English · Español
NorthStar
A product that has the potential to help anyone, who is willing to try it, regain the agency to forge their lives.
All through my day, at the rhythm I choose, it asks me three questions: What am I doing right now? What would I be doing next? How are these related to my short-term or middle-term programs? If everything is in alignment, I earn a star.
I answer in my own words, and I score myself. No machine judges my answers.
It names what takes my time without asking: the Modern-Day Medusa, the endless feeds built to hold my eyes. And it keeps in front of me what I choose to walk toward: my NorthStar.
Each evening I look back on my day, and each new day I build on the one before. What I write is sealed, designed so that only I can read it.
Every three months, I look at where I stand beside where I can be — and see how much closer my three, five, ten and twenty years have come.
It opens only by invitation, from someone already inside.
UPWEFORGE PRIVACY POLICY
Contents — 14 sections
DRAFT for review and finalization by qualified privacy counsel; not effective until approved and published. Intended as a public member-facing policy. Statutory citations are stated as understood at drafting and are subject to counsel's confirmation to
then-current law. © NightEase Solutions LLC.
Effective date: 1 October 2026. This Privacy Policy explains how NightEase Solutions LLC (the "Company," "we," "us" or "our"), operator of the UpWeForge universe, collects, uses, discloses, and protects personal information, and describes your privacy rights. It is designed around our governing principle of anonymity by default and our use of encryption designed to protect private content.
1. Scope & Controller ↑
This Policy applies to the UpWeForge websites, apps, and subscription services (collectively, the "Services"). For EU/UK users, the Company is the data controller. Contact: nightease.infrastructure@proton.me · (307) 407-1634. If applicable law requires us to appoint an EU or UK representative or a data protection officer, we will identify that person in this Privacy Policy before processing personal information subject to that requirement.
2. Information We Collect ↑
- Information you provide:
- Waitlist: email address; language and approximate region your browser reports; and any referral code through which you accessed the waitlist.
- Account: authentication data, such as passkey/credential public keys, or a passphrase verifier — (but never your passphrase itself); an anonymous handle; and locale.
- Subscription: your selected plan/tier and subscription status. Payments are processed by Stripe; we do not store full payment-card numbers.
- Earning Members only: identity and tax information required by law before a payout, such as your name, government-issued identification, and tax forms. "Earning Members" are members who participate in a payout or other earning program offered through the Services.
- Usage & engagement data (collected automatically): to operate, secure, maintain, enforce, analyze and improve the Services, and to demonstrate genuine product use and compliance with legal obligations, we collect product-usage metadata — e.g., logins, active days, session counts, features used, lessons or tools completed, and retention. This is engagement metadata, not the private content you create or share through the Services. We use limited tracking on our Services and do not use third-party advertising trackers. We may provide aggregate, anonymized usage information to regulators to demonstrate genuine product use and may use it to improve the Services.
- From third parties: payment/subscription status from Stripe; limited fraud/verification signals.
- Private content we seek to protect: we use encryption intended to protect your private content and AscendShield conversations. Private content is distinct from usage metadata. We may be able to see that you used a product and the extent of that use, but we do not claim that private content is inaccessible to us unless and until the Services’ technical architecture and operational access paths have been verified.
3. How We Use Information; Legal Bases (GDPR) ↑
Purpose
GDPR legal basis
Operate, secure, maintain and enforce the Services; provide subscriptions
Contract (Art. 6(1)(b))
Send the launch signal / service emails
Consent (Art. 6(1)(a)) for waitlist
Attribute referrals (which anonymous code referred a sign-up)
Legitimate interests (Art. 6(1)(f))
Analyze and improve what we build via aggregate, anonymized patterns (never an individual's private content)
Legitimate interests (Art. 6(1)(f))
KYC/tax, fraud prevention, legal compliance
Legal obligation (Art. 6(1)(c))
4. Sharing & Disclosure ↑
4.1 We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising (as those terms are defined under the CCPA/CPRA).
4.2 Service providers (processors): hosting providers, including Netlify, database providers, including Supabase, payment processors, including Stripe, email delivery providers, and identity verification and tax-compliance partners. We may replace a listed processor or engage an additional processor where necessary to operate the Services, subject to applicable law and this Privacy Policy. Before a new processor or provider category processes Earning Members' identity, government-issued identification, or tax information, we will update this Privacy Policy to identify it. Each processor is engaged under contract and processes personal information on our instructions to provide services, maintain security, comply with legal obligations, and support our operations.
4.3 Legal and safety: we may disclose Earning Members' identity, government-issued identification, and tax information to governmental, regulatory, tax, law-enforcement, or other competent authorities where required by law or where reasonably necessary to protect rights, safety, or the integrity and anonymity of the community.
4.4 Business transfers: information may transfer as part of a merger, acquisition, or asset sale, subject to this Policy.
5. Anonymity & the Sealed Vault ↑
The Services are designed to support anonymity. We generally do not require your legal name to use the Services, except where identity information is required for an earning program or by law. We seek to protect members' identities and use encryption intended to protect your content. Depending on the Services' technical architecture and operational access paths, lost credentials may make encrypted data unrecoverable.
6. Data Retention ↑
We retain personal information only for the periods described below, unless a longer period is required or permitted by law or is necessary for backups, security, fraud prevention, dispute resolution, legal holds, compliance, or other lawful purposes: account and usage data, for the life of your account and up to two (2) years afterward; government-issued identification and KYC data, for the life of your account and up to five (5) years afterward; tax and financial records for Earning Members, for seven (7) years after the relevant transaction or as otherwise required by law; and waitlist email addresses, until you unsubscribe or request deletion. Encrypted content remains available until you delete it, subject to the retention purposes and periods described above.
7. Security ↑
We use encryption intended to protect private content, subject to the Services' technical architecture and operational access paths. No method of transmission or storage is completely secure, but we apply reasonable, layered safeguards.
8. Your Rights ↑
8.1 EEA/UK residents: subject to applicable law, you may have rights of access, rectification, erasure, restriction, portability, and objection. You may also have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects; to withdraw consent at any time where processing is based on consent; and to lodge a complaint with your supervisory authority.
8.2 California residents: we collect the categories of personal information described above, including identifiers and contact information, internet or other electronic network activity information, commercial information, and, for Earning Members, sensitive personal information such as government-issued identification and tax information. We collect these categories directly from you, automatically through your use of the Services, and from the third parties described above; use them for the purposes described above; retain them as described above; and disclose them to the service providers and other recipients described above to operate the Services, comply with law, and protect the Company and users. Subject to applicable law, California residents may have rights to know or access, delete, correct, opt out of sale or sharing, limit certain uses and disclosures of sensitive personal information, and receive non-discriminatory treatment for exercising their rights. We do not sell personal information or share it for cross-context behavioral advertising. California residents may also have rights under California's "Shine the Light" law.
8.3 How to exercise your rights: email nightease.infrastructure@proton.me or use available in-app controls. You may unsubscribe from marketing or waitlist emails using the one-click unsubscribe link in the email. We will verify requests and respond within the timeframes required by applicable law. Depending on the Services' verified technical architecture and operational access paths, we may be unable to access, retrieve, correct, or provide private content. You may use an authorized agent where permitted by applicable law. If we deny a California privacy request, you may appeal by emailing nightease.infrastructure@proton.me. We will explain our decision and any further appeal rights available to you.
9. International Transfers ↑
The Services are offered in the United States, and personal information is processed in the United States. If we later offer the Services in other countries, we will put an applicable lawful transfer mechanism in place and update this Policy before doing so.
10. Children ↑
The Services are not directed to children under 13, and we do not knowingly collect personal information from them. You must meet the minimum age required in your country to use the Services and must be of legal age to participate in any earning program, as described in the Terms of Service. If we reasonably believe that you do not meet applicable age requirements, we may restrict or close your account.
11. Automated Decision-Making ↑
We do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects on you.
12. Changes ↑
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and provide notice as required by applicable law.
13. Contact ↑
NightEase Solutions LLC · nightease.infrastructure@proton.me · (307) 407-1634.
Authorities Referenced ↑
GDPR (Regulation (EU) 2016/679) · UK GDPR · CCPA/CPRA (Cal. Civ. Code § 1798.100 et seq.) · COPPA (15 U.S.C. § 6501) · CalOPPA
Clerical corrections, 27 September 2026: spelling and typographical errors corrected; the meaning is unchanged.