Privacy Policy

Last updated: August 25, 2026

This Privacy Policy applies to the Upd8All application (including its browser-based feature, Upd8 Go) and to the upd8all-ltd.com website, including its blog. It describes what information is and is not processed when you use the Service or visit the Website, and explains your privacy rights and how the law protects you.

In Short

Upd8All does not use accounts and does not ask for your name, phone number, or email address. The app itself does not collect personal information. Messages are end-to-end encrypted: they are stored on our servers only in encrypted form and can be read only on the sending and receiving devices. Message date and time information is not encrypted. Channels older than about 30 days are periodically deleted. Ads in the app are provided by Google AdMob, which may collect device identifiers with your consent; that is the only data collection connected with the app. Our website uses Google Analytics, which involves limited data collection described below. The rest of this policy sets all of this out in detail.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Application means the software program provided by the Company, named Upd8All, downloaded by You on any electronic device, including its web-based feature named Upd8 Go, which allows updates to be received in a standard web browser without installing the Application.
  • Business, for the purpose of the CCPA (California Consumer Privacy Act), refers to the Company as the legal entity that determines the purposes and means of the processing of Consumers’ personal information.
  • Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Policy) refers to Upd8All Limited, Southfields Middleton Lane, Middleton, Tamworth, B78 2BW, United Kingdom. For the purposes of the UK GDPR, We are the Data Controller and are registered with the Information Commissioner’s Office under registration number ZB493874.
  • Consumer, for the purpose of the CCPA, means a natural person who is a California resident.
  • Device means any device that can access the Service, such as a computer, a cellphone or a digital tablet.
  • Do Not Track (DNT) is a concept promoted by US regulatory authorities for allowing internet users to control the tracking of their online activities across websites.
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Sale, for the purpose of the CCPA, means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a Consumer’s personal information to another business or a third party for monetary or other valuable consideration.
  • Service refers to the Application, whether accessed via the native mobile app or through the Upd8 Go browser feature.
  • Service Provider means any natural or legal person who processes data on behalf of the Company, such as our hosting or infrastructure providers. For the purpose of the UK GDPR, Service Providers are considered Data Processors.
  • Usage Data refers to limited technical information generated automatically when the Service or Website is used, such as the IP address and browser type recorded in standard web server logs, and the date and time a message was sent.
  • Website refers to upd8all-ltd.com, including its blog.
  • You means the individual accessing or using the Service or Website, or the company or other legal entity on behalf of which such individual is acting.

What We Do Not Collect

The Upd8All application does not collect: your name, email address, or phone number; your contacts; your location; the content of your messages in readable form; or any account or profile information. There are no user accounts and no registration. Senders and receivers are connected by scanning a QR code, and no personal details are exchanged between them or with us.

How the Service Works and Encryption

A sender creates a channel in the app and displays a QR code. A receiver scans that code, either in the app or in a web browser through Upd8 Go, and from then on receives the sender’s updates on that channel. Channels are one-way and messages are limited to 40 characters.

Message content is encrypted end to end: it is encrypted on the sender’s device, stored on our servers only in encrypted form, and decrypted only on the receiving device or in the receiver’s browser. We cannot read message content. Technical metadata, such as the date and time a message was sent, is not encrypted. The History feature shows up to the last 10 messages on a channel; when a channel is deleted from our servers, that history is removed.

Information We Do Process

Usage Data

Standard web server logs are created automatically when the Service or Website is used. These may include your IP address, browser type and version, the pages visited, and the date and time of access. These logs are maintained by our hosting and cloud providers for security and diagnostic purposes and are retained for a short period.

Message Metadata

The date and time of messages is stored with the channel and is not encrypted. Message content itself is stored only in encrypted form, as described above.

Advertising in the App (Google AdMob)

Advertising in the Upd8All app is provided by Google AdMob. When you first open the app, Google displays a consent message and you can choose whether to allow personalised ads. Depending on your choice, Google may collect device identifiers (such as the advertising ID), IP address, ad interaction data, and general device information in order to serve and measure ads. Upd8All does not itself collect or store this information.

You can change your choice at any time in your device settings: “Delete advertising ID” or “Opt out of Ads Personalisation” on Android, and “Allow Apps to Request to Track” under Privacy settings on iOS. For details of how Google processes this data, see Google’s Privacy Policy (https://policies.google.com/privacy) and “How Google uses information from sites or apps that use our services” (https://policies.google.com/technologies/partner-sites).

If You Contact Us

If you email us at support@upd8all-ltd.com, we process the information you send (such as your email address and the content of your message) in order to respond to you.

Website Visitors: Analytics, Cookies and Advertising

This section applies to visitors to upd8all-ltd.com.

Analytics (Google Analytics)

We use Google Analytics to understand how visitors use our Website. Google Analytics uses cookies and collects information such as the pages you visit, how long you stay, approximate location derived from your IP address, and device and browser information. You can opt out of Google Analytics by installing the browser add-on available at https://tools.google.com/dlpage/gaoptout. For details of how Google processes this data, see https://policies.google.com/technologies/partner-sites.

Advertising on Our Website (Google AdSense)

We intend to display advertising on our Website served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this and other websites. Google’s use of advertising cookies enables it and its partners to serve ads based on your visits to this site and other sites on the Internet. You may opt out of personalised advertising by visiting Google’s Ads Settings at https://adssettings.google.com or https://www.aboutads.info.

Use of Your Personal Data

The Company may use the limited data described above for the following purposes:

  • To provide and maintain the Service, including storing and delivering encrypted messages and displaying them on the sending and receiving devices and in Upd8 Go.
  • To keep the Service secure, including detecting and preventing abuse, fraud, and attacks on our infrastructure.
  • To respond to you, when you contact us.
  • To display advertising, through Google AdMob in the app and, in future, Google AdSense on the Website, as described above.
  • To understand Website usage, through Google Analytics as described above.
  • To comply with legal obligations, and to establish, exercise, or defend legal claims.
  • For business transfers, if the Company is involved in a merger, acquisition, or asset sale, in which case the limited data we hold may be part of the transferred assets.

Sharing Your Personal Information

We may share the limited data described in this policy only in the following situations:

  • With Service Providers: our infrastructure and hosting providers (Amazon Web Services for Application data and message storage, and GoDaddy for Website hosting) process or store our data, including encrypted message content and server logs, and Google provides advertising and analytics services as described above.
  • For business transfers: in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of our business.
  • With law enforcement or for legal reasons: where required to do so by law or in response to valid requests by public authorities, or where disclosure is necessary to protect the rights, property, or safety of the Company, our users, or the public. Note that because message content is stored only in encrypted form, we are not able to produce readable message content.
  • With your consent: for any other purpose, with your consent.

Retention and Deletion of Your Data

Message content is stored on our servers only in encrypted form. We periodically delete channels that are older than approximately 30 days, together with all messages on them. This deletion is currently a manual process, so it may occasionally take longer than 30 days. When a channel is deleted from our servers, its message history is removed; the last message may remain visible on the sender’s and receiver’s own devices until they delete the channel locally.

In addition, you can delete data yourself at any time: a receiver can delete a channel on their device and will receive no further messages on it, and a sender can delete a channel and will be unable to send further messages on it.

Server logs are retained by our hosting and cloud infrastructure providers for a short period for security and diagnostics.

Hosting and International Transfers

Our Application infrastructure and message storage are hosted on Amazon Web Services (AWS), and our Website is hosted by GoDaddy, with servers located in the United States. Message content stored on AWS is encrypted and cannot be read by us, AWS, or GoDaddy.

Where personal data is transferred outside the United Kingdom, we rely on appropriate safeguards under UK data protection law, such as our service providers’ data processing agreements incorporating the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework where the recipient is certified under it. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

Security of Your Personal Data

Message content is protected by end-to-end encryption as described in this policy. The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

GDPR Privacy

Legal Basis for Processing Personal Data under the UK GDPR

We may process the limited Personal Data described in this policy under the following conditions:

  • Consent: you have given your consent, for example to personalised advertising through the consent message shown in the app.
  • Performance of a contract: processing is necessary to provide the Service to you under our Terms and Conditions.
  • Legal obligations: processing is necessary for compliance with a legal obligation to which the Company is subject.
  • Legitimate interests: processing is necessary for our legitimate interests, such as keeping the Service secure and understanding how our Website is used, where those interests are not overridden by your rights.

Your Rights under the UK GDPR

You have the right to:

  • Request access to the Personal Data we hold about you and receive a copy of it.
  • Request correction of any incomplete or inaccurate Personal Data we hold about you.
  • Request erasure of your Personal Data where there is no good reason for us to continue processing it.
  • Object to processing where we rely on legitimate interests, or where we process your data for direct marketing purposes.
  • Request the transfer of your Personal Data in a structured, commonly used, machine-readable format, where the processing is automated and based on your consent or a contract.
  • Withdraw your consent at any time where we rely on consent to process your data.

Please note that these rights are not absolute. Also note that because the Service does not use accounts and the app does not collect personal information, in most cases we hold no data with which to identify you, and requests will mainly be relevant to support emails and server logs.

Whenever possible, you can act directly: deleting a channel in the app or in Upd8 Go removes it from your device. For anything else, contact us at support@upd8all-ltd.com and we will assist you.

Exercising Your GDPR Data Protection Rights

You may exercise your rights by contacting us. We may ask you to verify your identity before responding to such requests. If you make a request, we will respond as soon as possible.

If you are in the United Kingdom, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk. If you are in the European Economic Area, you may contact your local data protection authority (https://edpb.europa.eu/about-edpb/about-edpb/members_en).

Children’s Privacy

Our Service is not intended for anyone under the age of 16 without the consent of a parent or guardian, and we do not permit those under 16 to use the Service without such consent. We do not knowingly collect personal data from anyone under the age of 16. Because the Service does not use accounts and does not ask for names, contact details, or any personal information, we do not hold data with which to identify a user’s age.

If you are a parent or guardian and are aware that your child has used the Service without your consent, or has provided personal data to us (for example through an email), please contact us at support@upd8all-ltd.com and we will delete that information.

CCPA/CPRA Privacy (California Residents)

This section supplements this Privacy Policy and applies solely to residents of the State of California.

Categories of Personal Information Collected

The following reflects the CCPA categories and whether information in each category is collected in connection with the Service or Website within the last twelve (12) months. Where a category is marked “Yes”, the collection is limited to the specific items described in this policy (advertising identifiers and related data collected by Google AdMob with your consent, standard server logs, Google Analytics data, and support emails).

  • Category A: Identifiers (such as IP address, online identifiers, device advertising identifiers, or an email address you provide in a support email). Collected: Yes.
  • Category B: Personal information categories listed in the California Customer Records statute (such as financial, medical, or insurance information). Collected: No.
  • Category C: Protected classification characteristics. Collected: No.
  • Category D: Commercial information. Collected: No.
  • Category E: Biometric information. Collected: No.
  • Category F: Internet or other similar network activity (such as interaction with the Service, Website, or advertisements). Collected: Yes.
  • Category G: Geolocation data (approximate location inferred from IP address by advertising or analytics services). Collected: Yes.
  • Category H: Sensory data. Collected: No.
  • Category I: Professional or employment-related information. Collected: No.
  • Category J: Non-public education information. Collected: No.
  • Category K: Inferences drawn from other personal information. Collected: No.

Sources of Personal Information

We obtain the categories of personal information listed above automatically from your use of the Service or Website (for example, server logs and advertising or analytics services), and directly from you when you contact us.

Use of Personal Information

We use the personal information described above to operate and secure the Service and Website, to respond to your enquiries, to display advertising and measure Website usage as described in this policy, to comply with law, and for internal administrative purposes.

Disclosure of Personal Information for Business Purposes

We may disclose, and may have disclosed in the last twelve (12) months, the following categories for business purposes: Category A (Identifiers), Category F (Internet or other similar network activity), and Category G (Geolocation data), to the Service Providers described in this policy.

Sale or Sharing of Personal Information

We do not sell personal information in exchange for money, and the Upd8All application itself does not collect personal information. However, advertising in the app is provided by Google AdMob, and the disclosure of device identifiers and ad interaction data to Google for advertising purposes may constitute a “sale” or “sharing” of personal information as those terms are broadly defined under the CCPA/CPRA. The categories potentially affected are identifiers (Category A), internet or network activity (Category F), and approximate location inferred by the advertising service (Category G).

You can opt out through the consent choice shown when you first open the app, through your device’s advertising settings (see Mobile Devices below), and through the opt-out platforms listed below.

Personal Information of Consumers Under 16 Years of Age

We do not knowingly collect or sell the personal information of consumers under 16 years of age. If you believe that a person under 16 has provided us with personal information, please contact us so we can delete it.

Your Rights under the CCPA

If you are a California resident, you have the right to notice of the categories of personal information collected and the purposes of use; the right to request that we disclose the personal information we have collected about you; the right to opt out of the sale or sharing of personal information; the right to request deletion of your personal information, subject to certain exceptions; the right to correct inaccurate personal information; and the right not to be discriminated against for exercising any of these rights.

Exercising Your CCPA Rights

To exercise any of these rights, contact us by email at support@upd8all-ltd.com. We may ask you to verify your identity before responding. We will respond to a verifiable request within 45 days of receiving it; this period may be extended once by an additional 45 days where reasonably necessary, with prior notice. Any disclosures will cover the 12-month period preceding the request.

Do Not Sell or Share My Personal Information

To direct us not to sell or share your personal information, contact us at support@upd8all-ltd.com. You can also limit interest-based advertising as follows:

Website:

  • The NAI’s opt-out platform: https://www.networkadvertising.org/choices/
  • The EDAA’s opt-out platform: https://www.youronlinechoices.com/
  • The DAA’s opt-out platform: https://optout.aboutads.info/?c=2&lang=EN

Mobile Devices:

  • “Delete advertising ID” or “Opt out of Ads Personalisation” on Android devices
  • “Allow Apps to Request to Track” under Privacy settings on iOS devices

Please note that browser-based opt-outs are specific to the browser you use.

“Do Not Track” Policy (CalOPPA)

Our Service does not respond to Do Not Track signals. However, some third-party websites do keep track of your browsing activities; you can set your preferences in your web browser to inform websites that you do not want to be tracked, and enable or disable DNT in your browser’s settings.

Links to Other Websites

Our Service and Website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date at the top. Where a change is significant, we will provide a prominent notice on our Service or Website before it takes effect. You are advised to review this Privacy Policy periodically. Changes are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, you can contact us:

  • By email: support@upd8all-ltd.com
  • By post: Upd8All Limited, Southfields Middleton Lane, Middleton, Tamworth, B78 2BW, United Kingdom