Privacy Policy
upnext · Last updated: May 24, 2026
upnext (“we”, “our”, or “us”) is a student productivity app that helps you manage your class schedule, tasks, and connect with friends. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
By using upnext, you agree to the practices described in this policy.
1.Information We Collect
1.1 Information You Provide
Account Information
When you create an account, we collect:
- Username (your @handle)
- Password (stored in encrypted, hashed form — we cannot read it)
- Full name
- Date of birth
- School or institution
- Profile photo (optional)
- Gender (optional)
Schedule & Academic Data
When you use the app, we store:
- Class names, subjects, and emojis
- Class times, days, and locations
- Teacher names and room numbers (if you enter them)
- Breaks and schedule preferences
Assignments
For each class, we store assignments you create:
- Assignment title
- Due date (optional)
- Obtained and total marks (optional)
- Completion status (not started, in progress, done)
Quizzes
For each class, we store quizzes you create:
- Quiz title
- Date (optional)
- Obtained and total marks (optional)
- Completion status (not started, in progress, done)
Class Notes
For each class, we store notes you write. Notes are free-form text and may contain any content you choose to record. Notes are private to your account and are not shared with other users.
Tasks
- To-do item titles and descriptions
- Due dates
- Tags you create
Messages
- Content of messages you send and receive
- Timestamps and read status
- File and image attachments you share in chat
Friend Connections
- Friend requests you send and receive
- Your list of accepted friends
1.2 Information Collected Automatically
Device & Usage
- Push notification token (to deliver notifications to your device)
- App usage activity used to calculate your daily streak
- Last active timestamp (to show online status to friends)
Camera & Photos
When you use the AI timetable scanner or upload a profile photo, we temporarily process the image. Timetable images are sent to our server for AI analysis and are not stored after processing.
Contacts
With your permission, we access your device contacts solely to help you find friends who are also on upnext. Contact data is used in-session for matching and is not stored on our servers.
2.How We Use Your Information
| Data | Purpose / Retention |
|---|---|
| Account details | Identify you, personalise your experience, display your profile to friends |
| Schedule & tasks | Show your timetable, send class reminders, display to-dos on your calendar |
| Assignments, quizzes & notes | Display your academic workload per class, send deadline reminders, track grades and progress |
| Messages | Deliver your messages to recipients in real time |
| Push token | Send you class reminders, task due date alerts, message and friend request notifications |
| Online status | Show friends when you are active in the app |
| Contacts | Help you discover and connect with people you know |
| Profile photo | Display your avatar throughout the app and to friends |
| Date of birth | Verify minimum age requirement |
We do not use your data to serve advertisements. We do not sell your data to third parties.
3.How We Share Your Information
With Other Users
Your name, @handle, profile photo, school, and online status are visible to other upnext users when they search for you or view your profile. Your messages are visible only to you and the person you are chatting with.
With Service Providers
We use the following third-party services to operate the app:
Supabase (supabase.com)
Our database, authentication, file storage, and backend infrastructure provider. All user data, messages, schedules, and tasks are stored on Supabase servers located in Sydney, Australia. Supabase processes data on our behalf under their Data Processing Agreement.
Google (Gemini AI)
When you use the AI timetable scanner, your timetable image is sent via our secure backend to Google's Gemini API for text extraction. The image is used solely to extract class information and is not retained by Google for training purposes under our API agreement. No personally identifiable information is intentionally included in these images.
Apple (Sign in with Apple)
We offer Sign in with Apple as an authentication option. When you use it, Apple shares your name and email address (or an Apple-generated private relay address) with us. This data is used solely to create and identify your account. Apple's privacy policy is available at apple.com/legal/privacy.
Google (Sign in with Google)
We offer Sign in with Google as an authentication option. When you use it, Google shares your name and email address with us. This data is used solely to create and identify your account. Google's privacy policy is available at policies.google.com/privacy.
OneSignal (onesignal.com)
We use OneSignal to deliver push notifications to your device. OneSignal receives your device push token and a unique identifier to route notifications. OneSignal's privacy policy is available at onesignal.com/privacy-policy.
We do not share your data with any other third parties except as required by law.
Legal Requirements
We may disclose your information if required to do so by law, court order, or governmental authority, or where we believe disclosure is necessary to protect the rights, property, or safety of upnext, our users, or others.
4.Data Storage & Security
Your data is stored on Supabase servers located in Sydney, Australia. We implement the following security measures:
- All data is transmitted over HTTPS/TLS
- Passwords are hashed and never stored in plain text
- Row Level Security (RLS) is enforced at the database level — users can only access their own data
- Messages and cached data on your device are stored in encrypted storage protected by iOS Data Protection
- Chat messages are not end-to-end encrypted. As the app developer, we have the technical ability to access message content stored on our servers. We do not access, read, or use message content except to deliver it to recipients and to investigate legitimate safety or legal concerns.
- Push notification tokens are stored securely and used only to deliver your notifications
Despite these measures, no system is completely secure. We encourage you to use a strong, unique password for your account.
5.Data Retention
| Data | Purpose / Retention |
|---|---|
| Account & profile | Until you delete your account |
| Schedule & tasks | Until you delete them or your account |
| Assignments, quizzes & notes | Until you delete them or your account |
| Messages | Until you delete the conversation or your account |
| Notifications | Automatically cleared after 90 days |
| Cached data (on device) | Cleared on logout or when you clear app data |
| Timetable scan images | Not retained — processed in real time and discarded |
To delete your account and all associated data, open the upnext app → Profile → Delete Account. This will permanently remove your account and all associated data from our servers within 30 days, except where we are required by law to retain it.
6.Your Rights & Choices
Depending on your location, you may have the following rights:
Request a copy of the personal data we hold about you.
Update inaccurate or incomplete information via your Profile settings at any time.
Delete your account from Profile → Delete Account. This permanently removes your account and all associated data from our servers.
Disable push notifications at any time in your device Settings or in the app under Profile → Preferences.
You can revoke contacts access at any time in iOS Settings → upnext → Contacts. This only affects friend discovery; all other features continue to work.
You can revoke these at any time in iOS Settings → upnext → Camera / Photos. This disables the timetable scanner and profile photo upload.
To exercise any data rights or submit a privacy request, contact us at the address below.
7.Children's Privacy
upnext is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has created an account, please contact us immediately and we will delete the account and associated data.
Users aged 13–17 may use the app with the awareness of their parent or guardian. We do not use data from any users for advertising profiling.
8.International Users
upnext is developed and operated from Pakistan. Your data is stored on servers in Sydney, Australia (operated by Supabase). If you are accessing the app from outside Pakistan — including from the European Union, United Kingdom, or United States — your data will be transferred to and processed on those servers. By using the app, you consent to this transfer.
EU/UK Users (GDPR)
Our legal basis for processing your data is the performance of the contract between you and us (providing the app service). You have the rights described in Section 6 above and may lodge a complaint with your local data protection authority.
California Users (CCPA)
We do not sell personal information. You have the right to know what personal information we collect and to request deletion. Contact us to exercise these rights.
9.Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via a notification in the app or by other means before the change takes effect. Your continued use of the app after the effective date constitutes acceptance of the updated policy.
We encourage you to review this policy periodically.
10.Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
We will respond to all legitimate privacy inquiries within 30 days.
This privacy policy was last updated on May 24, 2026.