Privacy Policy

What stays on your phone

ShowdUp stores your timezone, alarms, schedules, reminder activity, attempt history, subscription state and proof in the app's private storage. Step proof keeps a count and its timing. Walk and run proof can keep active duration, distance, coordinates, accuracy and timestamps. After a run reaches its goal, ShowdUp keeps recording until you finish it, stop moving for ten minutes or reach three hours, and saves the route on your phone so it can show your pace, splits and route drawing. A shared run card shows the route's shape only, with no map or coordinates. Place proof can keep the place you chose, coordinates, accuracy, timestamps and how long you stayed. Phone-down proof keeps the package names you selected and when the timer reset. Tag proof keeps only a scrambled fingerprint of the code, never what it says. LeetCode proof keeps the public username, an accepted count and problem slugs. When you search for a place, the text you type goes to Google, through Google Places or Android’s own place lookup; the result you pick stays on your phone.

ShowdUp never uploads alarm titles, step counts, coordinates or proof. Android backup is disabled. History is kept on the device for up to two years. You can erase everything from Settings, and Android removes private app data when you clear storage or uninstall.

If you share a check-in or a proof card, Android's share sheet sends it only to the destination you pick. ShowdUp keeps no buddy list.

Subscriptions

ShowdUp uses RevenueCat to present plans, validate purchases and decide whether Pro is active. The app creates a random, device-local RevenueCat identifier. RevenueCat and Google Play process that identifier, purchase tokens, product and entitlement status, store and device information, and transaction events needed to run subscriptions. Google Play takes payment; ShowdUp never receives card or bank details.

Deleting your data or uninstalling does not cancel a subscription. Cancel in Google Play. See RevenueCat's privacy information and Google's privacy policy.

Accessibility access: phone-down proof and the catch

ShowdUp's Android Accessibility service is optional and off until you turn it on. While a phone-down alarm or a held app is active, the service receives window-change events and reads only the package name of the app in front. While a phone-down timer you started is running, the apps you picked for it are caught and closed the same way as a held app, so the timer can finish; if one still stays open for ten continuous seconds, the timer restarts.

The first time a held app catches you in a day, ShowdUp shows a full screen that explains the rule and offers to end the day. After that, it draws a small card over the app for about two seconds saying you were caught, then uses Android's own Home action to leave the app. The card shows only ShowdUp's own words; it never reads, copies or covers what the app is doing, and you can turn it off in Settings.

ShowdUp does not use this service to read screen contents, typed text, notifications, passwords or form fields. It does not inject gestures or key events, and it never transmits Accessibility events or your list of selected apps. You can decline the feature, turn the service off in Android Accessibility settings, clear app data or uninstall. Alarms and every other proof keep working without it.

Android permissions

• Physical activity is used for step-counter proof.
• Precise foreground location is used only after you start walk, run or place proof, and stops when the proof or your run ends. A notification shows while it is on. ShowdUp never asks for background location.
• Notifications, alarms, foreground services and boot completion deliver the reminders you set and keep active proof running.
• Vibration is used for the app's haptics; you can switch haptics and sounds off in Settings.
• Installed launcher apps are listed on the device only so you can choose which app to hold or to count as a distraction.
• Display over other apps is optional and shows your companion, score and controls. It never inspects what is underneath, and a notification identifies the running service while it is on.
• Health Connect workout proof is not part of this release. If a later version adds it, it will read only workout time, type, how it was recorded and which app recorded it, and it will ask separately.

LeetCode public profiles

If you set a LeetCode alarm, ShowdUp sends the username you type to LeetCode and reads the accepted problems shown on that public profile. It never asks for your password, a token or a cookie. When LeetCode cannot be reached, the day counts as “couldn't tell”, not missed.

Firebase and Battles

Firebase Authentication creates an anonymous account when configured; Google sign-in is optional for solo use and required to invite or join a Battle. Firestore and Cloud Functions store battle profiles, memberships, expiring invite codes and aggregated scoring events. They never store alarm titles or raw proof. There is no scheduled database-wide job.

You can delete your Battle account and its data from Settings, or as described on the data deletion page.

Sharing, security and limits

ShowdUp has no advertising and does not sell personal data. Data is processed by Google Play and RevenueCat for subscriptions, Firebase for optional Battles, Google when you deliberately search for a place, and LeetCode when you set up public-profile proof. Android's share sheet sends content only where you choose. Information can also be disclosed when required by law.

On-device data is protected by Android's application sandbox. No software can guarantee absolute security, and root-level access may allow alteration. Step, location and app-use signals are plausibility checks, not tamper-proof proof.

Your rights, including in the EU and UK

Wherever you live, you can see, export, correct or erase what ShowdUp holds about you. Almost all of it is on your phone, so you can do this yourself: History shows it, Settings erases it, and uninstalling removes it. For Battles data, use Settings or the data deletion page. If the GDPR or UK GDPR applies to you, ShowdUp processes on-device proof to provide the service you asked for, and optional Battles and purchases on the same basis. You can also object to or restrict processing, and complain to your local data protection authority. Subscription data is processed by Google Play and RevenueCat, which may transfer it outside your country under their own safeguards.

Children

ShowdUp is not directed to children under 13. Do not use it if local law requires parental consent that has not been given.

Changes and contact

Material changes update the effective date on this page. For privacy or support questions, use the developer contact email shown on ShowdUp's Google Play listing.