UPSCALEFIT · ADULTS-ONLY PILOT
Privacy, in plain language
This notice describes the UpscaleFit website and online group pilot. Health sharing is optional and separate from accepting service terms. The browser does not access Apple Health.
Information used for a session
- Membership: the session title, group/class type, display names, host/guest role, approval status and session expiry.
- Access and choices: hashed session access tokens, selected sharing permissions.
- Optional live information: heart rate, elapsed workout time, active calories and current exercise, only for fields you explicitly enable in the app.
- Technical information: connection addresses and request information processed by the hosting infrastructure and short-lived rate-limit counters.
We use this information to provide the session, authenticate access, show the permitted board, apply your choices and protect the service against abuse. This website does not include advertising trackers, third-party analytics, newsletter collection or payment processing.
Who can see it
The host sees pending requests and approved membership. Approved members see other approved members’ display names and the fresh live fields each person chooses to share. Pending guests cannot view the group board. Hosting providers process service data to run the site. Information may also be disclosed where legally required; a private code is not a promise that recipients cannot copy what they see.
Where health information comes from
The native app receives workout data through Apple Watch and authorized device integrations. Device-level permissions are managed in Apple Health and system settings. The online relay receives only selected live fields, not your Health history, raw HealthKit sample collection, precise location, date of birth or complete training plans.
Sharing a field with the group is a distinct choice from allowing the native app to read it. Declining group sharing does not prevent your own workout recording.
Retention and storage
Live metrics stay in relay memory, are not written to its session database, and are hidden when older than 15 seconds. Disabling sharing clears the member’s stored live values after the server receives the change. Network delays can postpone that request; the app stops publishing locally while retrying. Removed members lose access.
Session metadata is retained until expiry, at most two hours, and removed during cleanup, normally within one minute. Hosting logs and backups have separate provider-controlled retention and may outlast this interval. We do not claim that hosting storage is confined to Canada. The browser uses session storage for its access token; closing the tab can end that access. The native group capability stays in app memory.
Control and withdrawal
Turn individual sharing switches off, leave the group, ask the host to remove you, or end a session you host. These choices do not delete your local workout history or stop the Watch recording. Previously viewed or captured information cannot be recalled. You may also revoke device health permissions in system settings.
Privacy requests and security
Contact us to ask about access, correction, deletion, retention, service providers or a suspected privacy incident. We may need proportionate verification before responding and will explain applicable legal exceptions. Do not send your secret session token. We use HTTPS, host approval and scoped access controls, but no internet service is risk-free.
Adults-only pilot
The pilot is not intended for people under 18. If you believe a minor has participated or another person’s information has been shared improperly, contact us so we can investigate.
Contact the operator
UpscaleFit is operated by Upscale Marketing Media, based in Québec, Canada. For support, privacy requests or questions about these notices, contact info@upscalemmedia.com. Do not email medical records or sensitive workout details unless we have agreed on an appropriate way to receive them.