ImUp — Privacy Policy
Last updated: 19 September 2026
ImUp is a small app for telling friends you're free. This policy describes everything it collects and why. It is short because the app collects little.
There is no account
ImUp has no email, no password, no phone number and no social login. Opening the app creates an anonymous account tied to that install. Your identity in ImUp is a display name you type and a character you pick — nothing that identifies you outside the app.
If you delete the app, that account cannot be recovered. There is no credential to sign back in with.
What is stored
- Your name, character, colour and shape. What friends see on their shelf.
- Whether you're up, for how long, and your optional note. Deleted by arithmetic rather than by us: a session simply stops counting once its end time passes.
- Your friend code, and who is on your shelf. Friends are added only by someone typing a six-character code. ImUp never reads your contacts, and there is no search — nobody can find you by name.
- What you send. Taps, tickles, punches, event invitations, group plans, the answers you put up and the ones you agree with, and knocks — including any note, drawing or pixel art, and anything you type when you answer one.
- Who you have blocked. So they cannot reach you or add you again. Only you can read your own block list.
- That you agreed to the terms, and when. A date and a version number, so it is possible to tell who agreed to which wording.
- Push tokens. Two identifiers Apple issues for your device, so a tap or a knock can reach it. They identify a device to Apple's servers, nothing more.
When you report something
Reporting content is the one place ImUp keeps a copy of something after it would otherwise have expired, and it is worth being exact about it.
Filing a report stores: who reported it, who sent it, the reason chosen, an optional note you type, and a copy of the reported words and drawing. The copy is deliberate — a knock is deleted a few minutes after it is sent, so a report that only pointed at one would be empty by the time anybody read it.
Reports are reviewed within 24 hours. They are readable only by us: no user can read a report, including the person who filed it and the person it is about, so nobody can find out who reported them.
A report outlives the account it is about. If the person who sent the content deletes their account, or we terminate it, the report and its copy of the content remain — deleting the evidence along with the offender would make the report useless. Reports are kept for up to 12 months and then deleted.
What is not
ImUp has no analytics, no advertising identifier, no third-party tracker and no crash reporter of its own. Nothing is sold, shared with advertisers, or used to build a profile of you. Nothing you do in ImUp is tracked across other apps or websites.
We do not read your contacts, location, photos, microphone or camera. The app never asks for those permissions because it never uses them.
Who can see what
- People on your shelf can see your name, character, whether you're up and your note. Nobody else can.
- Someone who is not your friend cannot see that you exist. This is enforced in the database rather than in the app: every table refuses to return rows to anyone outside your shelf, so it holds even if a modified client asks.
- Declining a knock is private. The person who knocked is never told, and cannot find out — the record of a decline is stored where only the person who declined can read it. Their knock simply runs out as if the phone had stayed in a pocket.
Where it lives
Data is stored with Supabase (Postgres), and push notifications are delivered by Apple's Push Notification service. Drawings you send travel inside the push to the recipient's lock screen and are stored with the knock that carried them.
Avatar artwork is drawn by DiceBear (api.dicebear.com) from the style and the seed attached to a profile. The seed is a random eight-character string, not your name, so what that request carries is an opaque identifier, the style, and your device's IP address. No profile data, and nothing you send, ever reaches it.
How long
- Up-sessions, events, plans and knocks expire on their own and stop being visible once they do.
- Groups last until the last person leaves, and are deleted when they do.
- Reports are kept for up to 12 months, and survive the deletion of the account they are about — see When you report something above. They are the one exception to the line below.
- Everything else lasts until you delete your account.
Deleting everything
Open your profile and choose Start over on this phone. It asks once more, and then deletes the account itself — not just the session on this device. Your profile, friendships, up-sessions, taps, events, plans, opinions, knocks, drawings, block list and push tokens are all removed with it.
Reports filed about you also survive, for up to 12 months, for the reason given above. Reports you filed about other people survive too — they are evidence in somebody else's case, not your data to withdraw.
The other thing that survives is a group other people are still in: it is handed to whoever has been in it longest, because deleting it would be deleting their data as well as yours. You are removed from it either way.
There is no way back. An anonymous account has no credential to sign in with, so deleting it is final.
Children
ImUp is not directed at children under 13 and does not knowingly collect their information.
Changes
If this policy changes, the date at the top changes with it.
Contact
Questions about this policy, or a request to delete your data: internethumanco@gmail.com