Privacy policy

Up&More sp. z o.o.

Version of 18 September 2026

This Privacy policy explains how Up&More sp. z o.o. processes personal data in connection with the use of the appmore.pl and appmo.re websites, downloading our free guide, contacting us and our marketing activities.

The appmore.pl and appmo.re websites are run by the same controller and serve the same purpose, presented in two language versions. They are therefore covered by a single document. The set of analytical and marketing tools may differ between these websites — you will find the current list for the website you are currently on in the Cookies and similar technologies section.

1. Data controller and contact

The controller of your personal data is Up&More sp. z o.o., with its registered office in Warsaw, Rondo ONZ 1, 00-124 Warsaw, Poland, entered in the National Court Register under KRS number 0000531450, NIP 5223020746, REGON 360132211 (hereinafter: “Up&More” or the “Controller”).

For matters relating to privacy and the processing of personal data you can contact us:

• by e-mail: hello@upmore.pl,
• by post: Up&More sp. z o.o., Rondo ONZ 1, 00-124 Warsaw, Poland.

2. When we process data

We may process your personal data in particular when:

• you use the appmore.pl or appmo.re website,
• you download the free guide we make available,
• you contact us by e-mail or telephone,
• you consent to receiving marketing information,
• you interact with our social media profiles.

3. Use of the website, technical logs and security

When you use the website, our technical infrastructure may automatically process information necessary to display the page, ensure it works correctly, maintain security and diagnose errors. This may include in particular your IP address, the date and time of the request, the requested URL, information about your browser and device, technical connection parameters, the server response status, and diagnostic and security-related data.

We process this data in order to:

• make the website available and ensure it works correctly,
• ensure the security of our systems and detect abuse,
• diagnose errors and incidents,
• ensure the performance and continuity of our infrastructure.

The legal basis for the processing is our legitimate interest in maintaining a secure and properly functioning website and protecting our systems and users (Article 6(1)(f) GDPR).

We retain technical data and logs for a period resulting from the configuration of the systems used and no longer than is necessary to ensure security, diagnostics, continuity of operation or to investigate a specific incident. This period may vary depending on the type of log and system. Once further processing is no longer necessary, the data is deleted or overwritten in accordance with the retention cycle of the given system.

4. Downloading the free guide

We make a free guide available on the website in PDF format. You do not need to provide an e-mail address to download it — the field is optional.

If you do not provide an e-mail address, we process only technical data relating to the download itself: your IP address, the language version of the website, a generated one-time download identifier, and the date and time. The identifier allows the file to be downloaded for 24 hours from the moment it is generated, after which it stops working. The legal basis is our legitimate interest in making the requested material available, protecting the file against abuse and keeping download statistics (Article 6(1)(f) GDPR).

If you do provide an e-mail address, we additionally use it to send you a message with a link to the guide. In this respect the legal basis is taking steps at your request, that is, delivering the material you asked us to send (Article 6(1)(b) GDPR).

Ticking the marketing consent box below the form is separate and entirely voluntary. It is not a condition for downloading the guide or receiving it by e-mail. If you tick it, we record the fact that consent was given together with the date — so that we are able to demonstrate when and to what extent it was expressed.

We retain the e-mail address provided when downloading the guide, together with the language version and date, until marketing consent is withdrawn or, where no consent was given, for no longer than 24 months from the download. Technical data relating to downloads made without providing an e-mail address is retained for no longer than 12 months.

5. Contacting us

If you contact us by e-mail, by telephone or in any other way, we process the contact details and any other information you voluntarily provide in connection with your enquiry.

We process this data in order to:

• receive, handle and respond to your enquiry,
• conduct further correspondence regarding the matter,
• prepare an offer or take steps prior to entering into a contract, where your enquiry concerns this,
• establish, pursue or defend against claims, should this prove necessary.

The legal basis is:

• Article 6(1)(f) GDPR — our legitimate interest in conducting communication, handling enquiries and documenting correspondence,
• Article 6(1)(b) GDPR — where processing is necessary in order to take steps at your request prior to entering into a contract to which you are to be a party,
• Article 6(1)(f) GDPR — to the extent necessary to establish, pursue or defend against claims.

Data relating to an enquiry that did not lead to a contract is retained for the period needed to handle it and thereafter for no longer than 24 months from the last contact. If the contact leads to a contract, the data may be further processed in connection with that cooperation. We may retain data for longer only where and to the extent justified by the need to establish, pursue or defend against specific claims.

6. E-mail marketing

If you voluntarily consent to receiving marketing information from Up&More at the e-mail address you provide, we may use that address and the related contact details to send information about Up&More services and for direct marketing contact by e-mail.

The legal basis for processing personal data for this purpose is your consent (Article 6(1)(a) GDPR). The use of e-mail to send commercial information, including direct marketing, takes place on the basis of prior consent required by Article 398 of the Polish Electronic Communications Law.

Consent is voluntary and is not a condition for downloading the guide or receiving a reply to your enquiry. You may withdraw it at any time by contacting us at hello@upmore.pl. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

We process data used for e-mail marketing until consent is withdrawn or until we end the given marketing purpose earlier. After consent is withdrawn we may retain, to a limited extent, information about it being given and withdrawn, where this is necessary to demonstrate that we acted correctly, to respect your decision or to defend against claims. The basis for such limited processing is our legitimate interest (Article 6(1)(f) GDPR).

7. Recipients of data

We do not sell your personal data.

To the extent necessary to achieve the purposes described above, data may be disclosed or entrusted to the following categories of recipients:

• providers of hosting, cloud infrastructure, content delivery networks and other services related to maintaining the website,
• providers of e-mail and communication tools,
• providers of systems for handling enquiries, leads, projects and business cooperation,
• entities providing IT, security and system maintenance services,
• the provider of the cookie consent management tool,
• providers of accounting, tax, banking, payment and legal services,
• entities supporting us in marketing and analytical activities — to the extent resulting from the consents you have given and your privacy settings,
• public authorities or other entities entitled to receive data under the law.

Depending on the nature of the cooperation, these entities may act as processors acting on our instructions or as separate controllers.

Within Up&More, access to data is granted only to persons who need it to perform their duties.

8. Transfers of data outside the European Economic Area

We use technology and cloud providers whose infrastructure or sub-processors may be located outside the European Economic Area, including in the United States. As a result, in certain cases personal data may be transferred to third countries.

Where such a transfer takes place, we apply the mechanisms provided for in Chapter V of the GDPR. Depending on the provider and the place of processing, this may in particular be a European Commission adequacy decision — where it covers the given recipient — or standard contractual clauses approved by the European Commission together with any required additional safeguards.

You can obtain information about the safeguards applied in a specific case, and about how to obtain a copy of them, by contacting us at hello@upmore.pl.

9. Cookies and similar technologies

We use cookies and similar technologies on the website, among other things to ensure the site works, to remember settings and — once appropriate consent has been obtained — for analytics, measurement and marketing.

Technologies necessary for the website to function may be used without consent to the extent permitted by applicable law. Where their use involves the processing of personal data, the basis is our legitimate interest in ensuring the correct, secure operation of the website in line with the user's choices (Article 6(1)(f) GDPR). We activate all other technologies only after obtaining the required consent.

To the extent that the use of optional cookies or similar technologies involves the processing of personal data, the basis for processing is consent (Article 6(1)(a) GDPR). The rules on storing information on a user's device and accessing it also follow from Article 399 of the Polish Electronic Communications Law.

We use the CookieHub tool to manage consents. Once you give or refuse consent, your choice is passed to the tools running on the website, which adjust their behaviour accordingly.

Depending on the consents given, technologies provided by, among others, Google (Google Tag Manager, Google Analytics, Google Ads) and — on the appmo.re website — Meta (Meta Pixel) may be activated. You will find the full, up-to-date list, including file names, providers and retention periods, in the declaration below.

You can change your preferences or withdraw consent at any time:

Manage cookie settings

Withdrawing consent does not affect the lawfulness of earlier processing. If you disable a category that was previously allowed, the files assigned to it will be removed from your browser.

Cookie declaration

The list below is generated automatically and relates to the website you are currently on.

10. Profiling and automated decision-making

We do not take decisions in relation to you based solely on automated processing which would produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.

If you consent to particular analytical or marketing technologies, the tools we use may allow statistics, segments or audiences to be created based on how the website is used. Detailed information about such technologies and providers is presented in the cookie management tool and in the cookie declaration above.

11. How long we retain data

The retention period depends on the purpose of processing. We have described the most important rules alongside the individual purposes above.

In particular:

• the e-mail address provided when downloading the guide — until marketing consent is withdrawn and, where no consent was given, no longer than 24 months from the download,
• technical data relating to downloads made without an e-mail address — no longer than 12 months,
• enquiries that did not lead to a contract — a maximum of 24 months from the last contact,
• data processed on the basis of marketing consent — until consent is withdrawn or the marketing purpose ends earlier,
• data relating to activity on our social media profiles — for as long as the profile is maintained and the given interaction or content remains available, unless it ceases to be necessary for the stated purpose earlier,
• data relating to contracts — for the duration of the cooperation and thereafter until the relevant limitation period for claims expires; for claims connected with business activity this period is generally 3 years, subject to exceptions,
• accounting and tax documentation — generally for 5 years, calculated in accordance with the relevant provisions,
• technical logs — in accordance with the retention cycle of the given system, no longer than is necessary for security, diagnostics, continuity of operation or investigating an incident.

After data is removed from actively used systems, copies may remain for a limited time in technical backups, in line with their rotation cycle.

12. Your rights

Depending on the basis and circumstances of the processing, you may have the right to:

• obtain access to your data and receive a copy of it,
• rectify inaccurate data or complete incomplete data,
• erase data, where the conditions set out in the GDPR are met,
• restrict processing,
• object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation,
• object at any time to the processing of data for direct marketing purposes; following such an objection we will no longer process the data for that purpose,
• data portability — where processing is based on consent or a contract and is carried out by automated means,
• withdraw consent at any time, where processing is based on it; withdrawing consent does not affect the lawfulness of processing carried out beforehand,
• lodge a complaint with a supervisory authority.

In Poland the supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stanisława Moniuszki 1A, 00-014 Warsaw.

To exercise your rights, you can contact us at hello@upmore.pl or by post at the Controller's address.

We respond to requests without undue delay, as a rule no later than within one month of receiving them. In the cases provided for in the GDPR this period may be extended by a further two months, of which we will inform you together with the reason for the extension.

Exercising your rights is, as a rule, free of charge. Where a request is manifestly unfounded or excessive, in particular because of its repetitive character, we may — in the cases provided for by the GDPR — charge a reasonable fee or refuse to act on the request.

If we have reasonable doubts as to the identity of the person making the request, we may ask for additional information necessary to confirm it.

13. Whether providing data is voluntary

Providing an e-mail address when downloading the guide is voluntary. You can still download the guide without providing an address — you will receive a download link directly on the page. The address is only needed if you also want to receive the guide by e-mail.

Giving marketing consent is entirely voluntary and does not affect your ability to download the guide, send an enquiry or use our services.

Providing data in correspondence with us is voluntary, but without the data necessary for contact we may not be able to respond to your enquiry.

Where data is necessary to conclude or perform a contract, or is required by law, failure to provide it may make it impossible to conclude a contract, carry out a particular action or fulfil a legal obligation.

14. Data security

We apply appropriate technical and organisational measures to protect personal data against loss, unauthorised access, disclosure, alteration or destruction. We adjust the scope of the safeguards applied to the nature of the data, the way it is processed and the risks identified.

Access to data is granted only to authorised persons and to entities that need it to carry out specific tasks and are obliged to protect the data appropriately.

15. Changes to the Privacy policy

This Policy may be updated in the event of changes to our processing of data, our services, technologies or the law. The current version and its effective date are published on the appmore.pl and appmo.re websites. We will communicate any material changes in a manner appropriate to the circumstances.

A separate Privacy policy applies to the upmore.pl website.