Privacy Policy
Last updated: October 4, 2026
Show Up is run by JLW Holdings LLC, a Maryland limited liability company (Show Up is a BraveMind Academy product). This policy explains what we collect, why, who sees it, and how to have it deleted.
The short version: we collect what the app needs to pair you, count your days and reach you in the ways you've turned on. We never sell your information, and your goal, check-ins and messages are never shared with advertisers. Our website uses analytics and may use advertising tags (section 3). The app has no ad or analytics trackers today. If a free plan ever shows ads, the section on ads below applies, and this policy will change first.
1. What we collect
When you set up
- First name, time zone, and your goal: what it is, your schedule and deadline, your bad-day minimum, who it's for, how you like to be pushed, and an optional note to your partner.
- A random sign-in key for your phone. We store only a scrambled (hashed) copy.
- A push notification token, if you allow notifications.
When you use the app
- Check-ins: the day, the time, whether you hit the full goal or the minimum, and the code word shown in the proof photo.
- Nudges and daps between you and your partner.
- Chat messages you send your partner.
- Pair games, if you play them: the time you plan to check in and your guess at your partner's (Call the Time), and your answer to the day's question (Same Page). They're deleted when the pair ends.
- Your profile if you add one: photo (a small square image), city (typed by you, never taken from your location), and your "why."
- Your pledge video if you record one: the short video you make to your partner, so they can watch it in the app.
- Reports and blocks you make.
Stays on your phone, not sent to us: check-in proof photos, your deadline alarm, your reminder schedule, and your answer to the age question (for anyone under 18, the birth month and year, so the app can open on their 18th birthday).
If you sign in or turn on texts or email
- Your mobile number and/or email address, and when you confirmed it.
- With Apple or Google sign-in: the account ID they give us, and the email address they share. With Apple, that can be a private relay address.
- A consent record each time you turn a text, call or email option on or off: what you agreed to (the exact wording and a fingerprint of it), the number or address, the date and time, where you did it (setup, Settings, a text reply, an unsubscribe link), and technical details that show it was you: IP address, app version, and device type and operating system version.
- A log of each automated message we send or hold back, and why.
- Your quiet hours.
If you share your location in a crisis
Only when you tap "Share my location with my partner": your precise location (latitude, longitude and how accurate it is), and when the share started and ends. Only your partner sees it. It's kept only while you're sharing: the share ends when you stop it or after one hour, and it's deleted then or the next time the app checks in with our server. We never keep a location history. Your partner gets one notification when you start sharing.
On our waitlist page
Your first name, email address, whether you use iPhone or Android, the wording you agreed to, the date and time, IP address and browser type. We use it to email you when Show Up is out on your phone and, now and then, with Show Up news. Every email has an unsubscribe link. The waitlist page runs no analytics or advertising tags.
On an organization's sign-up page
First name, email, optional mobile number, the boxes you ticked, time zone, IP address, browser type and the page address.
We don't collect your location except during a crisis share you start yourself, and we never track it in the background. The app doesn't collect your contacts, calendar, health app data or advertising IDs.
2. Health-related information
Some goals reveal something about health: sobriety, medication, sleep, therapy homework, grief. We treat your goal, check-ins and anything you write about them as consumer health data. We use it only to run Show Up for you and your partner. We never sell it or use it for ads. We don't share it with an organization that paired you, and we don't share it with anyone else except the service providers in section 4. Texts, emails and notifications never name your goal: they say "your goal," never what it is.
3. How we use it
- To run the app: pair you, count days, show your partner what's described in the Terms, and deliver nudges and chat.
- To send only the reminders, texts and emails you've turned on, inside your quiet hours and limits.
- To keep proof of what you agreed to, and to honor STOP and unsubscribe requests immediately.
- To keep people safe: review reports, enforce blocks, prevent abuse.
- To fix problems and keep the service secure.
We don't use your goal, check-ins, messages or anything health-related for advertising, profiling or automated decisions about you, and we don't train AI models on it.
On our website (bothshowup.com's public pages only, never the sign-up, consent or organization forms): we use Cloudflare Web Analytics to count visits, and we may add advertising tags from Google or Meta to measure and target our own ads. Those tags can collect your device and browser details and which pages you visited, and those companies may use that under their own policies.
Ads in the app (not today): if a free plan ever shows ads, they will not be based on your goal, check-ins, messages or anything health-related, and paid plans will stay ad-free. We'll update this policy and tell you before that starts.
4. Who we share it with
- Your partner, as described in the Terms: name, goal, check-ins, profile, messages, and your location during a crisis share you start.
- An organization that paired you: only that you joined and whether you're taking part. Never your goal, check-ins or messages.
- Service providers that run parts of Show Up for us and may use the data only to do that:
- Cloudflare (hosting, database and website analytics)
- Expo, with Apple and Google (push notifications)
- GoHighLevel / LeadConnector (sending texts and emails, once turned on, and holding the waitlist). It receives only your first name, the number or email you confirmed, which kinds of messages you've agreed to, the messages themselves and, for the waitlist, which phone you use; never your goal or check-ins. If you turn an option off, we update it there too, and deleting your account deletes your contact there unless you're also on the waitlist.
- Mobile carriers (to deliver texts)
- Apple and Google (if you sign in with them)
- The law: if a valid legal process requires it, or to protect someone from serious harm.
- If the business changes hands: only under this policy's promises, and we'd tell you first.
Mobile numbers and texting consent. We don't share your mobile number or your consent to receive texts with any third party or affiliate for their marketing or promotional purposes. Text-message opt-in data and consent are never shared with third parties, except with the providers above that deliver our messages to you.
We don't sell personal information. If we add Google or Meta advertising tags to our website, that may count as "sharing" for cross-context advertising under some state laws; we'll offer an opt-out and honor Global Privacy Control signals where the law requires. We never share your goal, check-ins, messages or health-related information with advertisers.
5. How long we keep it
| What | How long |
|---|---|
| Account, goal, check-ins, profile | Until you delete your account |
| Chat messages | Until the pair ends (leaving or blocking deletes them) |
| Pledge videos | Until you record a new one, the pair ends, or either of you deletes your account |
| Crisis location share | Only while you're sharing (one hour at most). Deleted when it ends, when the pair ends, or at the app's next check-in with our server |
| Reports | Until reviewed, then up to one year as a safety record |
| Consent records and the message log | 5 years after the last message we sent you, so we can prove what you agreed to |
| One-time codes | 10 minutes to use; the record is kept briefly for security |
| Waitlist email | Until you unsubscribe or ask us to delete it |
| Unconfirmed sign-ups from an organization's page | Deleted after 14 days |
| STOP and unsubscribe records | As long as needed to keep honoring them |
6. Your choices and rights
- Turn off any text, call or email at any time: reply STOP, use the unsubscribe link, or go to Settings → Messages. See everything you've agreed to under Settings → What I agreed to.
- Access, correct or delete your information: email hello@bothshowup.com from the address or with the number on your account. We'll respond within 45 days. Consent records may be kept after deletion, for the period above, only to prove what you agreed to.
- Appeal: if we decline a request, reply to our answer to appeal it.
- Depending on your state, you may have more rights under its privacy law. We honor these requests for everyone, wherever they live.
7. Children
Show Up is for people 18 and older. We don't knowingly collect information from anyone under 18. If we learn we have, we delete it.
8. Security
Sign-in keys and codes are stored only in scrambled form, data travels over encrypted connections, and access to the database is limited. No system is perfectly secure. If a breach affects you, we'll tell you as the law requires.
9. Changes
If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect.
10. Contact
JLW Holdings LLC · hello@bothshowup.com