ShowUp: privacy policy

ShowUp is an app for small circles of friends who ask each other to read, test or give feedback on what they make. Cenix AB makes ShowUp and is the controller of your personal data. In this policy, “we” and “us” mean Cenix AB.

We collect only what the app needs to work. We never sell your data. We show no ads, and we don’t track you across other apps or websites.

Account details: your email address. We use it to sign you in with a one-time code and to contact you about your account.

Profile: the name, short headline, colour and emoji you choose. Members of your circles can see them.

What you create: the circles you start or join, your asks (title, link and note), your answers to asks (for example, that you helped or skipped), thanks, nudges, wins and cheers. Members of the circle you share them in can see them.

Settings: your notification choices and your time zone, so that reminders arrive at a sensible hour.

Push token: if you allow notifications, a token from Apple or Google that lets us send them to your phone, and whether the phone runs iOS or Android.

Safety records: reports you send, people you block, and any moderation action on your account.

Server logs: our hosting provider keeps short-lived server logs, such as IP address and request time, to keep the service secure and working.

We don’t collect your contacts, photos, location, payment details or advertising ID. The app has no analytics and no advertising code.

To run the app: sign-in, your circles, asks and balances, and the notifications you switched on. The legal basis is our contract with you: the app you signed up for.

To keep the community safe: we review reports, remove content that breaks the community guidelines, and block or ban accounts. The legal basis is our legitimate interest in a safe app, and our legal duties.

To answer you when you write to us. The legal basis is our legitimate interest in helping you.

We never use your data for advertising, and we never sell or rent it.

Members of your circles see your profile and what you share in that circle. People you block don’t see your asks, wins or answers, and you don’t see theirs.

Supabase runs our database and sign-in. Your data is stored in Stockholm, Sweden (the AWS region eu-north-1).

Brevo sends the sign-in codes and the report alerts by email.

Expo, Google and Apple deliver push notifications to your phone.

These providers process data for us, under contract. Some of them can process data outside the EU, for example to deliver a push notification. Then we rely on safeguards such as the European Commission’s standard contractual clauses.

Authorities get data when the law requires it, or to protect someone’s safety. We report child sexual abuse material to the police, as the child safety standards say.

We keep your account data until you delete your account. Activity notifications are deleted after 90 days.

When you delete your account, we delete your profile, sign-in email, asks, wins, answers, thanks, nudges, cheers, notifications, push tokens and blocks straight away. Circles you own pass to another member.

Reports: we delete a report 12 months after we close it. Reports you made stay until then, without your name.

Backups: every night we copy the database to Cenix’s own server in Sweden. We keep each copy for 30 days, so data you delete is gone from the backups within 30 days.

Server logs: our hosting provider deletes them after a short time.

You can edit your profile at any time in the app, and turn notifications on or off in Settings or in your phone’s settings.

You can delete your account in the app, under You, then Settings, then Delete account. Or email felix@cenix.se from the address on your account.

Under the GDPR you can ask for a copy of your data, and ask us to correct or delete it. You can also object to how we use it, ask us to limit it, or ask for your data in a machine-readable format. Email felix@cenix.se. We answer within 30 days.

You can complain to the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY, imy.se), or to the authority where you live.

ShowUp is for people aged 16 and over. We don’t knowingly collect data from anyone younger. If you think someone under 16 has an account, email felix@cenix.se and we will delete it.

Data is encrypted on its way between the app and our servers, and Supabase encrypts the database on disk. Database rules let members read only what their circles share. Only Cenix AB can reach the admin tools.

If we change this policy in a way that matters, we update this page and the date at the top. We also tell you in the app or by email before the change takes effect.