Privacy Policy

Last updated: October 2, 2026

Upheld is an app that helps parents keep track of their child's IEP or 504 plan, log whether services were delivered, and work with an advocate if they choose to. It is built by Midpoint Software Group. This policy explains what information we collect, how we use it, and the choices you have. Because Upheld holds information about children, we collect only what the app needs to work.

1. Information We Collect

College transition planning. Adult students and families may save college details, disability services contact information, preparation tasks, document requirements, accommodation statuses, deadlines, follow-up dates, and notes. These records use the same private account and invited-team access as the student's school record. Statuses are entered by you; Upheld does not obtain approval from a college or send requests to a college. Optional local reminders use generic notification text.

Account information. Your email address and the name you enter in your profile. If you sign up as an advocate, we also collect the profile details you choose to list, such as your specialties, the area you serve, and a website or professional link.

Information you enter about your child. This can include your child's first name, grade, school, IEP or 504 details (goals, services, accommodations, and dates), service logs, notes, and documents you upload. You decide what to enter.

Journal (optional). You can keep a dated journal about your child: notes, contact with the school, behavior or mood, homework, and health notes such as missed school or a medication change, with an optional photo. Journal entries are visible to you and any co-parent you invite. An advocate you invite sees an entry only if you mark that entry as shared; attached photos are never shared with advocates.

Documents (optional). You can keep copies of your child's IEP, 504 plan, evaluations, and letters in the app. When you scan the IEP, the scanned pages are kept as a document unless you turn that off. Documents are visible to you and anyone you have invited to your child's records, and are deleted with your account.

Voice memos. If you record a voice memo, the audio recording and its written transcript are saved with the entry so you can replay it later. Speech is turned into text on your phone, and the suggested log entries are worked out on your phone too. Nothing from your memo is sent to an outside AI service. You review every suggestion before anything is saved.

Scanned IEP pages (optional). If you choose to scan your child's IEP, the photos or PDF you select are sent to Anthropic, our AI reading service, so the document can be read and the services, dates, accommodations, and goals filled in for you to check. We ask for your permission on screen every time before anything is sent. We use the pages to suggest plan details for your review. If you keep the originals, they are saved in private Supabase storage with your documents; you can turn this off before saving. Your saved records and recordings sync through Supabase. Speech recognition and voice-log suggestions run on your phone, but saved memos are uploaded. Anthropic processes submissions under its API data-retention policy; we do not promise zero retention. You can enter your plan without AI.

Meeting recordings (optional). You can record an IEP or 504 meeting in Upheld. The app is built for open recording only: before recording, tell everyone and obtain any required consent. The updated app asks you to confirm everyone's agreement. It is your responsibility to follow your state's law and your district's policy. The audio and transcript are made on your phone and stored in your private records. If you choose "Summarize with AI," the written transcript (never the audio) is sent to Anthropic to produce a summary of decisions and action items; we ask for your permission on screen each time, and Anthropic processes it under its API data-retention policy. We do not use your records to train our own models.

Other optional AI features. A question you submit in the rights library is sent to Anthropic with reference articles. Avoid including identifying or sensitive details. Advocate profiles may be processed by Anthropic to assist human moderation; this is disclosed when submitting a profile.

Subscriptions. RevenueCat receives your account identifier and purchase/entitlement information to verify access. Payments are processed by the app store. We do not receive your payment-card details.

Usage and device information. Basic information such as device type, operating system version, and crash reports, used to keep the app working.

App updates. We use Expo to deliver compatible app updates and assess their reliability and adoption. Expo receives a random identifier for each app installation, platform and update information, and update-related diagnostics such as launch failures. The installation identifier is generated on your device, is not based on a hardware identifier, and is separate from your Upheld account and student records. It is not used for advertising or cross-app tracking.

2. How We Use Your Information

• To run Upheld, including saving and syncing your records across your devices
• To share records with people you choose, such as another parent or an advocate you invite
• To send account and service emails, such as invitations, advocate request updates, and account notices
• To suggest log entries from your voice memos (on your phone), which you confirm before saving
• To fill in your plan from scanned IEP pages, only when you choose to scan, which you confirm before saving
• To verify subscriptions through RevenueCat and the applicable app store
• To fix problems and improve the app

We do not sell your information. We do not show ads. We do not use your records or recordings to train AI models.

3. Who Can See Your Information

• You and the people you invite. Records are private to your account until you share them. You choose who to invite and can remove access at any time.
• Advocates, only when you send a request. An advocate cannot see your contact information or your child's records unless you send them a request or invite them.
• Service providers. We use Supabase (database and file storage), Resend (email), Apple or Google Play (payments), RevenueCat (subscription verification), Expo (app updates and update diagnostics), and Anthropic (optional AI document reading, meeting summaries, rights questions, and advocate-profile moderation). They process data only to provide their service to us.
• Legal requirements. We may disclose information if required by law or valid legal process.

We never share your records with your child's school or school district. Anything you send to a school, you send yourself.

4. Storage and Security

Versions with Pending saves keep interrupted document, journal, memo, and meeting saves encrypted on your device until you retry successfully. The encryption key is stored in device-protected storage. Pending saves are specific to your signed-in account and are removed when account deletion completes. Avoid uninstalling Upheld while a save is pending.

Your data is stored in the United States on Supabase. Each family's records are separated with database security rules, so an account can only reach records it owns or has been invited to. Audio recordings and documents are kept in private storage. No system is perfectly secure, so please use a strong password that you don't use anywhere else.

5. Your Choices

Student control. A record owner may offer the existing student record to an adult student's separate verified account using an email-bound code that expires after 48 hours. When accepted, the student becomes the record owner. Existing invitations and shared access are removed; the student can choose to retain the previous owner as a supporter with viewing and editing access, then revoke that access in Team. Existing documents and history stay with the record. Sharing in Upheld does not replace a college's education-record consent process.

Access and correction. You can view and edit your records in the app at any time.

Deleting your account. You can delete your account in the app from Settings. Deletion removes your account and records for children you own, including their documents and recordings. Large deletions may require you to retry while connected; editing is disabled while deletion is pending. Records you contributed to a child owned by another family remain with that family; your account link is removed where supported. Contact us about removing personal information from shared records. Backups may persist until their normal expiry and are not used as active records. See how to delete your account for details.

A copy of your data. To request a copy of your data, email hello@upheld.me.

6. Children

Upheld accounts are for adults age 18 or older, including parents, guardians, advocates, and students managing their own support. Parents may enter information about their child. A record remains under its current owner's control unless an adult student accepts the explicit handoff described above. Students under 18 should plan with an adult account holder. If you believe an underage user has created an account, contact us.

7. Not Legal or Medical Advice

Upheld helps you organize IEP records. Its rights-information features provide general information about the law and direct you to legal information and resources. They do not provide personalized legal advice, medical diagnoses, treatment guidance, or health and wellness recommendations. Upheld is not affiliated with any school or school district.

IEP documents, evaluations, therapy records, and notes that you choose to upload or enter may contain health or disability information. Upheld stores and processes that information to provide the recordkeeping and optional features described in this policy. Storing those records does not mean Upheld provides medical or wellness advice.

8. Changes to This Policy

If we make important changes, we will update the date at the top of this page. Continuing to use Upheld after a change means you accept the updated policy.