Privacy Policy
What we collect, why, who sees it, and how you stay in control.
This is a working draft written in plain English. It will be reviewed by a lawyer before Yoopzi launches, and we’ll tell you in the app if anything important changes.
The short version
- We collect what we need to run Yoopzi and keep it safe, and nothing to sell.
- We never sell your personal data, and we never show your exact location to strangers.
- You can see, download and delete your data in Settings › Your data.
What we collect
You give us
- Account details: email address or the account you sign in with (Google or Apple), and your date of birth. Other people never see it. We use it only for age limits: that you’re 18 or over, and the drinking age at some Yoopzi Nights.
- Profile: name, handle, look, bio, city and interests, plus the names you use in each Circle.
- Phone number, only if you choose to get verified: we send a code to it on WhatsApp, then keep a one-way fingerprint of the number (so it can’t verify a second account) and its last four digits, never the number itself.
- What you share: postcards, photos, voice notes, videos, replies, Plans, Trips, messages, reports and ratings.
Collected as you use Yoopzi
- Location: an approximate area to show what’s nearby. Precise location only when you choose it, for example to share where you are with friends or on a live Trip.
- Device and app information: device model, app version, crash reports, notification tokens and basic usage events, so we can fix problems and improve the app.
- Purchases: what you bought and when, from the App Store or Google Play. We never see your card details.
- GIF searches: the words you search for go to KLIPY with a random id made on your phone, never your account.
How we use it
- To run Yoopzi: show your profile and posts to the people you chose, match tables for Yoopzi Nights, deliver messages and notifications.
- To keep people safe: review reports, stop spam and abuse, and enforce the guidelines. Photos and video frames get an automatic safety check, so explicit images are held for a person to look at and sensitive ones are blurred.
- To improve Yoopzi: understand which features work, fix bugs and plan new ones, using counts rather than individual tracking wherever we can.
- To talk to you: important account messages, and reminders you can turn off in Settings › Notifications.
We rely on your consent for optional things like precise location, and on running the service you asked for, safety and the law for the rest. You can withdraw consent at any time in Settings.
Who sees what
- Other people see what you choose to share, under the name you chose. Circle names are never linked to your profile.
- Venues see how many guests to expect, never your contact details.
- Service providers process data for us under contract: Google Firebase (accounts, database and servers in Mumbai), Cloudflare (photos, voice notes and the copies of your data you ask for), Bunny (video), Amazon Web Services (email), Expo (notifications), Meta’s WhatsApp Business Platform (verification codes, only if you ask for one), RevenueCat (purchases), Google Cloud Vision (the automatic safety check on photos and video frames; Google doesn’t keep the images, and the check may run outside India) and KLIPY (GIF search: your search words and a random id for your phone, never your account; we don’t show KLIPY’s ads).
- Authorities, only when the law requires it or to protect someone from serious harm.
How long we keep it
We keep your data while your account is open, and delete it when you delete something or your account, as below. Deleting your account is done straight away; anything a step misses is finished within 30 days.
| What | How long |
|---|---|
| Your account and profile | Until you delete your account. After that we keep only your sign-in details (email, how you signed in, your handle and when you joined) privately for 180 days, as India’s IT Rules require, then delete them and keep only the date your account was deleted. |
| Your handle | Rests for 60 days after you delete your account, so old links never point at someone new. |
| Postcards, posts, replies, Plans and Trip memories | Until you delete them or your account, with their photos, videos and voice notes. |
| Content our team removed, or hid because an account was banned | Kept privately as a legal record while the account exists and for 180 days after it’s deleted, then deleted. |
| Messages | Messages you sent stay with the people you sent them to; when you delete your account your name becomes “Deleted account” and your photos, videos and voice notes are deleted. A reported message’s files are kept until the team decides. |
| Reports and complaints | Kept with what was decided, as our safety and legal record, for at least 180 days. The person reported is never told who reported them. |
| Copies of your data you ask for | 7 days, then the file is deleted. Deleting your account deletes them at once, and any emailed link stops working. |
| Crash reports | 90 days. |
| Usage counts | Daily totals, not linked to you. |
| Verified phone number (a one-way fingerprint and last four digits) | Until you delete your account. If the account was banned, the fingerprint is kept for 180 days so it can’t verify a new account. |
| Accounts of people under 18 | Deleted 30 days after the date of birth is given, or straight away if they ask, with no sign-in details kept. |
When you delete an account that signed in with Apple, we also ask Apple to revoke Yoopzi’s access.
Your rights
You can access, correct, download and delete your data, withdraw consent, and nominate someone to act for you, under India’s Digital Personal Data Protection Act 2023 and similar laws where you live. Most of this is in Settings › Your data. Your copy holds what you made, said and set; it leaves out other people’s account ids and who viewed your profile, because that’s theirs. For anything else, email privacy@yoopzi.app. If you’re in the EU or UK, you can also complain to your data protection authority.
Children
Yoopzi is only for people 18 and over. We don’t knowingly collect data from anyone younger. If someone gives a date of birth under 18, the account can’t be used and is deleted 30 days later (or straight away if they ask), keeping no sign-in details. If we learn someone under 18 has an account another way, we close it and delete it the same way.
Security and transfers
Your data is encrypted in transit and stored with providers that meet recognised security standards. Most of it is stored in India; some providers process it in other countries (for example the image safety check, email and GIF search), with safeguards the law requires.
Complaints and illegal content
Anyone can complain to our Grievance Officer, with or without an account, in the app (Settings › Report illegal content) or at yoopzi.app/grievance.
Changes and contact
We’ll tell you in the app before any important change to this policy.
Name: Sukhpreet Singh
Email: privacy@yoopzi.app
Complain in the app (Settings › Report illegal content) or at yoopzi.app/grievance, no account needed. Every complaint is acknowledged straight away, and always within 24 hours. We act on intimate images shared without consent and sexual content involving a child within 2 hours, AI fakes of a real person and court or government orders within 3 hours, other illegal content within 72 hours, and resolve every other complaint within 15 days.