Privacy Policy

Last updated: July 4, 2026

Yaylo helps families run missions, goals, rewards, and learning activities. Parents create and control family circles, and child profiles are managed by a parent or legal guardian.

Who this policy applies to

This policy applies to Yaylo websites, apps, and family-circle services. The legal entity and governing jurisdiction for Yaylo are currently being finalized and will be listed here before broad public launch.

Information we collect

• Parent account data, including email, password hash, account metadata, and session state.
• Child profile data entered by a parent, including nickname, age band, avatar, username, and PIN hash.
• Family activity data, such as missions, goals, rewards, lesson assignments, quiz progress, and star balances.
• Billing data from Stripe, including customer ID, subscription status, plan period dates, invoices, and related billing events.
• Security telemetry, including session token metadata, IP address, user agent, CSRF/session protection data, and security event logs.
• Waitlist and contact data you submit, including email and source details. For abuse prevention and diagnostics, we may also store request metadata such as IP and user agent.

How we use information

• Provide and maintain Yaylo services for families.
• Authenticate users, secure accounts, and prevent abuse.
• Send service and security communications (verification, password reset, invitations, and account notices).
• Process subscriptions, billing, vouchers, and plan entitlements.
• Measure product performance and reliability using analytics and error monitoring.
• Improve our features, accessibility, safety controls, and family experience.

Children's privacy

Yaylo is a parent-directed service. Parents or legal guardians create and manage child profiles, control household memberships, and choose what data to provide for children. Children are not required to provide an email address to use core kid features.

We align our approach with child privacy expectations under COPPA and similar child-data requirements (including GDPR-K style principles): parental control, data minimization, and age-appropriate defaults.

Third-party services and processors

• Stripe (payments, subscriptions, billing portal, invoices, and fraud controls).
• Sentry (application error and performance monitoring).
• PostHog (product analytics and usage insights).
• SMTP/email infrastructure used for transactional messages.
• Cloud/object storage providers for media such as avatar or lesson video uploads (when configured).
• Infrastructure providers used to host and run Yaylo services.

Cookies and analytics technologies

Yaylo uses essential cookies for login sessions and CSRF protection. We also use analytics and monitoring technologies, when enabled, to understand app usage and stability.

Depending on your environment, this may include products such as PostHog and Sentry. You can block non-essential technologies through browser controls, but some features may work differently.

How we share information

We do not sell personal information. We share information only as needed to provide the service, process billing, deliver emails, maintain security, comply with legal obligations, and enforce our terms.

Data retention

We retain data for as long as needed to operate Yaylo, protect users, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type.

Your rights and account deletion

You can access and update key account details in the app. You can also request deletion or delete your account from settings (password confirmation required for security-sensitive actions).

Deletion revokes active sessions and disables owned circles from active use. Certain records may be retained for billing, fraud prevention, audit logging, legal, and security purposes.

International transfers

Yaylo and its service providers may process data in countries outside your home jurisdiction. Where required, we apply appropriate safeguards for cross-border processing.

Policy updates

We may update this policy as Yaylo evolves. When changes are material, we will post an updated date and provide notice in-app or by email where required.

Contact

Privacy questions and data requests can be sent to support@yaylo.life.