Privacy Policy

Effective Date: July 5, 2025

Thank you for using Y (the “App”). Your privacy is important to us. This Privacy Policy explains how Y (“we,” “our,” or “us”) collects, uses, discloses, and safeguards your information when you use the App, our website, or any related services (collectively, the “Services”).

1. Information We Collect

A. Information you provide

  • Email address - Provided when you create an account or contact us. Used to create, authenticate, and manage your account and respond to inquiries.
  • Profile picture - Optional image you upload to customize your profile. Displayed to other users.
  • Password (hashed & salted) - If you sign up with email, we store only a secure cryptographic hash. Used solely for authentication; never stored in plaintext.

B. Information collected automatically

  • Usage metrics - Limited analytics about how you navigate and interact with the App (e.g., screens viewed, tap events, session duration, device type, OS version, crash logs). No advertising identifiers are collected. Used to personalize the Recommended page and understand aggregate usage to improve and secure the Services.

We do not collect your name, physical address, phone number, contacts, precise location, payment information, or the plaintext version of your password. your name, physical address, phone number, contacts, precise location, payment information, or the plaintext version of your password. your name, physical address, phone number, contacts, precise location, payment information, or the plaintext version of your password.

2. How We Use Your Information

We use the information we collect to:

  1. Provide and maintain the Services - allow you to log in, deliver core features, and operate the App.
  2. Personalize content - suggest content on the Recommended page based on in-app activity.
  3. Display user-generated content - show your profile picture and username to other users as part of the social experience.
  4. Improve and develop new features - analyze aggregated usage and performance metrics.
  5. Maintain safety and security - detect, prevent, and mitigate fraud, abuse, and technical issues. Password hashes are compared (never decrypted) solely for authentication.
  6. Comply with legal obligations - meet any applicable laws or enforceable governmental requests.

We do not use your information for advertising, marketing, or selling purposes.

3. Legal Bases for Processing (EEA/UK Users)

If you are in the European Economic Area (EEA) or the United Kingdom, our processing of your personal information is based on:

  • Performance of a contract - to provide the Services you request.
  • Legitimate interests - to personalize and secure the App in ways that do not override your rights.
  • Consent - where required, such as when you ask us to send you optional emails.

4. Sharing and Disclosure

We do not sell or rent your personal information.

We may share limited information only:

  • Service providers. We use trusted third-party vendors to host our servers, store data, and provide analytics. They may access information solely to perform these tasks on our behalf and are bound by confidentiality agreements.
  • Legal or safety requirements. We may disclose information if required by law or to protect users, the public, or Y.
  • Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as permitted by law.

5. Data Retention

  • Account data (email address & password hash). Retained while your account is active and for up to 30 days after deletion, then permanently erased from backups.
  • Profile pictures. Stored until you replace or delete them, or for up to 30 days after account deletion.
  • Usage metrics. Aggregated and anonymized metrics may be retained for up to 24 months for analytics and service improvement.

6. Your Rights and Choices

Depending on your location, you may have rights to:

Right What it Means How to Exercise
Access Obtain a copy of the personal information we hold about you. Email us at privacy@ythenothingapp.com
Correction Update incomplete or inaccurate information. In-app settings or email us
Deletion Ask us to delete your account and associated data. In-app “Delete Account” or email us
Opt-out of personalization Turn off usage-based recommendations. App Settings → Privacy
California “Shine the Light” Request certain disclosures about information we share for marketing (we share none). Email us

We will respond within 30 days as required by law.

7. Security

We employ administrative, technical, and physical safeguards designed to protect your information, including:

  • Encryption in transit (HTTPS/TLS) and at rest.
  • Passwords are stored using a modern, industry-standard hashing algorithm with unique salt values.
  • Least-privilege access controls for employees.
  • Regular security audits and penetration tests.

No system is 100% secure; we cannot guarantee absolute security.

8. International Transfers

Our servers are located in the United States. If you access the Services from outside the U.S., you consent to the transfer, storage, and processing of your information in the U.S. and other jurisdictions where our service providers operate.

9. Children's Privacy

The Services are not directed to children under 13 years of age, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us; we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If material changes are made, we will notify you by email or in-app notice at least 30 days before the changes take effect. The revised policy will be effective once posted.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: privacy@ythenothingapp.com
Postal Mail: Privacy Officer, Y, 123 Main St, Anytown, NY 10001, USA

Last updated: July 5, 2025