Privacy Policy

Introduction

Welcome to YNM (Yes, No, Maybe). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile application or visit our website.

Data Controller

YNM (Yes, No, Maybe) is operated by Code Tone Studio, registered in the United Kingdom. We are the data controller responsible for your personal data under this Privacy Policy.

Information We Collect

Account Information

• Authentication Data: We use Firebase Authentication for account management. When you create an account:
  • Your account is identified by a randomly generated user ID (Firebase UID)
  • We do not collect direct identifiers such as your name, email address, or phone number
  • Your user ID is not directly linked to your real-world identity

Usage Data

• Card Responses: Your Yes/No/Maybe responses to relationship activity cards
• Partner Links: Information about your connection with your partner (link IDs)
• Premium Status: Anonymous subscription information if you purchase premium features

Device Information

• Push Notification Tokens: Firebase Cloud Messaging (FCM) tokens to send you notifications about matches and updates
• App Version: For support and compatibility purposes

Website Analytics and Conversion Tracking

When you visit our website, we collect anonymised data to understand how the site is used and to measure the effectiveness of our marketing. This may include:

• Pages visited and time spent on each page
• Referring website or search terms
• Device type, browser, and approximate location (country/region level)
• Whether a visit resulted in an app store click or download (conversion event)

We handle consent for this data collection based on your location:

• EU, UK, and Switzerland: Analytics and conversion tracking are not activated until you accept via the cookie consent banner shown on your first visit. You can withdraw consent at any time by clearing your browser's local storage or cookies.
• Other regions: Analytics and conversion tracking are active by default on the basis of our legitimate interests in understanding site performance and measuring marketing effectiveness. You can opt out at any time by clearing your browser's cookies and local storage.

How We Use Your Information

We use your information to:

• Provide core app functionality (storing and syncing card responses)
• Enable partner linking and matching features
• Send push notifications about new matches and app updates (with your permission)
• Provide premium features (full match lists, compatibility insights, discussion starters)
• Improve app performance and user experience
• Measure website performance and the effectiveness of our marketing (conversion tracking)
• Provide customer support

Legal Basis for Processing (GDPR)

We process your personal data based on:

• Performance of a contract: To provide core app functionality
• Legitimate interests: To operate, secure, and improve the app
• Consent: For push notifications and website analytics cookies, where required
• Legal obligations: Such as financial and compliance requirements

Data Sharing

With Your Partner

• When you link with a partner and both have premium access, we share matches where you both showed interest (neither said NO)
• Your individual responses remain private until both partners have premium access
• You can unlink from your partner at any time in the app, after which no further data is shared.

Third-Party Services

We use third-party service providers in the following categories. Each receives only the minimum data necessary for its function:

• Authentication and push notification services: Manages anonymous user accounts and delivers push notifications. Receives your device token and anonymous user ID; does not receive your name, email, or any direct identifier.
• Cloud infrastructure and hosting: Stores and processes app data on our behalf. Handles your card responses and partner link information under our instructions.
• Subscription management services: Validates app-store purchase receipts and manages your premium subscription status. When you purchase a subscription, your app store (Apple or Google) processes the payment; a receipt is forwarded to our subscription provider for validation. We only receive confirmation that you hold an active subscription — not your email address, payment details, or app-store account identity.
• Advertising and conversion measurement services: When you click through to an app store from our website, we may record that conversion event to measure the effectiveness of our marketing. This service may receive your IP address, browser information, and browser cookies to attribute app downloads to our advertising campaigns. For visitors in the EU, UK, and Switzerland this only occurs after you have given consent via the cookie banner.

Important: Your user ID remains private within YNM. We do not store your email, Apple ID, or Google account information.

We do not sell your personal information to third parties.

Data Storage and Security

• Your data is stored securely in Cloudflare's EU data centers
• We use industry-standard security measures to protect your information
• All communications between the app and our servers are encrypted
• Authentication tokens are securely managed by Firebase

Security Incidents

Our privacy-first architecture means we don't collect contact information. In the event of a security incident:

• We will assess the risk to users based on our privacy-first data model
• For high-risk incidents, we will notify users via in-app notifications and push notifications
• We will post incident details on ynm.me
• We will report to authorities as required by GDPR and applicable laws
• Our privacy-first design, which avoids collecting direct identifiers, reduces the potential impact of many types of data breaches

Your Rights

You have the right to:

• Access: View your account information in the app Settings
• Delete: Permanently delete your account and all associated data via Settings > Delete Account
  • This action deletes all your responses, links, and profile information
  • This action cannot be undone
• Data Portability: Request a copy of your data by contacting support@ynm.me with your Support ID
• Rectification: Update or correct your responses directly in the app
• Object to Processing: Contact us to object to specific data processing activities
• Withdraw Consent: Withdraw consent for push notifications at any time via your device settings, and for website analytics cookies at any time by clearing your browser's local storage

We respond to data rights requests within 30 days.

EU Users (GDPR)

If you are in the European Union, you have additional rights including the right to lodge a complaint with your local data protection supervisory authority.

Data Retention

• Active Accounts: We retain your data as long as your account is active
• Deleted Accounts: All data is immediately deleted from our active databases when you delete your account
• Backups: Backup systems purge deleted data according to our standard backup retention schedule, typically within 30-90 days
• Subscription history: Purchase receipt data held by our subscription management provider is retained per their financial compliance obligations

Push Notifications

You can control notification preferences and withdraw consent at any time through your device settings. We send notifications for:

• New matches with your partner (when you both show interest)
• Partner link acceptance
• Response changes

Children's Privacy

Our service is intended for adults. We do not knowingly collect information from individuals under 18. If you believe a child has provided us with personal information, please contact us immediately.

Cookies

Our website uses cookies for analytics and conversion measurement. Whether consent is required before these cookies are set depends on your location (see the Website Analytics and Conversion Tracking section above).

• Analytics cookies: Used to understand how visitors use the site.
• Conversion tracking cookies: Used to measure whether a website visit resulted in an app download, to help us understand marketing effectiveness.
• Consent preference: A record of your cookie choice is stored in your browser's local storage. This is not a tracking cookie.

You can opt out at any time by clearing your browser's cookies and local storage, or by using your browser's privacy controls. Doing so does not affect your ability to use the website.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Updating the "Last Updated" date

Where changes affect how we process data that requires your consent, we will seek fresh consent before the changes take effect.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: support@ynm.me
• Website: https://ynm.me

For support requests: Include your Support ID (found in Settings → Account) to help us assist you quickly.

Legal Compliance

This policy complies with:

• General Data Protection Regulation (GDPR) for EU users: Right to access, deletion, portability, and complaint
• California Consumer Privacy Act (CCPA/CPRA) for California users: Right to know, delete, and opt-out
• Apple App Store and Google Play Store privacy requirements

California Users (CCPA/CPRA)

California residents may exercise their rights under the CCPA/CPRA by contacting us at support@ynm.me. We do not sell or share personal information as defined by the CCPA.