Privacy Policy

Version 1.0 · Last updated: February 20, 2026 · Applicable law: United States (incl. California CCPA/CPRA)

1. Who We Are

ShowUp is operated by:

BuildOften LLC is the business responsible for personal information collected through ShowUp. This policy explains what we collect, why, and the choices you have.

2. What Data We Collect and Why

2.1 Account Data

Data: Email address, display name, profile photo (optional), date of birth (age verification)

Purpose: Account creation and authentication

Retention: Until account deletion + 30 days

2.2 Authentication Data

Data: Firebase Auth UID, login timestamps, authentication tokens

Purpose: Secure login and session management

Processor: Google Firebase — Google Cloud DPA

Retention: Until account deletion + 30 days

2.3 Commitment and Activity Data

Data: Groups you join, goals you set, daily check-ins, commitment amounts, settlement history

Purpose: Operating the core ShowUp service — tracking commitments and calculating settlements

Retention: Until account deletion + 30 days (anonymized aggregate statistics may be retained)

2.4 Payment Data (when real-money features are active)

Data: Partial card number (last 4 digits), billing country, Stripe customer ID, transaction history

Purpose: Processing commitment settlements and platform fee collection

Processor: Stripe — Stripe DPA

Retention: Transaction records are retained as required by applicable US tax and financial-recordkeeping law [confirm retention period with counsel]. We do not store full card numbers.

2.5 App Usage Data / Analytics

Data: Feature usage, screen views, crash reports, device type, OS version

Purpose: Improving the app and fixing bugs

Retention: 14 months

2.6 Communications

Data: Emails and messages you send to our support address

Purpose: Responding to your inquiries

Retention: 3 years

3. Data We Do NOT Collect

• We do not collect precise geolocation data
• We do not access your contacts, camera, or microphone without your explicit permission
• We do not sell your data to third parties
• We do not use your data for automated decision-making or profiling that produces legal effects

4. Who We Share Your Data With

We share data only as necessary to operate the service, with service providers bound by contract to protect it:

We require each service provider to use personal information only to provide services to us, not for their own purposes.

5. We Do Not Sell or "Share" Your Data

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA). We have not done so in the preceding 12 months.

6. Your Privacy Rights

Depending on your state of residence (for example, under the California CCPA/CPRA and similar US state laws), you may have the following rights. To exercise them, contact: privacy@showup.gg

• Right to know / access: Request the categories and specific pieces of personal information we have collected about you
• Right to delete: Request deletion of your personal information, subject to legal exceptions
• Right to correct: Request correction of inaccurate personal information
• Right to opt out: Opt out of any sale or sharing of personal information (note: we do not sell or share)
• Right to limit: Limit the use of sensitive personal information
• Right to non-discrimination: We will not discriminate against you for exercising your rights

Response time: We respond to verifiable requests within the timeframe required by applicable law (generally 45 days, extendable once when reasonably necessary).

You may also designate an authorized agent to submit requests on your behalf. We will take steps to verify your identity before fulfilling a request.

7. Data Security

• All data in transit is encrypted using TLS 1.2+
• Payment data is handled exclusively by Stripe under PCI DSS Level 1 certification
• Firebase data is encrypted at rest
• Access to production data is limited to authorized personnel only
• We conduct periodic security reviews

8. Children's Privacy

ShowUp is not intended for users under 18 years of age, and we do not knowingly collect personal information from anyone under 18 (including children under 13 within the meaning of the US Children's Online Privacy Protection Act, COPPA). If we discover a user is under 18, we will promptly delete their account and associated data.

9. Cookies and Tracking (showup.gg)

The ShowUp website (showup.gg) may use cookies.

• Essential cookies: Required for the site to function
• Analytics cookies: Used to understand website traffic

The ShowUp mobile app does not use browser cookies.

10. Account Deletion

You can delete your ShowUp account at any time via Settings → Account → Delete Account.

Upon deletion:

• Your profile, check-in history, and group data will be deleted within 30 days
• Payment transaction records are retained as required by applicable US law
• Anonymized, non-identifiable aggregate statistics may be retained

11. Changes to This Policy

We will notify you of material changes to this policy via email or in-app notification at least 14 days before they take effect. The date at the top of this document shows when it was last updated.

12. Contact