Last updated: January 2025

Privacy Policy

Yella (“we”, “our”, or “us”) operates the website and services at yella.app and related domains. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services, including our group savings and credit application (“Service”). Please read this policy carefully.

1. Information we collect

We may collect information that you provide directly to us, including:

Account information: name, email address, phone number (optional), profile photo, and a chosen username (“Yella tag”).
Authentication data: when you sign in with email and password or with Google Sign-In, we receive your email and, for Google Sign-In, basic profile information (name, profile picture) as provided by Google.
Financial and group data: information related to savings groups you join, contributions, payouts, and transactions within the Service.
Communications: when you contact us (e.g. via our contact form or email), we collect the content of your message and contact details.
Device and usage data: we may collect information about how you access and use our Service (e.g. device type, IP address, browser type, and general usage patterns) for security, analytics, and improving our Service.

2. How we use your information

We use the information we collect to:

Provide, operate, maintain, and improve the Service.
Create and manage your account and authenticate you (including via Google Sign-In where you choose that option).
Process transactions, contributions, and payouts within your savings groups.
Send you service-related communications (e.g. account notifications, security alerts).
Respond to your inquiries and support requests.
Comply with legal obligations and protect our rights and the security of our users.
Analyze usage to improve our Service and user experience.

3. Google Sign-In and third-party services

If you choose to sign in with Google, we use Google’s OAuth services. Google provides us with your email address and, depending on your Google account settings, your name and profile picture. Our use of information received from Google is governed by this Privacy Policy and by Google’s Privacy Policy. We do not use or share Google data for advertising purposes. We use it only to create or link your account and to provide the Service.

We may use other third-party services (e.g. hosting, analytics) that process data on our behalf. These providers are bound by contractual obligations to protect your data and use it only as we instruct.

4. Data sharing and disclosure

We do not sell your personal information. We may share your information only:

With other users within your savings groups, to the extent necessary for the group to function (e.g. names, contributions, rotation order).
With service providers who assist us in operating the Service, under strict confidentiality and data protection terms.
When required by law, court order, or to protect our or others’ rights, safety, or property.
In connection with a merger, sale, or other transfer of our business (with notice and continued protection of your data as set out in this policy).

5. Data retention and security

We retain your information for as long as your account is active or as needed to provide the Service, comply with law, or resolve disputes. We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, or loss.

6. Your rights and choices

Depending on where you live, you may have the right to:

Access and receive a copy of the personal data we hold about you.
Correct or update your data (you can do much of this in your account settings).
Request deletion of your data, subject to legal and operational requirements.
Object to or restrict certain processing.
Withdraw consent where we rely on it (e.g. you can stop using Google Sign-In and use email/password only).

To exercise these rights or ask questions about your data, contact us at hi@yella.app or via our contact form. Please include a clear purpose in the subject line (e.g. Privacy request, Data access).

7. Children

Our Service is not directed to individuals under the age of 15. We do not knowingly collect personal information from children under 15. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete it.

8. International transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place so that your data remains protected in line with this policy.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the “Last updated” date. Continued use of the Service after changes constitutes acceptance of the revised policy. For material changes, we may provide additional notice (e.g. by email or in-app).

10. Contact us

For privacy-related questions or requests, contact us at hi@yella.app or through our contact form at yella.app. Please include a clear purpose in the subject line.