Google Play — payment and receipts (United States).
  • RevenueCat — entitlement verification (United States), under its data processing terms.
  • Hosting and security providers — delivery and protection of site and encrypted-sync traffic (United States).
  • OpenAI — AI draft and monthly-review processing; default API abuse-monitoring logs are kept for up to 30 days.

Nobody else receives data from Upwardo. We do not sell data and we show no advertising.

4. Your rights

If you are in the EU, the UK or another place with data-protection rights, you can ask us to show, correct, delete, restrict, export or stop using data about you. You can also complain to your local supervisory authority. Write to support@upwardo.app; we answer within one month. We hold no readable record of you beyond a support thread and a draft count. Most requests therefore end at the export and "Delete everything" controls in the app, or at the store for purchase records.

5. Children

Upwardo is not directed at children, and it knowingly collects no personal data from them.

6. Changes

If a change would affect what data we touch, we announce it in the app's update notes before it takes effect.

7. Contact

support@upwardo.app — WaveApp LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA