Privacy and visibility

This is an English translation of the Spanish privacy policy of Up For Now. If there is any discrepancy between the two, the Spanish version prevails.

Who processes your data

The data controller is Alexánder Pérez Lorenzo, sole trader (autónomo), NIF 47280026F, with address at Calle Dehesilla de San Sebastián 8, 45100 Sonseca (Toledo). For anything about your data, write to hola@upfornow.com.

Up For Now is only for people aged 18 or over. You confirm this when you sign in; if we know that an account belongs to a minor, we close it.

What we store

• Your email, only to sign in (you receive a code; there is no password).
• Your profile: name, municipality, any other municipalities you choose, activities and up to 6 photos.
• When you are “free” and until what time.
• Your friendships and friend requests, your proposals to meet up, your groups and your conversations with their messages.
• The photos, audio messages and files you send in a chat, with their name, type, size and, for an audio message, its duration. Photos are reduced in size on your phone before they leave it. The app only uses the camera, the microphone or your photos when you attach something, and it only stores what you decide to send.
• The organised meetups you create (title, description, municipality, date, places and exact meeting point), which ones you join and what you write or send in their chat. Also the groups you create, the requests to join a group and the invitations to a group or a meetup that you send to your friends or receive from them.
• Who you block, the reports you make and the activities you suggest.
• If someone reports you: the report and a copy of what was reported as it was at that moment (the text of the message, the reference to the photo or attachment, the meetup, or your name and your introduction), with a fingerprint of your email (a hash: it is not the email and it cannot be read).
• If moderation acts on your account or on a report or suggestion of yours: a record of what was done, when and why.
• The municipalities you have or have recently had, in order to apply the limit on changes per week.
• The invitation links you create: their code, when they expire and how many times they have been used. We do not store who you send them to.
• If you turn on notifications: the identifier of your device and which notifications you want (we explain this further down).
• The creation dates of all of the above. We do not store your exact location and we do not read your contacts. There is no advertising and there are no third-party tracking or analytics tools.

What for, and on what legal basis

• To give you the service you ask for when you create the account: your profile, seeing and being seen by the people you share something with, meeting up, the chats, the groups and the meetups. Basis: the relationship you accept when you register (Art. 6(1)(b) of the GDPR).
• To keep the app safe: reports and their copies, blocks, suspensions, the ban on the email of a suspended account, the moderation log and the anti-spam limits. Basis: our legitimate interest in protecting the people who use the app (Art. 6(1)(f)).
• To send notifications to your phone: only if you give permission; you can withdraw it whenever you want in Settings (Art. 6(1)(a)).
• If we believe a crime has been committed, or an authority requires us to, we may hand over the necessary data to that authority (Art. 6(1)(c)).
• We do not build commercial profiles and we do not make automated decisions about you: reports are reviewed by a person.

Who sees what

• Your profile and your photos are only seen by the people you have something in common with: a friendship, a group, or a shared activity and municipality; also by anyone you have a proposal or a conversation with.
• If you send someone a friend request, that person can see you in order to decide; you do not gain any visibility of them by having sent it.
• If your request is declined, you are not notified and neither of you sees the other on that account. It cannot be sent again.
• Anyone who opens one of your invitation links, once signed in to their own account, sees your name and nothing else. If they send you a friend request, you decide as with any other request.
• A public meetup (one that does not belong to a group) can be seen by anyone who has signed in to the app, from any municipality: its title, description, municipality, date and places. And also who is going: if you join a public meetup, your name can be seen by anyone who sees that meetup, even if you have nothing in common.
• A group meetup, and who is going, can only be seen by the members of that group.
• The exact meeting point and the chat of a meetup can only be seen by those who are going. If you stop going or you are removed, you stop seeing them.
• In a group that is joined by request, who is in it and its meetups can only be seen by its members. The person who administers the group sees your name when you ask to join. If you are not accepted, you are not notified.
• If you invite a friend to a group or a meetup, they see that the invitation comes from you. If they decline it, you are not notified.
• What you send in a chat (text, photos, audio messages and files) is seen by the other person in the conversation; in the chat of a meetup, by those who are going. Profile photos and attachments are kept in private storage: they are never public by link, and for each one the app requests a temporary link that can only be obtained by someone who is able to read that message.
• If you turn on “Only my friends see me as free”, only your accepted friends see you as free and can propose meeting up with you.
• Anyone who blocks you, and anyone you block, stops seeing you altogether. Nobody is notified of a block.
• Reports and the copy of what was reported are only seen by the moderation team. Moderation does not read your chats: it can only see the specific message or attachment that someone has reported.
• Nobody who has not signed in to the app sees anything.

Live alerts

Alerts about new messages, proposals, friendships and the meetups you are going to arrive through a private channel that only your session opens. The alert about a message does not carry its text; the text only lives in the conversation.

Notifications on your phone

If you turn them on, we store an identifier of your device (an Apple token, not your phone number or your location), the fact that it is an iPhone, when it was last used and which types of notification you want. At most 5 devices per person. The notification carries the person's name and a fixed phrase; never the text of a message, the title of a meetup or contact details. It passes through Apple's servers. When you sign out or delete your account, the identifier is deleted.

For how long

• For as long as you have an account. The “free” status expires by itself at the time you choose.
• Live alerts and the notification queue are kept for at most 3 days.
• The chat of a meetup closes 48 hours after its start time. A message you delete stops being visible to everyone, and if it carried a photo, an audio message or a file, the file is deleted from storage. If it had already been reported, moderation keeps the copy, and the file is kept for a further 90 days before being deleted.
• If you delete your account, it really is deleted: profile, photos, friendships, meetups (the ones you organised are deleted along with their chat), conversations (for the other person too), alerts, the reports you have made and your email, immediately. The files you sent in chats can no longer be viewed from that moment and are removed from storage in the periodic clean-up. A group you administered passes to its longest-standing member. Only the following three things remain.
• The reports made against you and the copy of what was reported are kept for 12 months from the date of the report even if you delete your account or the reported content, so that they can be reviewed. After that period they are deleted automatically.
• If you delete your account while it is suspended, your email remains banned until the suspension ends: we keep only its fingerprint (hash), not the email, and until that date no other account can be created with it. In serious cases, moderation may extend the ban.
• The log of what moderation has done is kept so that it can account for its decisions. For a deleted account, all that remains in it is an internal identifier, with no name or email.

Where the data is and who helps us

We do not sell data and we do not pass it on to anyone for advertising. To operate we use the following providers, which process the data only on our behalf:

• Supabase: the database, the accounts, the storage for photos and attachments, and the live alerts. The data is on its servers in the European Union (Frankfurt, Germany).
• Apple: delivers notifications on the iPhone. It receives the device identifier and the notification (name and fixed phrase).
• OVHcloud (France): the email service we use to send you the sign-in code, and the contact mailbox. It receives your email address.

Your rights

You can view and change your profile from the app, and delete your account from Settings → Delete my account (in the app: Ajustes → Borrar mi cuenta). To request access, rectification, erasure, restriction, portability or to object, write to hola@upfornow.com from the email address of your account; we reply within one month at most.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

Last updated: 14 November 2026.