Privacy Policy

The short version

• Your location is shared only with the people in your Yalla family.
• We never sell your location or personal data, and we don't use it for advertising.
• Location history is deleted after 7 days.
• You can pause sharing at any time, and delete your account and data from inside the app.

What we collect

• Account: your email address, the name you choose, and your avatar (a photo you upload, a character, initials or an emoji). If you sign in with Google or Apple, we receive your name and email from them.
• Location: while sharing is on, your phone's location, accuracy, speed and heading. In the phone app this continues while the app is closed. You control it with the "Share my location" switch.
• Battery level, so your family knows if your phone is about to die.
• Family activity: the family you join, places your family saves (like Home or School), arrivals at and departures from those places, moments you send (like "Drive safe"), your status, and the points and badges you earn.
• Phone details: your phone's name (for example "Sara's iPhone"), so you can see which phone is sharing, and your time zone, so times show correctly.
• Device token: if you allow notifications, an ID from Apple or Google used only to deliver Yalla notifications to your phone.
• Diagnostics: a small health report (app version, phone type, whether sharing is running, and the last 20 app events and errors). We use it only to fix problems.
• Feedback you send: if you use Send feedback, your note, a screenshot if you add one, and the same kind of details as diagnostics (app version, phone type, sharing status and recent app events). No location history is attached.
• Test signups on rihan.io: if you ask to test Yalla on our website, your name, the email you give us and your phone type. We use them only to invite you as a tester, which means giving that email to Apple (TestFlight) or Google (Google Play testing) so they can send you the invite.

Who can see it

Only members of your Yalla family. When you pause sharing, they see you as paused and can't see where you are, and nothing is recorded while you're paused. Nobody joins a family without a family admin's approval. When you ask to join, that family's admins see your name and email so they can decide. Someone who joins can see your past locations only from the day they joined. Everyone in the family gets a notification when someone joins, and a family admin can remove anyone.

Avatar photos are visible only to your family. Your diagnostics report and any feedback you send are visible only to you and to us.

We use these service providers to run Yalla: Supabase (database and storage, United States), OpenFreeMap / OpenStreetMap (map images; they see the map area being viewed, not who you are), and Apple and Google (sign-in and delivering notifications). They process data only to provide their service to us. If you tap Directions, your family member's location is opened in Google Maps.

How long we keep it

• Your latest location: until it's replaced by a newer one, or you delete your account.
• Location history: 7 days.
• Arrivals, departures and moments: 30 days.
• Requests to join a family: 30 days after they're answered.
• Points: kept for your score. After 7 days they no longer say which place they were for.
• Diagnostics: until replaced, and no longer than 30 days after your last use.
• Feedback and screenshots you send: 12 months.
• Test signups from rihan.io: 90 days.

When you delete your account, your profile, photo, location, history, moments, points, diagnostics, feedback and device tokens are permanently deleted.

Your choices

• Pause sharing: Settings → Location sharing.
• Change your name or avatar: Settings → Profile → Edit.
• Leave a family: Settings → Family → Leave.
• Delete your account: Settings → Profile → Delete account. This is immediate and permanent.
• Turn off location or notifications anytime in your phone's settings.

Children

For now, Yalla is for people 13 and older. Everyone confirms this when they start, and we keep only the time they confirmed it, never an age or birthday. If someone says they're under 13, we delete the new account right away. We don't knowingly collect data from children under 13. If you believe a child under 13 is using Yalla, contact us and we'll delete their data.

Security

Data is encrypted in transit. Access rules inside our database make sure only your family can read your location. This is enforced on the server, not just in the app.

Contact

Questions or requests: [email protected]