Privacy Policy

1. Introduction

Welcome to UPose. UPose ("we," "our," or "us") operates the UPose mobile application and the website located at upose.app (collectively, the "Service"). UPose is a pose reference and inspiration platform designed for photographers, couples, and creative professionals who want to discover, organize, and share pose ideas for photo shoots.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access or use our Service. By using UPose, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

We encourage you to read this Privacy Policy carefully and in its entirety. Your privacy is fundamentally important to us, and we are committed to being transparent about our data practices.

2. Information We Collect

2.1 Personal Information You Provide

When you create an account, contact us, or interact with certain features of the Service, we may collect the following personal information:

• Account Information: Your name, email address, username, and password when you register for an account.
• Profile Information: Optional details such as your profile photo, bio, professional title, location, and website URL.
• Contact Form Data: Your name, email address, subject line, and message content when you reach out through our contact form.
• Payment Information: If you subscribe to a premium plan, your billing address and payment method details. Note that payment processing is handled by third-party payment processors (such as Stripe or Apple/Google in-app purchase systems), and we do not store your full credit card number on our servers.
• User-Generated Content: Pose boards, collections, favorites, notes, comments, and any other content you create, upload, or share through the Service.
• Communication Data: Records of your correspondence with us, including support tickets, emails, and feedback submissions.

2.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system and version, unique device identifiers (such as IDFA or Android Advertising ID), device manufacturer, model, screen resolution, and language preferences.
• Usage Data: Pages or screens viewed, features used, actions taken (such as searches, saves, and shares), time spent on each page, referring URLs, clickstream data, and interaction patterns within the app.
• Log Data: IP address, browser type and version, access times and dates, crash reports, system activity, and error logs.
• Location Data: Approximate geographic location derived from your IP address. We do not collect precise GPS location unless you explicitly grant permission for location-based features.

2.3 Information from Third Parties

We may receive information about you from third-party services if you choose to connect them to your UPose account:

• Social Login Providers: If you sign in using Apple, Google, or another social login provider, we receive your name, email address, and profile picture as permitted by that provider's settings.
• Analytics Partners: We receive aggregated and anonymized analytics data from services like Google Analytics to understand how users interact with our Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and Maintaining the Service: To create and manage your account, deliver the features you request, process transactions, and provide customer support.
• Personalization: To customize your experience, recommend relevant poses and content, and remember your preferences and settings.
• Communication: To send you service-related notifications, respond to your inquiries, provide updates about new features, and send promotional content (with your consent, where required by law).
• Analytics and Improvement: To understand how users interact with our Service, identify trends and usage patterns, diagnose technical issues, and improve the functionality, performance, and user experience of UPose.
• Safety and Security: To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity. To enforce our Terms of Service and protect the rights, property, and safety of UPose, our users, and the public.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.
• Research and Development: To conduct research, testing, and analysis to develop new features, products, and services.

4. Information Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

We engage trusted third-party companies and individuals to perform services on our behalf, such as hosting, data analytics, payment processing, email delivery, customer support, and marketing. These service providers have access to your personal information only to perform tasks on our behalf and are contractually obligated not to disclose or use it for any other purpose.

4.2 Shared Content

When you create a public pose board or share content through the Service, that content may be visible to other users or anyone with the shared link. You control the visibility of your boards and collections through your privacy settings.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to: (a) comply with a legal obligation, subpoena, court order, or governmental request; (b) protect and defend the rights or property of UPose; (c) prevent or investigate possible wrongdoing in connection with the Service; (d) protect the personal safety of users of the Service or the public; or (e) protect against legal liability.

4.4 Business Transfers

If UPose is involved in a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service before your personal information is transferred and becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Data Storage and Security

Your information is stored on secure servers provided by reputable cloud infrastructure providers. We implement a variety of industry-standard security measures to maintain the safety of your personal information, including:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest using AES-256 encryption
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms to restrict access to personal data
• Employee training on data protection and security best practices
• Incident response procedures for potential data breaches

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your data, but we are committed to promptly notifying affected users and relevant authorities in the event of a data breach, in accordance with applicable laws.

6. Your Rights and Choices

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

• Access: You have the right to request a copy of the personal information we hold about you.
• Correction: You have the right to request that we correct any inaccurate or incomplete personal information.
• Deletion: You have the right to request that we delete your personal information, subject to certain exceptions required by law.
• Data Portability: You have the right to request a copy of your data in a structured, commonly used, machine-readable format.
• Restriction of Processing: You have the right to request that we restrict the processing of your personal information under certain circumstances.
• Objection: You have the right to object to our processing of your personal information for direct marketing purposes or where we are relying on legitimate interests.
• Withdraw Consent: Where we rely on your consent to process your information, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at hello@upose.app. We will respond to your request within 30 days, or sooner if required by applicable law. We may ask you to verify your identity before processing your request.

6.1 Account Settings

You can review and update your account information at any time by logging into your UPose account and navigating to your profile settings. You can also delete your account entirely from the settings page, which will permanently remove your personal data from our active systems within 30 days.

6.2 Marketing Communications

You can opt out of receiving promotional emails from us by clicking the "unsubscribe" link at the bottom of any marketing email, or by updating your notification preferences in your account settings. Even if you opt out of marketing communications, we may still send you transactional or service-related messages, such as account confirmations, security alerts, and policy updates.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information when you visit our website or use our Service. These technologies include:

• Essential Cookies: Required for the basic functionality of the Service, such as maintaining your login session and remembering your preferences. These cookies cannot be disabled.
• Analytics Cookies: Used to understand how visitors interact with our website, including which pages are visited most often, how long users spend on each page, and where users come from. We use Google Analytics for this purpose.
• Functional Cookies: Used to remember your preferences and settings, such as language and display options, to provide a more personalized experience.

Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies, but this may affect the functionality of our Service. For more information about cookies and how to manage them, visit allaboutcookies.org.

8. Children's Privacy

UPose is not directed at children under the age of 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child under 16, we will take steps to delete that information as quickly as possible. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at hello@upose.app so we can take appropriate action.

9. Third-Party Links and Services

The Service may contain links to third-party websites, applications, or services that are not operated or controlled by UPose. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our Service. We are not responsible for the content, privacy practices, or security of any third-party websites or services.

10. International Data Transfers

UPose is based in Istanbul, Turkey. If you are accessing the Service from outside Turkey, please be aware that your information may be transferred to, stored, and processed in Turkey or other countries where our servers or service providers are located. These countries may have data protection laws that are different from the laws of your country.

When we transfer personal data internationally, we implement appropriate safeguards to ensure that your information receives an adequate level of protection, including standard contractual clauses approved by relevant data protection authorities, and compliance with applicable cross-border data transfer frameworks.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR) and related legislation. In addition to the rights described in Section 6 above:

• Legal Basis for Processing: We process your personal data based on one or more of the following legal bases: (a) your consent; (b) the performance of a contract with you; (c) compliance with a legal obligation; or (d) our legitimate interests, provided they are not overridden by your rights and freedoms.
• Data Protection Officer: You may contact our data protection team at hello@upose.app for any GDPR-related inquiries.
• Supervisory Authority: You have the right to lodge a complaint with a supervisory authority in the EU/EEA member state where you reside, where you work, or where an alleged infringement of data protection law occurred.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt Out: You have the right to opt out of the "sale" or "sharing" of your personal information. UPose does not sell personal information in the traditional sense. However, certain uses of cookies or advertising technologies may constitute a "sale" or "sharing" under California law.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality based on your exercise of these rights.

To exercise your California privacy rights, please contact us at hello@upose.app. We will verify your identity before processing your request and respond within 45 days.

13. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period depends on the type of data and the context in which it was collected:

• Account Data: Retained for as long as your account is active. Upon account deletion, your data is removed from active systems within 30 days and from backup systems within 90 days.
• Usage and Analytics Data: Retained in an aggregated, anonymized form for up to 26 months for analytical purposes.
• Contact Form Submissions: Retained for up to 12 months after the last communication.
• Transaction Records: Retained for up to 7 years to comply with tax and financial reporting obligations.
• Legal Hold: If your data is subject to a legal hold due to litigation, investigation, or regulatory inquiry, we may retain it beyond the normal retention period until the matter is resolved.

14. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals to websites. Because there is no universally accepted standard for how to respond to DNT signals, our Service does not currently respond to DNT signals. However, you can control tracking through your browser settings and the cookie controls described in Section 7 above.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on this page with a revised "Last updated" date. For significant changes, we may also provide additional notice through the Service (such as an in-app notification) or via email to the address associated with your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: hello@upose.app
• Support: support@upose.app
• Location: Istanbul, Turkey

We take every privacy concern seriously and will make every effort to address your inquiry promptly and thoroughly. We aim to respond to all privacy-related requests within 30 days of receipt.