Effective date: May 2026 | Last updated: May 2026
This Privacy Policy describes how Ali3N Studios LLC (“we,” “us,” or “our”) collects, uses, and protects information in connection with the Upright mobile application (“App”). This policy supplements our general Ali3N Studios Privacy Policy.
Upright is a companion app for people with Postural Orthostatic Tachycardia Syndrome (POTS) and other forms of dysautonomia. It guides the NASA Lean Test, tracks symptoms and triggers, and includes an AI companion. We take the privacy of your health data extremely seriously. We do not sell your data, we do not show ads, and we do not share your personal information with third parties for marketing purposes.
1. Data We Collect
Authentication Data
The App uses Firebase Authentication. You may continue as an anonymous guest, sign in with email/password, or sign in with Google or Apple. When you sign in with email, Google, or Apple, we receive your name (where provided), email address, and a unique user ID. This data is used solely for account management and data synchronization. Anonymous guest users are assigned an opaque Firebase user ID with no personally identifying information.
NASA Lean Test Data
When you complete a guided NASA Lean Test, the App stores: the date, your resting heart rate, optional resting blood pressure (only if you enter it), your standing heart-rate readings at 1, 3, 5, and 10 minutes post-standing, the symptoms you reported at each reading, the calculated delta and result band, and any notes you add. The App also stores whether you flagged the test as a screening for an under-19 individual (which adjusts the threshold).
Symptom and Trigger Logs
When you log daily symptoms, the App stores severity (1–10), the symptoms you tap, the triggers you suspect, optional context (weather, sleep quality, fluid intake, salt intake, activity level, standing hours, menstrual cycle phase if you choose to provide it), and any free-text notes.
Heart Rate Readings
Quick lying/standing heart-rate readings logged outside of a full NASA Lean Test are stored alongside the date and computed delta.
Profile Settings
Your condition tag (e.g. “Diagnosed POTS” or “Suspected POTS”), nickname, optional year of diagnosis, current medications you list, and known triggers you list are stored as user preferences.
AI Companion Conversations
When you use the AI Companion or request an AI interpretation of a NASA Lean Test, your messages and a short context summary are processed transiently as described in Section 2. Conversations are not retained on our servers beyond the duration of the request.
Storage Location
For signed-in accounts, your data is stored in Google Firebase Firestore under your account’s unique user ID. In guest mode, data is stored only on this device.
Analytics & Crash Reports
We use Firebase Analytics and Firebase Crashlytics to collect anonymous usage data and crash reports. No NASA Lean Test data, symptom logs, AI Companion messages, or personally identifying health data is included in analytics or crash payloads.
2. Third-Party AI Processing
The AI Companion and NASA Lean Test interpretation features in Upright send your inputs to a third-party AI service.
Who receives your data: Your inputs are transmitted to Anthropic, the operator of the Claude AI model, via Amazon Web Services (AWS) Bedrock, an AWS-hosted AI gateway. Requests are routed through our secure proxy server at api.ali3nstudios.com before reaching AWS Bedrock.
What is sent: Only the current conversation’s recent messages (a trimmed window of your most recent exchanges with the AI) plus a short context summary derived from your profile: your condition tag, year of diagnosis if provided, the medications you have listed, your known triggers, recent symptom severity averages, your most common symptoms, and your most recent NASA Lean Test delta. We do not transmit your name, email address, account identifier, location, device identifiers, contacts, photos, or any data outside of the AI Companion conversation.
How your data is used: Anthropic and AWS process your inputs solely to generate the AI response. Your inputs are not used to train Anthropic’s models, in accordance with Anthropic’s Commercial Terms of Service and AWS Bedrock’s terms. We do not retain your inputs on our proxy server after the AI response is returned.
Free-tier quota: Free users receive 3 AI Companion messages per month and one free AI interpretation of a NASA Lean Test result. Pro users have unlimited access. Quota counters are stored locally on your device.
3. Data We Do NOT Collect
- We do not collect location data.
- We do not collect contacts or address book data.
- We do not access your camera or photos (camera-based heart-rate detection is not part of the current release; if it is added in the future, this policy will be updated and camera frames will be processed locally on your device).
- We do not collect health or fitness data from device sensors or HealthKit/Google Fit.
- We do not collect browsing history.
- We do not serve advertisements or collect advertising identifiers.
- We do not track users across other apps or websites.
- We do not sell any user data.
4. Data Storage & Security
- All cloud data is stored in Google Firebase Firestore, which provides encryption at rest and in transit.
- AI Companion requests are transmitted via HTTPS to our secure proxy server.
- Guest-mode data lives only on your device in local storage and never reaches our servers.
5. Data Sharing
We share data only with:
- Anthropic (Claude AI) via AWS Bedrock — receives only the AI Companion conversation messages and the short profile context summary described in Section 2.
- Firebase (Google) — authentication, data storage, analytics, and crash reporting.
- Google Play Billing — payment data is handled by Google. We never see your card or billing details.
We do not share data with data brokers, advertisers, or any other third parties.
6. Data Retention
- Account data, NASA Lean Test history, symptom logs, heart-rate readings, and profile settings are retained while your account is active.
- AI Companion request payloads are processed transiently and not stored on our server beyond the request.
- You can delete individual NASA Lean Tests, symptom entries, and heart-rate readings from within the App.
- Account deletion (see Section 8) removes all cloud-side data immediately.
- Uninstalling the App removes all guest-mode data.
7. Children’s Privacy
Upright includes guidance for users under 19 because the NASA Lean Test diagnostic threshold differs for adolescents (≥40 bpm vs. ≥30 bpm for adults). The App is not directed to children under 13 and we do not knowingly collect personal information from anyone under 13. Users between 13 and 17 should have parental awareness and supervision when using the App, particularly when sharing data with a physician.
8. Your Rights & Account Deletion
You have the right to access, delete, or export your data. Account deletion is available in Settings, or by emailing developer@ali3nstudios.com. We respond to deletion requests within 7 business days.
9. No Advertising
Upright does not display advertisements. We do not collect advertising identifiers, and we have explicitly opted out of advertising signals in our analytics configuration.
10. Not a Medical Device or Substitute for Care
Upright is an educational and self-tracking companion tool. The NASA Lean Test result inside the App is a screening indicator, not a diagnosis. The App does not provide medical advice, diagnose conditions, prescribe medication, or replace consultation with a qualified healthcare professional. Always defer to your physician on your care plan.
11. International Users
Upright is operated from the United States. By using the App, you acknowledge that your data will be processed in the United States and other countries where our service providers (Google Firebase, AWS, Anthropic) operate. We take reasonable measures to protect your data regardless of where it is processed.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted in the App and on our website with an updated effective date. Continued use of the App after changes constitutes acceptance of the updated policy.
13. Contact
If you have questions about this Privacy Policy or your data, contact:
Ali3N Studios LLC
Email: developer@ali3nstudios.com