Last updated: 17 October 2026
Upkeep is a place to keep your own health and fitness record. Here's what that means for your information, in plain language.
The short version
- Your record is yours. You decide what goes in, you can download all of it at any time, and you can delete your account yourself.
- It is never sold, shared for marketing, or used to train AI. No ads, ever.
- Your health records are stored in Sydney, Australia. Your sign-in details are handled by a sign-in service in the United States (see §6).
- Upkeep is built and run by one person, on free plans of well-known services. That keeps it free, but it also means there are no backups yet (see §8). Keep your own copy with Download.
1. Who we are
Upkeep (upkeep.tracema.com) is made by Tracema, Melbourne, Victoria — a small, free, independent project run by one person. It isn't a registered business. We follow the Australian Privacy Principles.
Contact: hello@tracema.com — for questions, requests to see or correct your information, or complaints.
2. What Upkeep keeps
Your account
- Your email address, and your name and profile picture if you sign in with Google.
- Sign-in records kept by our sign-in service: when you signed in, and from what kind of device and IP address. These are used to keep your account secure.
Your record — only what you choose to put in
- Symptoms, medication, meals and drinks, movement, sleep, fasting, weight, body changes and your notes about them.
- How each day felt overall, your plans and goals, research notes and your health story.
- Appointments, notes for and from doctor visits, your GP and other providers, allergies, family history, blood type and emergency contacts.
- Your Medicare and health fund details: fund name, cover level and phone. Upkeep never asks for or stores card numbers. Your digital Medicare card lives in the myGov app.
- Photos you add, for example to keep track of a change. Location details are removed from photos before they're saved.
Your record may include information about other people, such as an emergency contact or family history. Only add what you're comfortable keeping, and what they'd be comfortable with too.
Technical information
- Short-lived counters of requests from your account or IP address, so the service can't be overloaded or attacked.
- Basic request logs kept by our hosting service, which expire on their own.
What Upkeep doesn't use: no advertising or tracking cookies, and no analytics inside the app. The only cookies are the ones that keep you signed in.
3. Why
Only to run Upkeep for you: to save what you log, show it back to you, and keep your account secure. Nothing else.
We do not:
- sell your information, or share it with anyone for marketing;
- use it to train AI or any other model;
- show you ads;
- read your record. The only exceptions are if you ask for help and give permission, or if the law requires it.
4. Your health information
Health information is sensitive, and Upkeep treats it that way. Everything in your record is there because you typed it in or added it, and you can change or delete any of it at any time.
Upkeep is a personal record you keep for yourself. It isn't a medical service, isn't connected to your doctor's systems, and never tells you what your information means.
5. Who can see it
Only you, when you're signed in. Upkeep has no sharing features yet. If sharing is added later, for example with family or a doctor, it will only ever happen when you choose to share something, and this policy will be updated first.
6. Where it's stored, and the services we use
| Service | What it does | What it holds | Where |
|---|---|---|---|
| Supabase | Database and photo storage | Your whole record and photos | Sydney, Australia |
| Clerk | Sign-in | Email, name and photo (if Google), sign-in history | Mainly United States |
| Vercel | Runs the website and app | Request logs (IP address, pages requested), kept briefly | App runs in Sydney; Vercel may process logs outside Australia |
| Upstash | Protects against overload | Counters linked to your account ID or IP address, kept for minutes | May be outside Australia |
| Google (only if you choose "Sign in with Google") | Confirms who you are | What Google shares at sign-in (name, email, photo) | Google's own systems |
Overseas: Clerk stores sign-in details mainly in the United States. Vercel's request logs and Upstash's counters may also be handled outside Australia, but they hold only technical details for a short time. Your health records are not sent overseas.
7. How it's protected
- Every connection is encrypted, and stored data is encrypted by our database provider.
- Each record is locked to your account at the database level, so one person's information can't be read by another.
- Upkeep doesn't store Medicare, health fund or bank card numbers at all.
- Photos are stored privately and only shown to you through short-lived links.
- No third-party scripts run inside the app.
- Sign-in is by email link or Google, with no passwords to leak. Upkeep's free plan doesn't include two-step sign-in yet, and you stay signed in for up to 7 days, so please sign out on shared devices.
No system is perfectly secure. If something ever goes wrong in a way that could harm you, we'll tell you as quickly as we can, and tell the Office of the Australian Information Commissioner where the law requires it.
8. No backups — please keep your own copy
Upkeep runs on free plans, and those don't include backups. If something is deleted by mistake, or a problem happens on our side, we can't restore it. Use Settings → Download everything whenever you like to keep your own complete copy.
9. Your choices
- See and change it: everything you've entered can be viewed and edited in the app.
- Download everything: a file with your whole record, your photos, and a printable summary.
- Delete your account: in Settings → Delete account. This deletes your record, your photos and your sign-in account straight away. It can't be undone, because there are no backups. Short-lived technical logs held by our services expire on their own.
- Ask us anything: hello@tracema.com.
10. Age
Upkeep is for adults (18 and over).
11. Visitor statistics on our public pages
(Add this section, and update the short version, when Google Analytics is switched on. Until then, Upkeep collects no analytics.)
12. If Upkeep ever closes
You'll get at least 60 days' notice by email, so there's time to download everything. When the service closes, your record will then be deleted.
13. Changes to this policy
If this policy changes, we'll update the date at the top. If a change affects what we collect or who sees it, we'll tell you in the app or by email before it takes effect.
14. Questions or complaints
Email hello@tracema.com. We aim to reply within 14 days, and always within 30. If you're not happy with the answer, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.