Privacy Notice

Depending on how you use Yolky, we collect the following categories of personal data:

• Account details — name or display name, email address, password credentials, and whether you signed up as a customer or a vendor.
• Sign-in identifiers — if you use Google or Apple sign-in, the account identifier and email those services share with us.
• Profile and listing content — your city and state, bio, business details, photos, videos, captions, products, prices, events, and amenities you choose to publish.
• Location data — the ZIP or postal code you enter to find nearby vendors, and the approximate coordinates we derive from it.
• Messages and reviews — the content of conversations between customers and vendors, reviews you leave, and any reports you submit.
• Verification documents — for vendors, the identification and business documents you upload for review.
• Usage and device data — pages viewed, features used, referring page, app version, device identifiers, and IP address.
• Support and correspondence — questions you send to our help line or support email.

We do not collect or store your card number, CVV, or bank details. Those go directly to Paddle.

Each category is used for specific purposes:

• To create and run your account, publish your listing, and deliver the features you asked for — necessary to perform our contract with you.
• To show you vendors near the area you entered and to target advertising within its radius — necessary to perform our contract with you.
• To deliver messages between customers and vendors and to store your reviews — necessary to perform our contract with you.
• To verify vendor identity, review reported content, and suspend or terminate accounts that break the rules — our legitimate interest in a safe and trustworthy platform.
• To detect and prevent fraud, abuse, and security incidents — our legitimate interest and, where applicable, a legal obligation.
• To measure how features are used and improve the Platform — our legitimate interest, or your consent where cross-app tracking is involved.
• To answer support requests — necessary to perform our contract with you.
• To send service and billing notices — necessary to perform our contract with you or to meet a legal obligation.

Yolky can record how you use the app across sessions to improve recommendations. This is entirely optional and off unless you turn it on.

You can enable or disable it at any time in Settings. When you turn it off we stop collecting new events, and you may ask us to delete the events already recorded.

We never sell this data.

We share personal data only with these categories of recipient:

• Merchant of Record — Paddle.com, for the sale of memberships and advertising, subscription management, payments, tax compliance, invoicing, and refunds.
• Service providers and subprocessors — hosting, database, storage, email delivery, mapping and geocoding, and analytics providers who process data on our instructions.
• Other Yolky members — anything you publish on your vendor page, plus the messages you send to another member and the reviews you post (reviews are shown without your name).
• Professional advisers — legal, accounting, and insurance advisers where necessary.
• Authorities — law enforcement, regulators, or courts where we are legally required to disclose, or to protect the safety of a person.
• A successor — if Yolky is acquired or merges, your data may transfer as part of that transaction.

We do not sell your personal information.

We keep account and profile data for as long as your account is open, and for up to twelve months afterwards so you can reactivate and so we can resolve disputes.

Messages, reviews, and moderation records are kept for up to three years to support safety investigations and repeat-offence tracking.

Vendor verification documents are deleted within ninety days of a verification decision.

Optional tracking events are deleted whenever you withdraw consent or ask us to remove them.

Records we must keep for tax or accounting purposes are retained for the period required by law. When data is no longer needed it is deleted or anonymised.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct information that is inaccurate or incomplete.
• Delete your data, subject to records we must legally keep.
• Restrict or object to certain processing, including profiling and marketing.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, without affecting processing already carried out.
• Complain to your local data protection authority.

To exercise any of these rights, email support@yolky.app. We will respond within one month. You can also update your name, location, email address, and password directly in Settings.

We apply appropriate technical and organisational measures to protect your data, including encryption in transit, encryption at rest for stored files, row-level access rules on our database so members can only reach their own records, restricted staff access, and signed short-lived links for uploaded media.

No system is perfectly secure. If a breach affects your personal data we will notify you and the relevant authority where the law requires it.

We use strictly necessary cookies and local storage to keep you signed in, remember your chosen area and radius, and store your saved vendors. These are required for the Platform to work.

Analytics storage is used only to measure feature usage in aggregate. Optional cross-app tracking is controlled by the switch in Settings.

We do not use advertising cookies or third-party ad networks. Yolky advertising is targeted only by the ZIP code you provide, never by tracking you across the web.

You can clear cookies and local storage in your browser or device settings, though signing out may then be required on each visit.

Yolky is intended for people aged eighteen and over. We do not knowingly collect personal data from children. If you believe a child has given us information, contact us and we will delete it.

Yolky is operated from the United States and our service providers may process data there. If you access the Platform from outside the United States, your data will be transferred to and stored in the United States.

Where required, we rely on appropriate safeguards such as standard contractual clauses with our providers.

We will update this notice when our practices change and revise the date at the top of the page. Material changes will be announced in the app.

Questions, requests, or complaints: support@yolky.app, Yolky Inc..