Privacy Policy
Last updated: September 24, 2026
1. Information We Collect
We collect information you provide directly to us when you create an account, use our services, or contact us for support. This includes your name, email address, profile information, and photos you upload for check-ins. We also collect information automatically when you use the App, such as device information, usage patterns, and technical data necessary for app functionality.
If you name a witness for a contract, we also collect that person's first name and email address. We use them only to email your witness about that contract: once when you name them, and once when the contract ends. We never show their address to you or anyone else, and we delete it when your account is deleted.
2. How We Use Your Information
We use the information we collect to provide, maintain, and improve our free habit-building services, facilitate peer reviews, send you notifications about your contracts and check-ins, communicate with you about your account, ensure the security and integrity of our platform, and analyze usage patterns to enhance user experience. We do not use your information for advertising or sell it to third parties.
3. Information Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties for commercial purposes. We may share your check-in photos with other users for peer review purposes, as this is a core feature of our service that maintains system integrity. We may also share information when required by law, to protect our rights, or in connection with a business transaction such as a merger or acquisition.
We use a small number of service providers to run ShowUp, and they process your information only to provide their service to us: Google Firebase (your account, app data and photos), Stripe (payments) and Resend (sending email).
4. Photo Privacy and Peer Review
When you upload photos for check-ins, these photos are shared with other users for verification purposes through our peer review system. This is essential for maintaining the integrity of the habit-building process. We recommend not including sensitive, personal, or identifying information in your photos. You can report inappropriate content through the app, and we take such reports seriously.
You can also block the person who sent a photo. We keep a record of the block so that neither of you is given the other's check-ins to review. No other member can see it, the person blocked is not told, and we keep it until the block is removed or either account is deleted.
5. Optional Stakes
ShowUp is free to use. A stake is optional: a refundable hold on your own card, set up on our website. If you choose a money stake, additional information may be collected by third-party payment processors. This information is processed according to their privacy policies and is used solely for providing the stake you have chosen. Stakes are entirely voluntary and not required for core app functionality. How a money stake works is set out in our Terms and Conditions, under Money Stakes.
6. Payment Information Security
If you choose a money stake, payment processing is handled by secure third-party payment processors (such as Stripe) that comply with PCI DSS standards. We do not store your complete payment card information on our servers. We only store tokenized payment method references provided by our payment processors, which cannot be used to reconstruct your actual payment information.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, secure authentication systems, regular security audits, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
8. Deleting Your Account
You can delete your account at any time. In the app, under Profile → Delete account, it is deleted straight away. You can also delete it on the web, at showuphabits.com/data-deletion-request.html, if you are signed in to ShowUp in that browser. If you no longer have the app, email support@showuphabits.com from the address on your account and we will delete it for you within 14 days.
What is deleted straight away. Your sign-in, your check-in photos and profile picture, your check-ins, your contracts, your appeals, your messages to support, your notifications and notification settings, your email preferences, your place in any group, any block between you and another member, and reports about your photos. If you named a witness, their name and email address are deleted and they are never contacted.
If money is still held on a contract. Deleting your account does not end a running contract early. It runs to its end date exactly as it would have: its stake is captured if it fails, and released if it completes. Until then we keep only what that contract needs: the contract itself, its check-ins, its payment records, any photo a reviewer or an appeal still has to look at, and your email address, so that we can tell you how it ended. Once it has settled, we delete those too.
What we keep, and for how long. A record of money we held or took for you (the amount, the dates and our payment processor's reference for it) and a record that you deleted your account, with the email address it had and the reason you gave, if you gave one. We keep these for seven years, because Australian law requires businesses to keep financial records, and then delete them. The entry for your account in our database is reduced to the fact that it was deleted, and when. We also delete the customer record we created with Stripe — your name, email address and saved cards — once no money is held; Stripe keeps its own record of payments it processed, under its own privacy policy.
Other copies. Our server logs, which can include your account's identifier, are deleted automatically after 30 days. A decision you made as a reviewer on someone else's check-in keeps an identifier for the reviewer that no longer leads to you.
9. Your Rights and Choices
You have the right to access, update, correct, or delete your personal information. You can modify your account settings, control notification preferences, opt out of certain communications, and request data deletion through the app or by contacting support. You also have the right to data portability and can request a copy of your personal information in a structured, machine-readable format.
10. Location Information
ShowUp does not ask for access to your device's location, and does not use location to verify check-ins — a check-in is verified by another member reviewing its photo. Some camera apps save the place a photo was taken inside the image file. ShowUp re-encodes check-in photos before uploading them, which removes that information; in the rare case a photo cannot be re-encoded, it is uploaded as your camera saved it. To keep location out of your photos entirely, turn off location tagging in your camera app's settings.
11. Notifications and Email
We may send you push notifications to remind you about check-ins, notify you of peer reviews, provide contract updates, and share important account information. You can disable these notifications through your device settings or app preferences.
We also send email about your account and your money: a welcome message and a link to confirm your address, password resets, a receipt when a stake is held, captured, released or refunded, appeal decisions, and replies to messages you send us. These are part of the service, so they are sent whether or not push notifications are on.
News and tips by email are only sent if you ask for them, when you create your account or under Notifications in the app. We keep a record of when and where you agreed. Every one of these emails has a one-click unsubscribe link, and you can switch them off in the app at any time. Email is sent through our provider, Resend, which processes your email address and the message on our behalf. We don't track whether you open our emails or click their links.
12. Children's Privacy
Our service is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take immediate steps to delete it. Parents or guardians who believe their child has provided us with personal information should contact us immediately.
13. International Data Transfers
Your information may be transferred to and processed in countries other than your own, including the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy and applicable data protection laws, including the use of standard contractual clauses and other legal mechanisms.
14. Third-Party Services and Links
Our App may contain links to third-party websites, services, or applications that are not owned or controlled by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our App.
15. Analytics and Performance Monitoring
We use analytics tools to understand how users interact with our App, identify performance issues, and improve user experience. This information is collected in an aggregated and anonymized manner and does not personally identify individual users. We may use services like Firebase Analytics for this purpose.
16. Data Breach Notification
In the unlikely event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law. We will provide information about the nature of the breach, the information involved, and steps we are taking to address the situation.
17. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new policy in the app, sending you an email notification, or through other appropriate means. The "Last updated" date at the top of this policy indicates when it was last revised.
18. Contact Us
If you have any questions about this privacy policy, our privacy practices, or how we handle your personal information, please contact us through the Contact Support feature in the App or via email at support@showuphabits.com. We are committed to addressing your concerns and will respond to your inquiries in a timely manner. ShowUp is run by Brett Stables in Sydney, Australia.