UP
EN

UP

UP Privacy Policy

Last updated: 5 November 2026 · Covers: the UP app on iPhone and up.standrank.com · Operator: Emre Türkoğlu, individual Apple Developer (not a company) · Contact: team@standrank.com

On UP you show, for a while, what you're up for: coffee, a talk, a new friend, sport, car advice or your own line. Others can write to you, and you can stay anonymous if you like. UP is for people 18 and older. It is the second app of the STAND ecosystem, but your UP account is separate from your STAND account.

What UP collects

  • Account: your Sign in with Apple identifier (a code Apple gives that is the same only across this developer team's apps). We ask Apple for your name only. We don't ask for your email address and don't store it; we don't use your family name.
  • Profile: your display name (up to 40 characters), a profile photo taken with the live camera if you add one, the country, city and district you choose, your app language, when you gave your 18+ confirmation and finished setting up, and when you last signed in. We don't ask for a birth date, gender, phone number or identity document.
  • Statuses: the kinds you pick, your own line (up to 40 characters), your note (up to 160 characters), the duration, start and end times, whether it is anonymous, who may write to you, your district and city when you open it, and a live photo if you add one. For “Tonight”, your phone's time offset is sent, used only to work out the end time, and not stored.
  • Chats: your messages (text only, up to 1,000 characters), who is anonymous in the chat, identity-reveal steps, read markers (used only for your own unread count) and your “Remove from list” choice.
  • Meets: the record made when both sides have taken their step, and your answer to “Did you feel safe?”.
  • Notification settings: whether district alerts are on, for which kinds, your quiet hours and your “When someone you met opens up” setting. For each notification we send, its kind, time and the record numbers it concerns (not its text).
  • Safety: reports you make (reason and an optional note of up to 500 characters), people you block (the name you could see at the time, or “Anonymous”), statuses you skip, and moderation records (below).
  • Sessions and device: each sign-in is a session. We keep only a one-way hash of the refresh token and its expiry date. For notifications we keep Apple's device token and its language. Signing out ends that session and marks the device token unused. At sign-in we also keep a refresh token Apple gives us, encrypted, only to revoke Sign in with Apple when you delete your account.
  • STAND information: while the STAND link is on, whether you are a STAND member, your STAND Level and your STAND profile link, cached for 24 hours. This link is off today.
  • Server logs: when something fails, your member number and the request path are logged. Google Cloud, which runs UP's servers, keeps its own request logs with the IP address, app or browser details and the address requested.

What UP does not collect

  • Location: UP never asks for location permission, uses no GPS and works out no distances. You choose your district.
  • Your photo library, microphone or contacts: UP doesn't access them. The invite link uploads no contacts; you share it with the app you choose.
  • Location and device details in photos: the phone and the server re-encode every photo, so no EXIF, GPS or XMP data remains.
  • Ads and tracking: UP shows no ads, uses no advertising identifier, doesn't ask for App Tracking Transparency and sells no data. The app has no analytics or crash-reporting tool, and UP doesn't log which screens you open.
  • Website: up.standrank.com sets no cookies, runs no analytics and loads nothing from other sites.

Photos and anonymity

  • Photos are taken with the live camera only: no gallery, no filters.
  • In an anonymous status, faces in the photo are blurred on your phone with Apple's face detection, and only the blurred version is uploaded. If blurring fails, the photo is not added. The server cannot check on its own whether a photo was blurred.
  • Photos are kept in non-public storage. The app shows them through signed links valid for 4 hours; anyone with such a link can open the photo until it expires.
  • Your profile photo is not blurred. People you chat with under your name, people you reveal yourself to and people you met can see it. It never appears on status cards.

What other people see

  • A status you open under your name: your name, its photo if any, the kinds, your own line, your note, the time left, your district and city, your STAND Level if you have one, your meet count and the number of reports about you.
  • An anonymous status: your name and member number are not sent. Everything else shows: the blurred photo, kinds, line, note, time, district and city, Level, meet count and report count.
  • The report count includes reports before our team has reviewed them; reports the team dismisses are not counted.
  • Statuses are shown first to people in the same district, then the same city. If nobody in your city is up for that kind, members in other cities may see them too. District counters say how many people are up for each kind (anonymous ones included).
  • District alerts say only the place, kind and duration, never your name or note.
  • “When someone you met opens up”: you hear when someone you've met opens a status under their name, and they hear when you do. It is never sent for anonymous statuses. You can turn it off in Settings.
  • Never shown: your location, distances, when you were last seen, your Apple identifier, your STAND profile link, your “Did you feel safe?” answer.

Revealing yourself and meeting

  • When the anonymous side of a chat taps “Show who I am”, the other person sees their name and profile photo in that chat at once. This can't be undone. The status stays anonymous everywhere else.
  • When both sides have taken their step, you've met: both meet counts go up and you appear in each other's “People you met”.
  • Your meeting plan (place and time) and the “Is everything OK?” check-in stay on your phone and never reach our server. The lock-screen reminder shows no name or place. You can share the plan yourself through the share sheet.
  • No member sees your “Did you feel safe?” answer, and it counts on no profile. A “No” opens a record for our safety team to look at.

Messages

  • Messages are stored on UP's server so chats work. They are not end-to-end encrypted; HTTPS protects them in transit.
  • You can't delete a message you sent. When our team removes a message that breaks the rules, it leaves the chat but its text stays in the record.
  • Blocking closes your chats with that person and hides them from both of you.

Moderation and OpenAI

  • Display names, your own line, notes and messages go through a word list and then OpenAI's gpt-4o-mini model. Only the text itself goes to OpenAI (up to 2,000 characters): not your member number, district or account details. Photos, report notes and “Did you feel safe?” answers are never sent to OpenAI.
  • When text is blocked or flagged for review, up to 200 characters of it are kept in the moderation record, even if it was never published.
  • A hard moment: if a note or message shows signs of self-harm (word list and OpenAI), we don't block it; we show you free, confidential helplines. The moderation record then holds only a flag, not the text.

Push notifications

  • Notifications arrive through Apple's push service (APNs). A message notification carries the sender's name (“Anonymous” if hidden) and the first 60 characters of the message, which pass through Apple's servers to your phone.
  • District and “People you met” alerts respect your quiet hours and are not sent during them. Message and identity notifications don't follow quiet hours.

STAND and RIGHT

  • STAND, UP and RIGHT are apps by the same developer; your Sign in with Apple identifier is the same in all three. The accounts are separate.
  • What UP reads from STAND: while the STAND link is on, UP asks STAND using your Apple identifier and learns whether you're a STAND member, your Level and your profile link. UP doesn't compute Levels. This link is off today.
  • What STAND and RIGHT can read from UP: when they ask using your Apple identifier, whether you're a UP member. If your “Show on STAND and RIGHT” setting is on, also the kinds and timing of a live status you opened under your name, and a link that opens it in UP. Your name, photo, note, the text of your own line, district and Level are never sent, and anonymous statuses are never sent at all. Membership is shared even with the setting off.

Who processes data

  • Google Cloud (Belgium, europe-west1): UP's server (Cloud Run), database (Cloud SQL), photo storage (Cloud Storage) and logs (Cloud Logging). The database runs on the same server as STAND's but is a separate database.
  • Apple: Sign in with Apple, notifications (APNs), the App Store and TestFlight.
  • OpenAI: text moderation (above).
  • Slack: only software-update notices go to the team's private workspace; no member data.
  • Apps you share with: you share the invite link or a meeting plan through the app you pick (for example WhatsApp or Messages); UP doesn't send it for you.

Retention and deletion

  • Your content is kept while your account exists. Records of ended statuses (kinds, line, note, district, times) are not deleted.
  • Status photos are not deleted when a status ends either; they are kept while your account exists.
  • Messages, the log of notifications sent, reports, blocks and moderation records have no deletion period.
  • Deleting your account (Me → Settings → Delete account) can't be undone:
    • your name is erased, your profile photo is deleted from storage, the link to your Apple identifier is removed, your open status ends, and all your sessions and device tokens are closed;
    • what stays: your internal member number, language, country, city and district, your 18+ and setup times, the STAND information cache; your status records (with their notes and photos), your messages, meet records, reports by and about you, blocks and moderation records;
    • other members can no longer see their chats with you, your statuses disappear and you leave their “People you met”; meet counts don't change.
  • When you delete your account, UP also revokes Sign in with Apple on Apple's side. If UP doesn't hold the token this needs, you are asked to confirm with Apple once before the deletion. Signing in again with the same Apple ID creates a new account.
  • An account closed for breaking the rules can't be deleted; it stays linked to its Apple identifier, and no new account can be opened with it.
  • Signing out ends that session only; an open status stays open until it ends.

Testing period

UP is open only to invited testers (TestFlight) for now. To keep Discover lively there are sample profiles in this period; they are not real people. Messages you send them and identity reveals to them are stored on UP, but nobody reads them and they get no notifications. The sample profiles will be removed before the App Store release.

Your choices

  • Open a status anonymously or under your name, and choose who may write to you.
  • Turn off “Show on STAND and RIGHT”.
  • Set district alerts, “People you met” alerts and your quiet hours.
  • Block or report someone.
  • Change your name, district, language and profile photo in the app.
  • Write to team@standrank.com for a copy of your data, a correction or a deletion question. We answer every request by hand within 30 days.

18 and older

UP is for people 18 and older. You confirm you are 18 or older when you sign up; we don't ask for proof. Report anyone you think is under 18 with the reason “Under 18”.

Changes

When we change this policy we update the date at the top. We note any important change at the top of this page as well.

Contact

team@standrank.com · Governing law: Republic of Türkiye.