Last Updated: March 29, 2026
This Privacy Policy describes how NorthMesa Inc. ("NorthMesa," "we," "us," or "our") collects, uses, discloses, and otherwise processes information in connection with the UpFlow mobile application and related services (collectively, the "Service").
By accessing or using the Service, you acknowledge that you have read, understood, and accepted this Privacy Policy. If you do not agree, you must not use the Service.
The Service is intended solely for individuals who are 18 years of age or older.
The Service is not directed to minors. We do not knowingly collect or retain personal information from individuals under 18 for use of the Service. If we determine that such information has been submitted, we may suspend or delete the associated account and remove the related information without notice.
We may process information provided by you, generated through your use of the Service, or received from infrastructure and service providers, to the extent reasonably necessary to operate, secure, and improve the Service.
You may provide information such as your email address, username, handle, password credentials, date of birth, profile photo, account preferences, communications, reports, and any content or other information you choose to submit through the Service. The scope and accuracy of such information are your responsibility.
When you interact with the Service, we may automatically process limited technical, network, device, location, and usage-oriented information reasonably necessary to operate, secure, maintain, and improve the Service.
The specific information processed may vary depending on your device, permissions, account state, configuration, platform requirements, and third-party technologies in use.
We may process information for purposes including:
We may aggregate, de-identify, or anonymize information at any time. Aggregated, de-identified, or anonymized data does not identify you personally and may be used for any lawful business purpose.
Where required under applicable Canadian privacy laws, we rely on your consent or other lawful bases to collect, use, disclose, and otherwise process information.
By creating an account, using the Service, and providing requested information such as your date of birth, you acknowledge and consent to the processing described in this Privacy Policy.
You may withdraw consent where applicable by discontinuing use of the Service and requesting deletion of your account. Withdrawal of consent may result in loss of access to some or all features of the Service.
We may disclose information, in our discretion and to the extent permitted by law, in the following circumstances:
Third parties may process information under their own legal obligations, terms, and privacy practices, and we do not guarantee that all third parties will apply identical standards.
Information may be processed, stored, backed up, or accessed in Canada, the United States, or other jurisdictions where we or our service providers operate.
Those jurisdictions may have data protection laws that differ from those of your location. By using the Service, you acknowledge that information may be transferred to and processed in such jurisdictions, subject to applicable law and available safeguards.
We retain information for as long as we determine, in our discretion, is reasonably necessary for operational, security, legal, regulatory, dispute-resolution, abuse-prevention, evidentiary, or legitimate business purposes.
Depending on context, certain information may be deleted, de-identified, archived, retained in backups, or preserved where required or permitted by law, or where reasonably necessary to protect the Service or our interests.
You may delete your account using the in-app account deletion functionality. You may also contact support@upflow.one for account deletion assistance.
Following a deletion request, we may delete, de-identified, retain, or archive certain information as reasonably necessary to comply with law, resolve disputes, enforce agreements, protect the Service, prevent fraud or abuse, maintain security, or complete legitimate internal recordkeeping.
NorthMesa uses commercially reasonable efforts to protect user data and maintain the security of the Service.
However, no system can be guaranteed to be completely secure. NorthMesa does not accept responsibility or liability for security incidents, unauthorized access, data loss, or breaches arising outside of NorthMesa's reasonable control, except to the extent such liability cannot be excluded under applicable law.
The Service may rely on or integrate third-party services, platforms, and infrastructure providers, including hosting, database, authentication, notifications, analytics, advertising, or platform-level services. We are not responsible for the privacy practices, availability, or conduct of third parties except as required by applicable law.
Your interactions with third-party services may be governed by their own terms, policies, and notices.
Subject to applicable law, you may request access to, correction of, or deletion of certain personal information, or inquire about how your information is processed, by contacting us at support@upflow.one.
We may need to verify your identity before acting on a request, and we may deny or limit requests where permitted by law.
We make no guarantees, representations, or warranties regarding:
To the maximum extent permitted by law, NorthMesa Inc. disclaims responsibility and liability for damages, losses, claims, or harm arising out of or relating to the processing of information, user misuse, third-party failures, outages, bugs, or events outside of NorthMesa's reasonable control, except to the extent such liability cannot be excluded under applicable law.
We may update this Privacy Policy at any time. Changes become effective when posted. Your continued use of the Service after a revised Privacy Policy is posted constitutes acceptance of the updated version.
If you have questions regarding this Privacy Policy, you may contact us at:
support@upflow.one
NorthMesa Inc.