LetUsUp

Privacy Policy

Last updated: 15 October 2026

This policy explains what personal data LetUsUp processes when you use the LetUsUp app and this website, why we process it, and what choices you have. We’ve kept it as short and plain as we can.

1. Who is responsible

The controller responsible for your data is:

Pragpath Studio – Ardalan Ebrahimi
Frankenallee, 14052 Berlin, Germany
Email: info@pragpath.com

2. The short version

  • We use your data to run LetUsUp: your account, your habits and check-ins, your connections and cheers, and the AI coach.
  • We don’t sell your data, and we don’t use it for advertising or ad tracking.
  • Private habits are visible only to you. Public habits are visible to other signed-in LetUsUp users.
  • AI features send OpenAI only the habit context they need. We don’t send your email address, username or password.
  • You can delete your account in the app at any time.
  • This website sets no cookies and uses no analytics, trackers or third-party fonts and scripts.

3. What we process and why

Your account

  • Your email address, username and (optional) display name.
  • Your password, stored only as a salted hash and never in readable form.

We use these to create your account and sign you in. Other signed-in users can see your username, for example when you connect with them, send a cheer or share a public habit.

Your habits and check-ins

  • For each habit: its name, description, rhythm, target, category, whether it is public or private, and an optional reminder time.
  • Your daily check-ins, with timestamps.
  • Your device’s time zone, so your days are counted correctly where you live.

This is the core of the app: tracking your habits and showing your progress.

Onboarding answers (optional)

If you answer the optional onboarding questions (your main goal, biggest challenge, motivation level, time budget and preferred time of day), we use your answers to personalise habit suggestions and the AI coach.

Friends, cheers and notifications

  • Connections: the friend requests you send and receive, and the people you are connected with.
  • Cheers: an emoji and an optional short message, sent between friends.
  • In-app notifications about these, for example when someone cheers you.

Public and private habits

  • Private habits are visible only to you.
  • Public habits appear in a library for other signed-in users, showing the habit’s name, its category, your username and a calm consistency figure. Others can copy a public habit with Try this.

Tokens and purchases

  • Your token balance and a ledger of the tokens you earn and spend.
  • On Android only: Google Play purchase receipts for token packs, which we verify with Google. Google handles the payment itself, so we never receive your payment card details.

Usage events and diagnostics

We collect privacy-safe product usage events and crash and error diagnostics with Microsoft Azure Application Insights, hosted in the EU. They help us find bugs and see which features are useful. There is no ad tracking, and we never sell this data.

AI coach and suggestions

To write coach messages and suggest habits, we send OpenAI the minimum habit context needed: habit names, rhythms, completion counts and, if you gave them, your onboarding answers. We don’t send your email address, username or password. OpenAI is based in the USA, so this data is processed outside the EU (see section 4 for the safeguards). Under its API terms, OpenAI does not use this data to train its models and keeps it for at most 30 days for abuse monitoring.

This website

letusup.com and the web app at app.letusup.com set no cookies, use no advertising or third-party trackers, and load no fonts, scripts or images from third parties. To understand how people find LetUsUp, our server counts page views itself: the page, the referring website, campaign tags in the link (such as utm_source), the browser type and an approximate country. Your IP address is used only to derive the country and is not stored. These counts go to Application Insights (see below) and are deleted after 90 days. When you open an invite link, your browser asks the LetUsUp server for the display name of the person who invited you, so the page can greet you. Like any website, our hosting provider processes your IP address and technical request data to deliver pages securely.

Beta testing through Google Play and TestFlight

The beta is distributed through Google Play internal testing (Android) and Apple TestFlight (iPhone). Google and Apple process data under their own privacy policies. Through their tools we can see limited tester information, such as the email address you were invited with, and any feedback you choose to send.

4. Who helps us

  • Microsoft Azure

    What forHosting of the app’s servers and this website; diagnostics (Application Insights)

    WhereApp servers, this website, email and diagnostics: EU (West Europe region). The database with your account and habit data: USA (East US region).

  • OpenAI

    What forAI coach messages and habit suggestions

    WhereUSA

  • Google

    What forBeta distribution (Google Play internal testing); verifying Google Play purchases

    WhereSee Google’s privacy policy

  • Apple

    What forBeta distribution (TestFlight)

    WhereSee Apple’s privacy policy

Microsoft and OpenAI process data only on our behalf, under data processing agreements (Art. 28 GDPR). Transfers to the USA are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) included in those agreements; Microsoft is also certified under the EU-U.S. Data Privacy Framework. Google and Apple act as independent controllers when they distribute the app and process payments.

  • Providing the app and the features you use, including the AI coach: Art. 6(1)(b) GDPR (performance of a contract).
  • Security, crash and error diagnostics, and privacy-safe usage statistics: Art. 6(1)(f) GDPR (our legitimate interest in a secure, working and improving app).
  • Keeping purchase and token records for accounting: Art. 6(1)(c) GDPR (legal obligation).
  • Optional onboarding answers, which you give so we can suggest personal habits: Art. 6(1)(b) GDPR. You can skip them.

6. How long we keep data

  • Your account, habits, check-ins, connections, cheers and notifications: for as long as your account exists. Deleting your account removes them.
  • Purchase and token-ledger records needed for accounting: kept in anonymised form after you delete your account, for as long as German commercial and tax law requires (up to 10 years).
  • Usage events, diagnostics and website page-view counts: deleted automatically after 90 days.
  • Database backups: kept for 7 days, then overwritten. Data you deleted disappears from backups within that time.

7. Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. To use any of these rights, write to info@pragpath.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, datenschutz-berlin.de).

8. Changes to this policy

We will update this page as LetUsUp develops. The date at the top always shows the latest version.

9. Contact

Questions about privacy? Write to info@pragpath.com.