Privacy Policy

Yuily helps you find places to play sports near you and talk with the people who play there. Yuily is run by Ayanle Ahmed Abdi, doing business as Yuily, a sole proprietorship.

Questions about this policy, or about your data, go to support@yuily.app.

Only what Yuily needs to work. When you create an account and use it, we keep:

• Your account: your display name and email address. Your password is stored only as a one-way hash by our sign-in provider. Nobody at Yuily can read it.
• Sign-in codes: each new sign-in needs a code we email you. We keep a scrambled (hashed) copy of the code until it’s used or expires, a count of wrong tries, a log of when codes were sent (deleted after a day), and which of your sign-ins have entered their code.
• Optional details: a phone number, if you add one, and your answers to the two sign-up questions (the sports you play and how often), if you answer them. These are visible only to you.
• A profile photo, if you add one. It’s shown to other people wherever your name appears.
• Group chats: the chats you start or join, the messages and reactions you send, requests to join private chats, requests to remove someone, and moderation records (who was muted, removed or banned, and by whom).
• Chat photos, names and descriptions: if you start a chat, you can give it a photo (a JPEG or PNG of up to 1 MB), a name and a description. The photo is stored in Supabase’s file storage. All three can be seen by anyone, like the list of chats at a place.
• Reports and blocks: reports you file (the reason, your note, and a copy of a reported message), and the people you block. Only Yuily can read reports. Your block list is visible only to you.
• Places: your rank at a place (member, staff or owner), places you save, and the name and map position of places where chats happen.
• Activity at a place: when you have a place’s group chats open, we note that you were there in the app, and when. Anyone signed in can see who is active. You can turn this off with “Show me as active”. It is app activity only, never your location.
• Settings: your notification choices.
• Membership: Yuily is free and takes no payments, so we hold no payment details.
• Agreement: when you created your account and which version of these terms you agreed to.
• Security records: a count of wrong passwords entered when deleting your account or changing your password, so repeated guessing can be paused.

To search, Yuily needs a zip code. You can type one, or let Yuily fill it in from your device’s location. If you allow location, your browser gives us your position once, we ask Mapbox which zip code it falls in, and we use that zip code. Your exact position is not saved on our servers.

The zip codes and sports you search for are sent to Mapbox to find places, and the results are kept in your browser for a day so repeat searches are faster. We don’t store your searches on our servers.

• To run your account, sign you in, and keep it secure.
• To find places near the zip code you give us.
• To show your name, photo, messages and rank to the people in your chats and at your places.
• To send you emails you need: sign-in codes and a one-time welcome email.
• To show the notifications you’ve chosen, inside Yuily.
• To keep chats safe: moderation, and acting on reports and abuse.

Where laws like the GDPR ask for a legal reason: we use your data to provide the service you signed up for (contract), to keep it safe and working (legitimate interests), and with your permission for device location (consent, which you can withdraw in your browser at any time).

• We don’t show ads.
• We don’t sell your personal information, or share it for advertising.
• We don’t use analytics, tracking pixels or session recording.
• We don’t offer sign-in with Google, Apple or Yahoo. Accounts use an email and password only.

These companies process data for us, only to provide their part of the service. They don’t get to use it for themselves.

• Supabase: our database, sign-in, file storage and live updates. Everything in “What we collect” is stored there.
• Mapbox: maps and place search. It receives the zip codes and sports you search for, and your position if you let Yuily fill in your zip code.
• Resend: sends our emails. It receives your email address and the email itself.
• Stripe: Not used while Yuily is free.
• Open-Meteo: weather forecasts for places. It receives only a place’s map position, nothing about you.
• Our web host: hosts the website. Like any web host, it handles your IP address and basic request logs.

We may also share information if the law requires it, or to protect someone’s safety.

• Anyone can see your display name and profile photo.
• People in a chat see its messages, its members, and who has read the latest message.
• Your rank at a place is visible to anyone signed in.
• A chat’s photo, name and description are visible to anyone.
• Your email address, phone number and sign-up answers are visible only to you.

Yuily uses no advertising or tracking cookies. To work, it keeps a few things in your browser’s own storage (local storage, which works like a cookie). All of it is essential:

• Your sign-in, so you stay signed in.
• That you’ve seen the cookie notice.
• Your recent search results, for up to a day.
• That you allowed location, so we don’t ask again.
• Which notifications you’ve dismissed, and when you last opened Yuily.
• Small layout and once-only flags (so a page doesn’t jump, and the welcome email isn’t asked for twice).
• Weather forecasts, until you close the tab.

You can clear all of this in your browser settings. You’ll be signed out.

We keep your data while you have an account. You can delete it at any time in Settings → Delete Account.

Chats are deleted automatically after 30 days with no new messages, with all their messages, members list and photo. Everyone in the chat gets a notice in Yuily 7 days before. A new message starts the 30 days again.

Deleting your account removes:

• Your account, email, password and sign-in records.
• Your profile, profile photo, phone number, sign-up answers and settings.
• Your memberships, ranks, saved places, reactions, requests, blocks, and your activity at places.

Some things stay, by design:

• Messages you sent stay in their chats, shown from “Deleted user”.
• Chats you started are handed to their longest-standing admin (or member, if there are no admins), with their name and photo. A chat with nobody else in it is deleted, with its photo.
• A place you owned goes back to unclaimed.
• Reports stay for safety review: ones you filed no longer show who filed them, and ones about you no longer link to your account.
• Copies may remain in our providers’ backups for a short time until they’re replaced.

Wherever you live, you can:

• See your data: most of it is in your settings. Ask us for a copy of everything at support@yuily.app.
• Correct it: change your name, photo, email, phone number and answers in Settings → My Account, or ask us.
• Delete it: in Settings → Delete Account, or ask us.
• Object or limit: turn off “Show me as active” and notifications, deny location, or ask us to stop a particular use.

If you live in California or another US state with a privacy law, you have the right to know what we collect, to get a copy, to correct and delete it, and not to be treated differently for using these rights. We don’t sell or share personal information, so there is nothing to opt out of.

If you are in the European Economic Area or the United Kingdom, you also have the right to move your data to another service, to withdraw consent, and to complain to your local data protection authority.

We’ll answer within the time the law gives us, usually 30 to 45 days, and may need to confirm the request comes from you.

Passwords and sign-in codes are stored only as hashes. Every new sign-in must enter a code sent to your email. Database rules decide who can read and change each piece of data, so the site can’t show you someone else’s private details. No system is perfect: if something goes wrong that affects you, we’ll tell you.

Our providers store and process data in the countries where they operate, which may not be the country you live in. By using Yuily, you understand your data may be handled outside your country.

Yuily is for people 16 and older. We don’t knowingly collect data from anyone younger. If we learn that someone under 16 has an account, we delete it. If you think that has happened, tell us at support@yuily.app.

If we change this policy, we’ll update the date at the top. If a change matters, we’ll tell you in Yuily or by email before it takes effect. The Terms of Service explain the rules for using Yuily.

Email support@yuily.app.