Privacy Policy

What the upeak website and beta collect, why, who sees it, and how to make us stop. Written to be read, not skimmed.

Who we are

upeak ("upeak", "we", "us") operates the website at upeak.io and is building the upeak suite of apps: PeakU, PeakVital, PeakBeat, PeakClothes, PeakLook, PeakWatch. This policy explains what we collect through the website and the beta programme, why, and what you can do about it. Contact: hello@upeak.io.

What we collect on this site

The website is a static page. It collects data in exactly three places:

1. The waitlist form

When you join the waitlist we receive what you type: your email address (required), your name (optional), the apps you tick, and anything you write in the "what should it fix first" box, plus the page you submitted from and the time. The form is relayed to our inbox by FormSubmit (formsubmit.co), a form-to-email service that processes the submission in transit and does not keep a copy for us. We keep the email in our inbox and a private waitlist list.

2. Analytics

We use Google Analytics 4 to understand which pages and apps people are interested in. It is configured with advertising storage, ad user data and ad personalisation denied, Google Signals off and IP anonymisation on. It records page views and interaction events (for example that a waitlist form was submitted and which apps were ticked — never the email address). Google may set first-party cookies (_ga, _ga_*) to tell returning browsers apart.

3. Hosting logs

The site is served by Vercel, which keeps short-lived request logs (IP address, user agent, URL, time) for security and reliability. Fonts are loaded from Google Fonts, which receives the request for the font files.

We do not run advertising, retargeting, social pixels or session recording, and we do not buy data about you from anyone.

Why we use it

To run the beta. Your email and app choices decide which invitation you get and when. Legal basis: the steps you asked us to take before entering the beta (contract), and our legitimate interest in running a small, orderly launch.
To understand demand. Aggregated analytics tell us which apps people want first. Legal basis: legitimate interest; you can block it with any content blocker or Google's opt-out add-on and nothing on the site breaks.
To keep the site up and safe. Hosting logs. Legal basis: legitimate interest.

We will email you when your beta slot opens and, at most, a handful of times about the beta itself. There is no newsletter. Every email has a way to say stop.

Data inside the apps

The apps are in private beta and each will ship its own in-app privacy notice. The commitments they are built on, which this policy also makes to you now:

Health data is sensitive and treated that way. PeakU and PeakVital read data you already generate (sleep, heart rate, HRV, workouts, weight and similar) only with your explicit permission through Health Connect and the services you connect. It is encrypted at rest, tied to a per-install identity rather than your name, never written to logs in raw form, and deleted outright when you delete your account.
On-device wherever possible. PeakClothes keeps your wardrobe photos and history on your phone; backups exist only if you turn them on. PeakBeat's listening model and workout data never leave the device.
Mail stays where it lives. PeakLook reads your Microsoft 365 mailbox through Microsoft Graph with your consent, keeps only what it needs to run the sequences you enrol, and never stores your AI keys — they are sent per request and discarded.
No selling, no advertising use. We do not sell, rent or trade personal data, and we do not use it for advertising.
Not medical advice. Scores, ages and recommendations are fitness estimates, not diagnoses. See the Terms of Use.

Only the processors named above, each for the single job described: FormSubmit (relaying form submissions), Google (analytics; fonts), Vercel (hosting), and the email provider that holds our inbox. We may disclose data if the law requires it, or to protect the rights and safety of users. If upeak is ever acquired, your data moves with the service under this policy, and we will tell you.

How long we keep it

Waitlist data: until the beta ends or you ask us to remove you, whichever is first, and in any case no longer than 24 months after your last contact.
Analytics: Google Analytics event data is retained for 14 months, then aggregated.
Hosting logs: retained by Vercel for a short rolling window.

Your rights

Wherever you are, you can ask us to access, correct, export or delete the data we hold about you, to object to processing based on legitimate interest, and to withdraw consent at any time. Email hello@upeak.io from the address you signed up with; we answer within 30 days and usually much sooner. If you are in the EU/EEA or UK you also have the right to complain to your data protection authority. If you are in California, we do not sell or share personal information as defined by the CCPA, and we honour the rights above regardless of where you live.

Cookies

The site sets no cookies of its own. Google Analytics sets first-party analytics cookies as described above. The waitlist form uses no cookies. You can clear or block cookies in your browser at any time; the site works without them.

Children

The site and the beta are for adults. We do not knowingly collect data from anyone under 16; if you believe a child has joined the waitlist, tell us and we will delete the entry.

Changes to this policy

We will update this page when the facts change — for example when an app launches with its own notice, or if we add a processor. The date at the top tells you when. Material changes to how we use waitlist data will be announced by email before they take effect.