Privacy Policy
1. Who We Are
This Privacy Policy explains how Jemica ("we", "us", "our") collects, uses and protects information in connection with the On the Up Android mobile application (the "App").
For users in the European Economic Area, the United Kingdom and Switzerland, Jemica is the data controller for the limited personal data described below. You can reach us at info@jemi.ca.
2. What We Mean by "Health Data"
"Health data" in this policy refers to data the App reads from Google Health Connect with your explicit permission, such as heart rate, resting heart rate, steps, sleep, distance, active calories, blood oxygen and exercise sessions. The App requests read-only access to these data types. It does not write back to Health Connect.
3. The Most Important Thing: Health Data Stays On Your Device
We do not collect, receive, transmit, host, store on our servers, share, sell, lease, or otherwise process any of your health data. All processing of health data happens locally on your device. Saved comparisons, charts, scores, and exports are stored in the App's local database and Android DataStore.
When you tap Export PDF or Share, the resulting file is generated on your device and you choose where it goes through Android's standard share sheet. We never see the contents.
If you uninstall the App, Android deletes the App's local data, including all saved comparisons and any cached health data.
4. What We Do Collect, and Why
Beyond the health data that stays on your device, the App relies on a small amount of personal data, all of which is necessary to provide the service. The App is free of charge — we collect no payment, subscription, or purchase data of any kind.
| Data | Where it comes from | Why | Legal basis (GDPR) |
|---|---|---|---|
| Google account ID, email, display name | Google Sign-In (Firebase Authentication) | Authenticate you and keep you signed in to the App. | Performance of a contract (Art. 6(1)(b)) |
| Payment or purchase data | None — the App is free and contains no billing functionality | — | — |
| Crash and diagnostic data | None — the App does not bundle any crash or analytics SDK | — | — |
| Advertising / tracking identifiers | None — the App contains no advertising and no advertising SDKs | — | — |
5. What Stays On Your Device Only
The following data is stored exclusively in the App's local storage on your device. We have no access to it.
- Health metrics read from Health Connect
- Saved comparisons (title, place, tag, optional life-event emoji, the metrics you selected, and the comparison results)
- Your On the Up Score history and personal-best entries
- Preferences (theme, notification toggle, biometric toggle, last-used metrics, onboarding state)
- PDF and share-card files generated by exports, until you remove them
6. Sub-processors & Third Parties
We use the following third-party services. We have no other sub-processors.
Google & Firebase
Google Sign-In and Firebase Authentication are operated by Google LLC / Google Ireland Limited. Google processes the limited account information you authorise during sign-in and acts as our processor for authentication. See the Firebase Privacy Information and the Google Privacy Policy.
Google Health Connect
Health Connect is the on-device system that brokers access between health-data sources and apps like ours. Health Connect runs on your device. We never receive your data through any other channel. You can revoke our access at any time in Android Settings → Apps → Health Connect.
7. International Transfers
Our sub-processor (Google) may process limited personal data outside the European Economic Area, including in the United States. Where required, these transfers are protected by Standard Contractual Clauses adopted by the European Commission and additional safeguards put in place by the relevant provider. We will provide further information about transfer mechanisms on request at info@jemi.ca.
8. How Long We Keep Information
- On your device: until you delete the comparison, clear app data, or uninstall the App.
- Authentication (Firebase): for as long as your account exists. You may sign out at any time; you may also delete your Google account via Google's account-management tools.
9. Your Rights
Depending on where you live, you have rights over personal data we control. For EU/EEA, UK and Swiss residents these rights include: access, rectification, erasure ("right to be forgotten"), restriction of processing, objection to processing, data portability, and the right to withdraw consent at any time without affecting the lawfulness of prior processing. You also have the right to lodge a complaint with your local data-protection authority.
To exercise any of these rights, email us at info@jemi.ca. We may ask you to verify your identity before acting on the request. We will respond within one month, or extend that period by up to two further months where the request is complex.
You can also exercise some rights directly without contacting us:
- Revoke Health Connect access: Android Settings → Apps → Health Connect → On the Up.
- Delete saved comparisons: swipe-to-delete in the App, or open a saved comparison and tap Delete.
- Clear all on-device data: Android Settings → Apps → On the Up → Storage → Clear data.
10. Children
The App is not directed to anyone under the age of 18. We do not knowingly process personal data of users below that age. If you believe a person under 18 has used the App, please contact us at info@jemi.ca and we will take appropriate action.
11. Security
The App stores health data and saved comparisons in the App's private storage on your device, which is sandboxed by Android and not accessible to other apps. You may enable biometric lock in Settings to require fingerprint authentication before opening the App. The network calls we do make (sign-in) use TLS in transit.
No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a personal-data breach affecting you, we will notify you and the relevant supervisory authority as required by applicable law.
12. Notifications
If you opt in to weekly check-in reminders, the App schedules a local notification on your device using Android WorkManager. No notification content, schedule, or status is sent to us or to any third party.
13. Automated Decision-Making
We do not use any automated decision-making or profiling that produces legal or similarly significant effects on you. The "On the Up Score", verdicts and insights shown in the App are generated locally and shown only to you; they are not used to make any decision about you.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the latest revision. If we make material changes, we will provide reasonable notice through the App or by other appropriate means before the changes take effect.
15. Contact
For privacy questions, complaints, or to exercise any of the rights described above, contact us at:
Jemica
Montreal, Quebec, Canada
Email: info@jemi.ca
EU/EEA residents may lodge a complaint with the data-protection authority of their member state. UK residents may contact the Information Commissioner's Office.