Privacy Policy

Last updated: March 24, 2026

showup ("we," "our," or "us") operates the showup mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when you:

• Register for an account
• Create or join a community (space)
• Participate in workouts and record scores
• Post content or comments
• Upload photos or media
• Make in-app purchases
• Contact us for support

This information may include:

• Name and email address
• Date of birth and gender
• Profile photo
• Fitness data, including workout scores, personal records, and benchmarks
• User-generated content such as posts, comments, and media
• Community membership and role information
• Unit preferences (weight, distance)
• Purchase and transaction data, including items purchased and subscription status

1.2 Information Collected Automatically

When you use the Service, we may automatically collect:

• Device type and operating system version
• Unique device identifiers
• App usage data
• Crash reports and performance diagnostics

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create and manage your account
• Enable community features, leaderboards, and social interactions
• Track and display workout scores, personal records, and benchmarks
• Send push notifications about workouts, community activity, and updates
• Respond to support requests and communicate with you
• Process in-app purchases and manage subscriptions
• Monitor and improve the Service
• Detect, prevent, and address abuse, fraud, or technical issues
• Enforce our terms and community guidelines

3. How We Share Your Information

3.1 Within the Service

Your profile name, profile photo, workout scores, posts, and comments are visible to members of communities you join. Leaderboard rankings are visible to other community members.

3.2 Service Providers

We use the following third-party service providers to operate the Service:

• Firebase (Google Cloud): Authentication, database storage, file storage, cloud functions, and push notifications
• Apple App Store: In-app purchase processing and subscription management
• Apple Sign-In and Google Sign-In: Account authentication

These providers process your data on our behalf and are bound by their own privacy policies and data protection obligations.

3.3 Legal Requirements

We may disclose your information if required to do so by law, or in response to valid legal requests by public authorities.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

3.5 No Sale of Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Advertising and Tracking

The Service does not contain third-party advertising. We do not use advertising SDKs or tracking frameworks. We do not track you across other apps or websites.

5. Data Storage and Security

Your data is stored using Firebase (Google Cloud) infrastructure. All data is encrypted in transit using HTTPS/TLS and encrypted at rest on Google's servers.

While we use industry-standard security measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete your personal information, including:

• Your user profile and account credentials
• Your workout scores and personal records
• Your posts and comments
• Your uploaded media files
• Your community memberships
• Your purchase history and transaction records

Some information may be retained in our backups for a limited period or as required by law. Anonymized or aggregated data that cannot identify you may be retained indefinitely.

7. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Contract: Processing necessary to provide the Service you have signed up for (account creation, workout tracking, community features)
• Legitimate Interests: Processing necessary for our legitimate interests, such as improving the Service, preventing abuse, and ensuring security, where these interests are not overridden by your rights
• Consent: Where you have given explicit consent, such as opting in to push notifications
• Legal Obligation: Processing necessary to comply with legal requirements

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

8.1 Rights for All Users

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct your personal information through the app
• Deletion: Delete your account and all associated data from the Account settings in the app
• Notifications: Opt out of push notifications through your device settings
• Withdraw Consent: Stop using the Service at any time

8.2 Additional Rights for EEA/UK Users (GDPR)

If you are located in the EEA or the United Kingdom, you also have the right to:

• Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format
• Restrict Processing: Request that we limit the processing of your personal data under certain circumstances
• Object to Processing: Object to processing based on legitimate interests
• Lodge a Complaint: File a complaint with your local data protection supervisory authority if you believe your rights have been violated

8.3 Rights for US Users (California / CCPA)

If you are a California resident, under the California Consumer Privacy Act (CCPA) you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

8.4 Rights for South Korean Users (PIPA)

If you are located in South Korea, under the Personal Information Protection Act (PIPA) you have the right to:

• Access, correct, delete, or suspend processing of your personal information
• Be notified of the collection and use of your personal information
• Withdraw consent to the processing of your personal information

To exercise any of these rights, you may use the in-app settings or contact us at the email address below. We will respond to your request within the timeframe required by applicable law (generally within 30 days).

9. Children's Privacy

The Service is not intended for children under the age of 13 (or 16 in the EEA/UK, or 14 in South Korea). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to delete such information.

10. International Data Transfers

showup operates in South Korea, the United States, and the European Economic Area (EEA). Your personal data may be transferred to and processed in any of these regions, as well as in countries where our service providers (such as Google Cloud/Firebase) maintain facilities.

For transfers of personal data from the EEA/UK to countries outside the EEA/UK that have not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) adopted by the European Commission, to ensure your data is protected in accordance with GDPR requirements.

By using the Service, you acknowledge that your information may be processed in these regions. We take steps to ensure your data receives the same level of protection regardless of where it is processed.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about our data practices, please contact us at:

support@showupcounts.com

For EEA/UK users: If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.