Privacy Policy

1. Introduction

Yallup ("we," "our," or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Yallup mobile application (the "App"). Please read this policy carefully. By using the App, you consent to the practices described here.

2. Information We Collect

a) Information You Provide

Name and profile photo
Phone number (used for account verification via OTP)
Trip details, destinations, and dates you create or join
Messages and content shared within trips

b) Information Collected Automatically

Device identifiers (for push notifications)
App usage data and interactions
Network connectivity status
Crash logs and performance data

c) Information from Third Parties

We do not purchase data from third-party data brokers.

3. How We Use Your Information

We use the information we collect to:

Create and manage your account
Facilitate trip planning and coordination with other users
Send push notifications about trip updates and activity
Improve, personalize, and expand the App
Respond to support requests
Detect, prevent, and address technical issues or misuse
Comply with legal obligations

4. How We Share Your Information

a) With Other Users

Your name, profile photo, and trip-related content are visible to other members of trips you create or join.

b) Service Providers

We may share data with third-party vendors (e.g., Firebase for notifications, cloud hosting providers) who assist in operating the App. These parties are bound by confidentiality agreements and may not use your data for other purposes.

c) Legal Requirements

We may disclose your information if required by law, regulation, or valid legal process (e.g., court order or subpoena).

d) Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data is subject to a different privacy policy.

We do not sell your personal data to third parties.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time through the App settings. We may retain certain information as required by law or for legitimate business purposes.

6. Data Security

We implement industry-standard technical and organizational measures to protect your information, including encrypted data transmission (TLS/HTTPS) and secure cloud infrastructure. However, no method of transmission over the Internet or electronic storage is 100% secure.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards are in place for such transfers in accordance with applicable law (including GDPR Standard Contractual Clauses where required).

8. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your personal data ("right to be forgotten").
Portability: Receive your data in a structured, machine-readable format.
Objection / Restriction: Object to or restrict certain processing of your data.
Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

9. Children's Privacy

The App is not directed to children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us immediately.

10. Third-Party Links and Services

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.

11. California Residents (CCPA)

California residents have the right to know what personal information is collected, used, shared, or sold, and to request deletion of personal data. We do not sell personal information.

12. European Residents (GDPR)

The legal bases for processing your data include: performance of a contract (providing the App), legitimate interests (improving the App, security), and consent (marketing communications). You may lodge a complaint with your local data protection authority.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via in-app notification or email. Your continued use of the App after the effective date constitutes acceptance of the updated policy.