Privacy Policy

Introduction

Welcome to YNM (Yes, No, Maybe). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile application.

Data Controller

YNM (Yes, No, Maybe) is operated by Code Tone Studio, registered in the United Kingdom. We are the data controller responsible for your personal data under this Privacy Policy.

Information We Collect

Account Information

• Authentication Data: We use Firebase Authentication for account management. When you create an account:
  • Your account is identified by a randomly generated user ID (Firebase UID)
  • We do not collect direct identifiers such as your name, email address, or phone number
  • Your user ID is not directly linked to your real-world identity

Usage Data

• Card Responses: Your Yes/No/Maybe responses to relationship activity cards
• Partner Links: Information about your connection with your partner (link IDs)
• Premium Status: Anonymous subscription information if you purchase premium features

Device Information

• Push Notification Tokens: Firebase Cloud Messaging (FCM) tokens to send you notifications about matches and updates
• App Version: For support and compatibility purposes

How We Use Your Information

We use your information to:

• Provide core app functionality (storing and syncing card responses)
• Enable partner linking and matching features
• Send push notifications about new matches and app updates (with your permission)
• Provide premium features (full match lists, compatibility insights, discussion starters)
• Improve app performance and user experience
• Provide customer support

Legal Basis for Processing (GDPR)

We process your personal data based on:

• Performance of a contract: To provide core app functionality
• Legitimate interests: To operate, secure, and improve the app
• Consent: For push notifications, where required
• Legal obligations: Such as financial and compliance requirements

Data Sharing

With Your Partner

• When you link with a partner and both have premium access, we share matches where you both showed interest (neither said NO)
• Your individual responses remain private until both partners have premium access
• You can unlink from your partner at any time in the app, after which no further data is shared.

Third-Party Services

We use the following third-party services:

• Firebase (Google): Authentication, Cloud Messaging (push notifications)
• Cloudflare: Backend infrastructure and data storage
• RevenueCat: Subscription and payment processing

RevenueCat Data Collection

When you purchase a premium subscription:

• Your app store (Apple/Google) processes the payment using your store account
• Your app store sends a payment receipt to RevenueCat for validation
• RevenueCat links the receipt to your YNM user ID for subscription management
• We only see that you have an active subscription (not your email or payment details)
• Only RevenueCat can link your subscription to your app store account
• RevenueCat's privacy policy: https://www.revenuecat.com/privacy

Important: Your user ID remains private within YNM. We do not store your email, Apple ID, or Google account information.

We do not sell your personal information to third parties.

Data Storage and Security

• Your data is stored securely in Cloudflare's EU data centers
• We use industry-standard security measures to protect your information
• All communications between the app and our servers are encrypted
• Authentication tokens are securely managed by Firebase

Security Incidents

Our privacy-first architecture means we don't collect contact information. In the event of a security incident:

• We will assess the risk to users based on our privacy-first data model
• For high-risk incidents, we will notify users via in-app notifications and push notifications
• We will post incident details on ynm.me
• We will report to authorities as required by GDPR and applicable laws
• Our privacy-first design, which avoids collecting direct identifiers, reduces the potential impact of many types of data breaches

Your Rights

You have the right to:

• Access: View your account information in the app Settings
• Delete: Permanently delete your account and all associated data via Settings > Delete Account
  • This action deletes all your responses, links, and profile information
  • This action cannot be undone
• Data Portability: Request a copy of your data by contacting support@ynm.me with your Support ID
• Rectification: Update or correct your responses directly in the app
• Object to Processing: Contact us to object to specific data processing activities
• Withdraw Consent: Withdraw consent for push notifications at any time via your device settings

We respond to data rights requests within 30 days.

EU Users (GDPR)

If you are in the European Union, you have additional rights including the right to lodge a complaint with your local data protection supervisory authority.

Data Retention

• Active Accounts: We retain your data as long as your account is active
• Deleted Accounts: All data is immediately deleted from our active databases when you delete your account
• Backups: Backup systems purge deleted data according to our standard backup retention schedule, typically within 30-90 days
• RevenueCat: Subscription history is retained by RevenueCat per their retention policy for financial compliance

Push Notifications

You can control notification preferences and withdraw consent at any time through your device settings. We send notifications for:

• New matches with your partner (when you both show interest)
• Partner link acceptance
• Response changes

Children's Privacy

Our service is intended for adults. We do not knowingly collect information from individuals under 18. If you believe a child has provided us with personal information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Updating the "Last Updated" date

Continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: support@ynm.me
• Website: https://ynm.me

For support requests: Include your Support ID (found in Settings → Account) to help us assist you quickly.

Legal Compliance

This policy complies with:

• General Data Protection Regulation (GDPR) for EU users: Right to access, deletion, portability, and complaint
• California Consumer Privacy Act (CCPA/CPRA) for California users: Right to know, delete, and opt-out
• Apple App Store and Google Play Store privacy requirements

California Users (CCPA/CPRA)

California residents may exercise their rights under the CCPA/CPRA by contacting us at support@ynm.me. We do not sell or share personal information as defined by the CCPA.