Privacy
Policy.
upsanddowns is an independent DBT skills practice tool built and operated by Stef, an individual developer based in Canada. It is not a clinical service, a healthcare provider, or a corporation.
For questions about this policy or your data, contact us at hello@upsanddowns.xyz.
We collect only what is necessary to provide the app's core functionality.
Account information
When you sign in with Google, we receive your name, email address, and profile photo from Google. This is used to identify your account and display your name and avatar within the app. We do not access your Google contacts, calendar, drive, or any other Google data.
Mood entries and tracker data
When you log a check-in, we store your mood score (1-10), the skills you selected, any note you wrote, and a timestamp. This data is stored under your account and is only accessible to you.
App usage preferences
A small amount of preference data (such as whether you have dismissed the support card) is stored locally on your device using your browser's local storage. This data never leaves your device.
We do not collect:
- Your location
- Device identifiers beyond what Firebase Authentication provides
- Analytics or behavioural tracking data
- Any data from within skill exercises (your typed responses stay on your device unless you save them as a tracker entry)
Your data is used for one purpose: making the app work for you.
- To authenticate your account and keep your data tied to you across devices
- To display your mood history, stats, and skill usage patterns within the app
- To enable you to export your own data as a CSV file
We do not use your data to train AI models, build advertising profiles, or share insights with third parties. We do not send marketing emails.
Your account and tracker data is stored in Google Firebase (Firestore), a cloud database operated by Google LLC. Firebase is hosted on Google Cloud infrastructure. Data may be stored on servers located in the United States or other countries where Google operates data centres.
Google's data processing practices are governed by the Firebase Privacy and Security documentation and Google's broader privacy commitments.
We do not operate our own servers or databases beyond what Firebase provides.
You have full control over your data.
- Export - You can export all your tracker entries as a CSV file at any time from the tracker screen within the app.
- Delete entries - Individual entry deletion is available within the app.
- Delete your account - To request complete deletion of your account and all associated data, email hello@upsanddowns.xyz. We will process deletion requests within 30 days.
- Revoke Google access - You can revoke upsanddowns' access to your Google account at any time through your Google Account settings.
If you are located in the European Economic Area, United Kingdom, or Canada, you may have additional rights under applicable privacy legislation (GDPR, UK GDPR, PIPEDA) including the right to access, correct, or port your data. Contact us at hello@upsanddowns.xyz to exercise any of these rights.
Mood logs, skill usage, and personal notes are sensitive by nature. We treat this data with the same seriousness you bring to recording it.
This data is never shared with insurers, employers, advertisers, researchers, or any third party. It is not used to make inferences about you beyond what you see in your own stats screen. It is not sold, licensed, or monetized in any form.
upsanddowns is not a covered entity under HIPAA and does not provide healthcare services. The app is a personal skills practice tool. If you are working with a therapist or treatment provider, this app is designed to complement, not replace, that relationship.
The following third-party services are used to operate upsanddowns:
- Google Firebase - authentication and database storage. Privacy policy →
- Google Fonts - typeface delivery (Fraunces). No personal data is transmitted beyond standard web request headers. Privacy policy →
- Stripe - optional subscription payments, if you choose to support the app. Stripe processes payment data directly; we do not store card information. Privacy policy →
No advertising networks, analytics platforms, or data brokers are used.
upsanddowns is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, please contact us at hello@upsanddowns.xyz and we will delete the account promptly.
If we make material changes to this privacy policy, we will update the effective date at the top of this page. For significant changes, we will provide notice within the app. Continued use of upsanddowns after changes are posted constitutes acceptance of the updated policy.
We will never materially change how your sensitive health-related data is used without explicit notice.
If you have questions about this policy, want to exercise your data rights, or need to report a concern:
We aim to respond within 5 business days.