This policy explains what personal data Yedede (“we”, “us”) collects when you use our website and mobile apps, why we collect it, who else processes it on our behalf, and what you can do about it. The data controller is [Yedede — registered entity name].
Information we collect
Information you give us
- Account details. Your email address, username, and date of birth. The date of birth is used once, to check the minimum age below, and is not shown on your profile.
- Profile details. Anything you choose to add — display name, bio, pronouns, website, and avatar image. All of these are optional and all are publicly visible.
- Content you post. Videos, Story Cards, titles, captions, the date of the experience, comments, reactions, bucket-list entries, and challenge or chain participation.
- Acceptance record. The timestamp at which you accepted these terms, which we keep as proof of consent.
Information collected automatically
- Approximate location, only if you add it. When you attach a location to a post we deliberately round the coordinates to roughly 1.1 km before storing them. We never keep your precise position, so posts can be grouped by neighbourhood but not traced to an address.
- View activity. Which posts you watch, used to rank your feed and count views. These records are automatically deleted after 30 days.
- Activity signals. Last-active time, streaks, and an engagement score derived from reactions, comments and shares on your posts.
- Device tokens. If you enable push notifications, an anonymous token identifying your device so we can deliver them.
- Technical data. IP address, browser or device type, and error diagnostics, recorded by the service providers listed below. We use IP addresses for rate limiting and abuse prevention, not profiling.
How we use your data
- To create and operate your account, and to authenticate you.
- To host, transcode and deliver the content you publish.
- To build your feeds and show you relevant posts.
- To send notifications you have opted into.
- To detect and remove content that breaks our rules — see below.
- To prevent abuse, spam and fraud, and to keep the service reliable.
- To comply with legal obligations.
Automated content moderation
Text you submit (titles, captions, Story Card text) and the thumbnail of each video are checked automatically for prohibited content before or shortly after publication. This check is carried out by a third-party classification service and involves no human review unless content is flagged or someone reports it.
If content is flagged it is placed under review and may be hidden. You can contest a decision by contacting us. Repeated or severe violations can lead to suspension, as described in the Terms of Service.
AI features
If you ask Yedede to generate music for a Story Card, the text of that Story Card is sent to our AI providers so they can analyse its mood and generate matching music and lyrics. Only the Story Card text is sent — not your name, email, or any other account data. If you do not use the music feature, no content is sent to these providers for this purpose.
Who else processes your data
We do not sell your personal data. We share it only with providers who process it on our instructions in order to run the service:
- Supabase — database hosting and authentication.
- Cloudflare — video upload, transcoding, delivery, and image and audio storage.
- Upstash — caching and rate limiting.
- Firebase Cloud Messaging — delivery of push notifications.
- Sentry — error diagnostics (optional cookies only).
- PostHog — product analytics (optional cookies only).
- OpenAI — automated content moderation.
- Anthropic and FAL.AI — Story Card analysis and AI music generation, only when you use that feature.
We may also disclose data where we are legally required to, or where it is necessary to protect someone’s safety.
International transfers
The providers above operate infrastructure outside your country, including in the United States and the European Union. Your data is transferred and stored there in order to provide the service.
Cookies and similar technologies
We use two categories, and you choose between them in the banner shown on your first visit:
- Essential. Required to keep you signed in and to secure the service. These cannot be switched off, because the site does not work without them.
- Optional. Product analytics and error replay. These are off unless you accept them, and you can change your mind at any time.
How long we keep it
- Account and content — until you delete them or close your account.
- View activity — 30 days, then deleted automatically.
- Moderation records — retained after a decision so that enforcement and appeals have an audit trail.
- Backups — deleted data may persist in encrypted backups for a short period before being overwritten.
Your rights
You can exercise these yourself from inside the app:
- Access and export. Download a machine-readable copy of your account, posts, comments and reactions from your settings.
- Correction. Edit your profile and your posts at any time.
- Deletion. Delete your account from your settings. This removes your account, your posts and your uploaded videos, and requires you to confirm your identity first so it cannot be triggered by someone else. It cannot be undone.
- Blocking. Block another account to stop interaction in both directions.
- Objection and restriction. Depending on where you live, you may have the right to object to or restrict certain processing. Contact us and we will respond.
If you are in the UK, EU or another region with equivalent law, you also have the right to complain to your local data protection authority.
Minimum age
You must be at least 15 years old to use Yedede. We check this at signup from the date of birth you provide. If we learn that an account belongs to someone younger, we will remove it. If you believe a child is using the service, contact us.
Security
We use encrypted connections, scoped database access rules, hashed credentials and rate limiting to protect your data. No system is perfectly secure, but if a breach affects you we will notify you where the law requires it. Security issues can be reported to security@yedede.com.
Changes to this policy
We will update the date at the top when this policy changes, and give notice in the app before any change that materially reduces your rights.
Contact
Questions about this policy or your data: privacy@yedede.com.