Yupit Privacy Policy

• Your Yupits, your username and your profile photo are public. Everything else we keep about you is private.
• Your location stays on your phone. When you post, Yupit sends only the spot it matched.
• No ads. We don't sell your information or share it for advertising.
• You can delete your account in the app at any time, and it's deleted immediately.

Your account. When you sign in, we keep your email address and the date you joined. If you sign in with Apple or Google, we also keep the ID Apple or Google gives your account, so we can recognise you next time. We don't take your name or photo from Apple or Google. If you use Apple's Hide My Email, we receive Apple's relay address instead of your own. If you sign in with an email link, we send the link to your address through our email provider, Resend.

Your profile. Your username, your profile photo if you add one, your home spot and the sports you choose. Your username and photo are public. Your home spot and sports aren't shown to other people.

Your Yupits. The photos and videos you post, their captions, the spot each one is posted to, and when. Yupits are public. Before a photo or video leaves your phone, the app re-encodes it, which removes its location and other details stored in the file.

Stokes. When you stoke a Yupit, we record that you did, so it counts once. Other people see how many stokes a Yupit has, not who gave them.

Voice captions. If you speak a caption, the app sends the recording to our server, which turns it into text and sends the text back to your phone. On the way, the recording passes through our hosting providers, Vercel and Cloudflare, to our own transcription server. None of them keeps it, and we keep neither the recording nor the text: the caption is saved only if you post it.

Messages to us. If you use our support form, we receive your name, your email address, the topic you choose and your message. The form uses Cloudflare Turnstile to keep out spam (see below).

Logs. Our hosting provider keeps logs of requests to Yupit's servers for a short time. They include the IP address a request came from and, for some requests, an internal ID for your account.

Yupit asks for your approximate location, never your precise location. It uses it on your phone to open on the spot nearest you, and to match each Yupit you post to a spot. When you post a photo or video from your library that has a location stored in it, the app reads it on your phone to suggest the spot, then removes it before anything is sent. Before you post, you see the spot your Yupit will go to, and can choose another one nearby. Your location stays on your phone: when you post, Yupit sends only the spot you chose and the one it matched, or that you weren't near any spot. We keep that match privately with the Yupit, so Yupit's admins can file posts at the right spot. Other people never see it. You can keep location off and still use Yupit, choosing your spot yourself.

Who you follow and the Yupits you've hidden are stored on your phone and never sent to us. Deleting your account clears them, and the app's copy of your profile, from the phone you delete it on. Uninstalling Yupit removes them too.

Your Yupits (photos, videos, captions, spot, when they were posted and how many stokes they have), your username and your profile photo are public. They're served from public web addresses, so anyone with a link can see them, in the app or not, and others can copy or keep them. Please don't post anything you aren't comfortable making public.

To run Yupit: to sign you in, show your Yupits and profile, count stokes, file Yupits at spots, turn voice captions into text, answer your messages, and keep Yupit secure and free of abuse. We don't use it for advertising, and we don't build profiles of you for anyone else.

These providers help us run Yupit, and handle your information only to provide their service to us:

• Apple and Google, if you sign in with them.
• Resend, which sends sign-in emails and delivers support form messages to us. It keeps a log of the emails it delivered for a limited time.
• Neon, which hosts Yupit's account database.
• Cloudflare, which stores Yupit's records, photos and videos, and carries traffic to them and to our transcription server.
• Vercel, which hosts Yupit's servers and this website.
• Maps. On iPhone, the map is Apple Maps. On Android it's Google Maps: the Google Maps SDK in the app receives the map area you're viewing, and collects information about your device (such as its model and operating system version), crash reports, your IP address, a pseudonymous identifier for the SDK, and how you use the map. Google uses this to operate and improve its services, under the Google Privacy Policy. Directions open your phone's own maps app.
• Beach cams. A spot's camera, pictures or live video, loads straight from the camera's host, ipcamlive.com, which sees your IP address as any website you visit does.
• Cloudflare Turnstile, on our support form only, checks that a person rather than a bot is sending the message. It processes signals such as your IP address and browser details, only to detect bots, under Cloudflare's Turnstile privacy policy.

Photo credits, and the websites, phone numbers and social links of places on the map, open other apps and websites, under their own policies.

We may also disclose information when the law requires it, or to protect Yupit's users. If HullNext LLC or Yupit is sold or merged, your information would pass to the new owner under this policy.

Yupit shows no ads, and the app contains no advertising or analytics SDKs. We don't sell your personal information, or share it for advertising. This website sets no cookies of its own and runs no trackers.

In North America: the account database in the United States (Neon, on Amazon Web Services in Virginia), and records, photos and videos with Cloudflare R2 in eastern North America. If you use Yupit from outside the United States, your information is transferred there.

We keep your account, profile and Yupits until you delete them or your account. When you delete a Yupit or your account, it's removed from our storage straight away, except:

• photos and videos can still load from Cloudflare's cache, and on phones that already loaded them, for up to a day;
• our database provider keeps a short history of changes for recovery, currently 6 hours, so a deleted account's email address stays in that history for up to that long;
• request logs are kept for up to 30 days;
• messages you send through the support form stay in our email as long as we need them, including as the record of a deletion request;
• we keep a record that your account's sign-ins are no longer valid, which holds your account's internal ID and nothing else.

You can delete your Yupit account at any time:

• In the app: open your profile (your photo, top right), tap Delete account, and confirm twice. It's deleted immediately.
• Without the app: send a request through our support page, choosing Delete my account, from the email address on your account. We'll reply to that address to confirm it's you, and delete the account within 30 days of your reply.

Deleting your account removes your account (your email address and your Apple or Google sign-in), your profile and profile photo, all your Yupits with their photos, videos and captions, the stokes you've given and received, and any unused sign-in links. It can't be undone. A few copies can last a short time afterwards, as described under How long we keep it.

In the app you can edit your profile, remove your photo and delete any Yupit. To ask for a copy of your information, or to have something corrected, use our support page. We'll answer within 30 days. Depending on where you live, you may have other rights over your information; ask us and we'll help.

Yupit isn't for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has an account, tell us through our support page and we'll delete it.

If we change this policy, we'll post the new version here with a new effective date.

For questions about this policy or your information, use our support page. HullNext LLC, Hull, Massachusetts, USA.