Privacy Policy
Last updated: 2026-07-04. Draft for App Store review; replace the contact + entity details before submission.
BringUp helps you remember what you want to say, ask, or share with the people who matter, and bring it up at the right moment. Privacy is the core of the product, not an afterthought.
The short version
- Private by default. Everything you capture is private to you until you explicitly choose to share a specific item with a specific person.
- Local-first. Your data lives on your device (encrypted by iOS). It syncs to our backend only after you sign in, and only so you can use it across your devices and share 1:1.
- We never sell your data, and we never use the content of your BringUps or notes for advertising.
What we store
- Account: your email (for email sign-in) or an Apple-provided identifier (Sign in with Apple). Used only to authenticate and sync.
- Your content: people you add, the things you want to bring up, notes, reminders, and attachments. Private items are visible only to you. Shared items are visible only to the specific person you shared a space with.
- Contacts: if you grant access, contacts are read on your device to help you add people quickly. We do not upload your contacts. When you explicitly add an email or phone number for someone, only an irreversible hash of that single value is sent — never the raw value. See "Contact matching" below.
- Verified identity: if you confirm your own email or phone number (via a one-time code), we store a hash of it so other users' hashes of your email/phone can be matched against it. See "Contact matching" below.
- Analytics: privacy-safe, aggregate product analytics consisting solely of counts, enumerated categories, and booleans. By design it is structurally impossible for analytics to contain the text of a BringUp, a note, a name, an email, a phone number, or a URL.
- Diagnostics: crash/error reports with PII scrubbed.
Contact matching
BringUp can tell you, anonymously, when someone you know has things to bring up with you — without either of you ever uploading an address book.
- How it works: when you add someone's email or phone number to a person card, or confirm your own, the value is normalized (email lowercased, phone in standard international format) and run through a one-way HMAC-SHA256 hash with a secret server-side key. Only that hash is stored — the raw email or phone number is never saved on our servers.
- Matching: if the hash of a contact value you added matches the hash of an email or phone number another user has verified as their own, our server can tell each of you that "someone" has active things to bring up — as a count only, never a name, title, or timestamp.
- Double opt-in reveal: if you and another user have each added or verified matching contact info for one another, each of you sees an anonymous "someone you know wants to connect" prompt. Names are revealed to each other only if both of you choose to accept. Declining reveals nothing to the other person, ever — their prompt simply disappears.
- Phone verification: confirming a phone number sends a one-time SMS code (via our SMS provider, Twilio, once BringUp is generally available) to prove you control that number before it's added to the matching registry.
- Deletion: deleting your account removes your verified identity hashes and any pending or connected matches along with the rest of your data (see "Your controls" below).
Sharing
Sharing is per-item and opt-in. A person you share a space with can see only the items you mark shared in that space — never your private items. Making an item private again removes it from the other person's view immediately.
Your controls
- Export: download a full JSON copy of your data from Settings → Privacy & data.
- Delete: delete your account from Settings; your synced content, verified identity hashes, and any contact-matching state are removed, and you leave any shared spaces. (Local data is removed when you delete the app.)
- Permissions: Contacts, Notifications, and Calendar are all optional and requested only at the point of use; you can change them anytime in iOS Settings.