Uppa Privacy Policy
Effective: 1 November 2026
Uppa is an app and website that helps people on GLP-1 medicines build a daily routine around their treatment. It is made by Zero Morphism LLC, a California limited liability company ("Uppa", "we", "us"), 647 Escuela Pl, Milpitas, CA 95035.
This policy explains what we collect, why, who sees it, how long we keep it and what you can do about it. It covers the Uppa app, the Uppa website and our emails.
Health data has its own policy as well. Our Consumer Health Data Privacy Policy covers it in detail, as some US state laws require.
The short version
- We collect what you log so we can build your daily plan. That includes health information such as symptoms, meals, doses and weight.
- We never sell your data. We never use it for advertising. We have no ad trackers.
- We share data only with companies that run parts of Uppa for us. They work under contract, can use it only for us, and can't train AI on it.
- You can see, export and delete your data at any time in the app, or by emailing privacy@flyuppa.com.
- Uppa is for adults (18+). It is not medical advice and not for emergencies.
1. What we collect
You give us
| What | Examples | When |
|---|---|---|
| Account | Email address, or a Sign in with Apple ID; your name if you choose to give it | When you create an account |
| Plan setup | Wake and bed times, meals per day, how you like to move, your medicine, dose, how often you take it and when you started, stage (losing, maintaining, stopping), height, sex, age range, weight and goal range, any fluid limit or salt restriction you tell us | Onboarding and Profile |
| Logs | How you feel (symptoms and how strong), meals (photo, description or items), drinks, doses, weight, "Nothing bothering me", "Better now" | Whenever you log |
| Answers | Answers to the app's check backs ("How's your nausea now?") | When you answer |
| Choices | Foods you avoid, "Not for me", skipped steps, reminder settings, privacy settings | When you choose them |
| Feedback and support | Beta feedback (through TestFlight or email), messages to support | When you send them |
| Waitlist and newsletter | Email address, and the language of the page you signed up on | Only if you sign up |
Made by the app from what you give us
- Your daily plan, the changes the app makes to it, and why.
- Nutrition estimates for meals (protein, fibre, calories and so on), and food tags (for example "fried" or "spicy"). You can correct them.
- Records of each decision the app makes, so we can check it works as designed.
Collected automatically
- App: app version, device model and operating system version, crash reports and error logs. Crash reports reach us only through Apple: from TestFlight testers, or if you've allowed your iPhone to share analytics with app developers (Settings → Privacy & Security → Analytics & Improvements). They don't include what you type or log. We use no other crash or analytics tool.
- Apple Health: only if you allow it, the app reads your wake and bed times (from your sleep data) and your weight. It never writes to Apple Health. Apple Health data is never used for advertising or sold, and is used only to build your plan. You can stop it any time in the Health app or iPhone Settings.
- Website: server logs at Cloudflare, which hosts the website (IP address, browser type, page requested, time). No cookies other than what's strictly needed for the site to work. No analytics or advertising tools.
- Purchases: if you start a free trial or subscribe, Apple tells us whether your trial or subscription is active. We never see your card.
- Beta testing: if you test Uppa through TestFlight, Apple shares with us your name and email (as you gave them to TestFlight), the build you installed, and any feedback and screenshots you send.
We don't collect your precise location. Meal photos have their location and camera data removed before they leave your phone.
2. Why we use it
| Purpose | Data used | UK and EU legal basis |
|---|---|---|
| Build and adapt your daily plan, show tips and safety prompts such as "Worth a call" | Plan setup, logs, answers, choices, and Apple Health data if you allow it | Your explicit consent for health data (UK and EU GDPR Art. 9(2)(a)); our contract with you for the rest |
| Estimate nutrition from meal photos and descriptions | Meal photos and descriptions | Your explicit consent (a separate switch; you can log without photos) |
| Run your account, keep it secure, fix crashes | Account, technical data | Contract; legitimate interests (keeping Uppa safe and working) |
| Run your free trial and subscription | Trial and subscription status from Apple | Contract |
| Run the beta test with invited testers | Account, TestFlight details, feedback | Contract |
| Answer support messages and feedback | What you send us | Contract; legitimate interests |
| Only if you turn on "Improve Uppa": check and improve how the app picks changes, using de-identified data | Logs and plan data with your identity removed | Your consent. Off unless you switch it on |
| Tell you when Uppa launches (the waitlist) and send the newsletter | Email, language | Your consent. Unsubscribe in any email |
| Meet legal duties, deal with claims | What the law or the claim needs | Legal obligation; legitimate interests |
We don't:
- sell your data;
- use or share it for advertising;
- make decisions with legal or similarly significant effects about you by automated means;
- let any vendor train AI on your data.
The app's plan changes are automated suggestions about everyday habits, such as a glass of water or a smaller meal. You can always skip them or say "Not for me".
3. Who sees it
- Service providers who run parts of Uppa for us, under written contracts that limit them to our instructions:
- Amazon Web Services: hosting and storage for the app, in the US
- Cloudflare: hosts the website and delivers its pages. It handles your IP address and the pages you ask for, on its global network. It also stores waitlist and newsletter sign-ups, in North America
- Amazon Web Services also runs the AI that estimates nutrition from a meal photo: Anthropic's Claude model, on Amazon Bedrock. The photo stays within AWS. It isn't kept after the estimate, isn't sent to Anthropic and isn't used to train any model.
- Google Workspace: our email, including support@ and privacy@. It holds the messages you send us
- Amazon Simple Email Service (Amazon SES), part of Amazon Web Services: sends account, waitlist and newsletter emails, with open and click tracking turned off
- Apple: to distribute the app (App Store and TestFlight), handle purchases and pass us crash reports. Apple's own privacy policy applies to what Apple collects.
- Professional advisers (lawyers, accountants), under confidentiality.
- Authorities, only when the law requires it. Where the law allows, we'll tell you first.
- A buyer of Uppa, if the company or its assets are sold. We'll tell you first, the buyer must keep this policy, and health data needs your consent where the law requires it.
Nobody else. We don't share with advertisers, data brokers, employers or insurers. We don't share with your clinician unless you send them something yourself.
4. How long we keep it
| Data | Kept |
|---|---|
| Account, plan, logs | While your account is open. Deleted within 30 days after you delete your account, and from backups within a further 35 days |
| Meal photos | Deleted after the nutrition estimate is made. The estimate stays with the meal |
| Beta feedback | 24 months, then deleted or fully anonymised |
| Support messages | 24 months after the conversation ends |
| Waitlist email | Until we've sent the launch email, or until you unsubscribe if that's sooner. Sign-ups never confirmed: deleted within 7 days |
| Newsletter email | Until you unsubscribe |
| Website server logs | 30 days |
| Crash reports | Held by Apple in its developer tools under Apple's terms. Copies we download: 90 days |
| Records the law requires (for example purchase records) | As long as the law requires |
5. Your rights
Wherever you live, you can:
- see what we hold about you, and get a copy (Profile → Privacy → Export, or email us);
- correct it (edit anything you logged; your Profile);
- delete it (Profile → Privacy → Delete account, or email us);
- withdraw consent at any time (Profile → Privacy). Withdrawing doesn't undo what was done before. Your plan is made from your health data, so to withdraw that consent you delete your data (Profile → Privacy → Delete my data);
- leave the waitlist or the newsletter (the link in every email).
US residents of states with privacy laws (including California, Washington, Nevada, Connecticut, Colorado, Virginia and others) also have rights to:
- know which third parties received your data;
- appeal if we refuse a request (reply to our answer with "appeal");
- not be treated differently for using your rights.
We honor Global Privacy Control signals. We don't sell or share data for advertising, so there's nothing to opt out of, but we treat the signal as your choice anyway.
UK and EU residents also have rights to restrict or object to processing and to data portability, and to complain to a regulator: in the UK the Information Commissioner's Office (ico.org.uk, 0303 123 1113); in the EU the data protection authority where you live or work (listed at edpb.europa.eu). Please contact us first so we can try to help.
How to ask: use the app, or email privacy@flyuppa.com from the address on your account. We'll confirm your request within 10 days.
- US: we answer within 45 days. We may extend once by 45 days and will tell you if we do.
- UK and EU: we answer within one month, which can be extended by two months for complex requests.
- Proving it's you: we may ask you to confirm from your account email.
- Someone acting for you: an authorized agent can ask on your behalf with your signed permission.
6. Security
- Encryption: data is encrypted in transit and at rest.
- Access: limited to the people who need it, logged and reviewed.
- App lock: available in Profile.
- Breaches: if one affects you, we'll tell you and the regulators as the law requires (for example within 72 hours to the ICO or the EU data protection authority, and under the US FTC Health Breach Notification Rule).
7. Children
Uppa is for adults 18 and over. We don't knowingly collect data from anyone under 18. If we learn we have, we delete it.
8. International transfers
We're a US company and store data in the US. Waitlist and newsletter sign-ups are stored by Cloudflare in North America. Cloudflare delivers the website from servers around the world, usually the one closest to you. If you're in the UK, your data is transferred to the US under the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge") where the recipient is certified, or under the UK International Data Transfer Agreement or Addendum. If you're in the EU, it's transferred under the EU–US Data Privacy Framework where the recipient is certified, or under the EU Standard Contractual Clauses.
UK representative (UK GDPR Art. 27): to be appointed before Uppa is available in the UK. We'll name them here.
EU representative (EU GDPR Art. 27): to be appointed before Uppa is available in the EU. We'll name them here.
9. Cookies
The website uses only cookies that are strictly needed to make it work, for example to remember that you've already submitted a form. We use no analytics, advertising or social media cookies, pixels or tags, so there's no cookie banner. If that ever changes, we'll update this policy and ask for your consent first.
10. Changes
If we change this policy, we'll update the date at the top.
- If a change affects how we use health data, or is otherwise significant, we'll tell you in the app or by email before it takes effect.
- Where the law requires it, we'll ask for your consent again.
11. Contact
Zero Morphism LLC, 647 Escuela Pl, Milpitas, CA 95035 · privacy@flyuppa.com
UK representative: to be appointed before Uppa is available in the UK.