Privacy Policy
YAPPP · Last updated 17 September 2026
YAPPP is a map of real-world activities near you. This policy explains exactly what we store, why, who else sees it, and how to get rid of it. It describes what the software actually does — not what we might do later.
Who we are
YAPPP is operated from Bengaluru, Karnataka, India, and is the data fiduciary
for the information described here. Contact: chiranjeev@yappp.in.
What we collect
When you sign in
You sign in with Google or with Apple. Either way we receive an identity token, and from it we keep three things: an opaque account identifier from that provider, your email address, and your first name.
We deliberately discard the profile picture Google offers. We never receive your password, your contacts, or anything else in your Google or Apple account.
Apple asks whether to share your real email address or to
hide it. If you hide it, we only ever see the
@privaterelay.appleid.com address Apple gives us, and mail we
send there reaches you without us knowing where. Your account is identified
by the opaque identifier, never by the email, so turning relay off later
changes the address without affecting your account.
Apple hands over your name only on the very first sign-in and never again. We pass it through as a suggestion on the next screen; nothing depends on it, because we ask you for a first name during setup anyway.
Your email address is never shown to other users. It exists so we can find your account if you write to us.
What you create
| Data | Why | Who can see it |
|---|---|---|
| First name | Hosts decide whether to admit you | Anyone who can see an activity you host or ask to join |
| Profile photo | How a host recognises you at a meeting point | Same as above. Required — the app will not let you finish setup without one |
| Your interests | Ranks the map toward things you care about | A host sees which interests you share with their activity, and which others you have |
| Activities you post | They are the product | Anyone using the map nearby |
| A note with a join request | Tells a host why you want to come | Only that host, and only while the request is pending — it is deleted the moment they accept, decline, or you withdraw |
| Notes on an activity | Practical detail for people deciding | Anyone who can see the activity, including people who have not joined |
| Messages in an activity thread | Coordinating a meetup | Only people admitted to that activity, and the host |
| Blocks and reports | Safety | Only us. The person you block or report is never told |
Location
We never store or publish your live location. The app does not track you. Two kinds of location exist:
- Where an activity happens. You type it when you post. For activities that require the host's approval, the map shows a point offset by roughly 150 metres until you are admitted — the exact location is released only to people the host has let in. For open activities, which anyone can join, the exact location is visible to everyone who can see the pin. The app tells hosts this when they post.
-
A home area, used to decide which city's map you open on
and to measure walking distance. It is never shown to anyone.
Setup asks for your device's location once, to work out which city you are in. Your position is rounded to about 500 metres on your phone before anything reads it, and the reading itself is then discarded. When we recognise your city, what we store is that city's central neighbourhood — not where you were standing. Only if you move the pin by hand does a point you chose leave your phone, and then only rounded.
You can decline the permission and pick your city or place the pin yourself. A home area is required to finish setup, because a map centred on the wrong city is worse than no map. There is no screen to change it afterwards yet — write to us and we will change or remove it, and deleting your account erases it.
When you search for a place while posting, the text you type is sent to Photon, an open-source geocoding service, to turn it into coordinates. Your name and account are not sent with it.
Technical data
A record of each sign-in, so you can be signed out of a device. We store a one-way hash of your session token, never the token itself. If you allow notifications, we store a push token for that device so a message can reach it. Our servers keep short-lived request logs containing IP addresses, which is ordinary web-server operation and not linked to your profile.
What we do not do
- No advertising, and no advertising identifiers.
- No analytics or tracking SDKs.
- We do not sell or rent your data to anyone, for any purpose.
- No profile visible to the public internet — there is no web profile page.
Who else processes your data
| Service | What reaches it |
|---|---|
| Google (Sign-In) | Authenticates you. Google learns you use YAPPP |
| Firebase Cloud Messaging | Delivers notifications to your device |
| Amazon Web Services (Mumbai, India) | Runs the servers and the database. Your data is stored in India |
| Cloudflare R2 | Serves map images. Carries no personal data |
| Photon (komoot) | Place searches you type while posting |
How long we keep it
Your account and what you have posted stay until you delete the account. Expired activities remain in the database as a record for the people who attended. Session records expire on their own.
Deleting your account
In the app: You → Delete account. Or use the web deletion page if you no longer have the app installed.
What deletion does, precisely:
- Your name, email, phone number, photo and home area are erased.
- Your photo file is deleted outright.
- Your interests, devices, notification history, and the blocks you made are deleted.
- Upcoming activities you were hosting are cancelled, and the people who joined are told.
- Seats you held are released, and pending requests withdrawn.
Three things deliberately survive, and you should know why:
- An opaque account identifier is kept — the one Google or Apple gave us. Nothing about you can be read from it. It exists so that signing in again cannot silently resurrect a deleted account — without it, tapping the sign-in button would quietly create a new one, which is the opposite of what you asked for.
- If you signed in with Apple, we tell Apple. Deleting your account revokes the permission you gave Apple to share your details with YAPPP, so the app stops appearing under Settings → your name → Sign in with Apple. We do this after the deletion has already happened, so that Apple being unreachable can never leave you with an account you asked to remove.
- Messages and notes you wrote stay, attributed to "Someone who left". A conversation with one side removed is unreadable for the people still going.
- Safety reports stay — both ones you filed and ones about you. A safety record that its subject can erase is not a record.
Your rights
You can see and correct your name, photo and interests in the app. Your home
area has no edit screen yet, so write to us to change it. You can ask us for a
copy of your data, or ask us to erase it, by writing to
chiranjeev@yappp.in.
Under India's Digital Personal Data Protection Act 2023 you may also nominate
someone to exercise these rights on your behalf, and you may complain to the
Data Protection Board of India.
Age
YAPPP arranges meetings between people in person. You must be 18 or older to
use it. We do not knowingly keep data about anyone younger; if you believe we
have, write to chiranjeev@yappp.in and we will delete it.
Security
Traffic is encrypted in transit. The database is not reachable from the public internet. Session tokens are stored hashed, and on your device in the system keychain rather than in ordinary app storage. No system is perfect, and we will tell you promptly if something happens that affects you.
Changes
If this policy changes in a way that affects what we collect or who sees it, we will say so in the app before the change takes effect.