YNBAA

Privacy Policy

Last updated: May 16, 2026

Introduction

YNBAA ("we", "our", "us") takes your privacy seriously. This policy explains what data we collect, how we use it, and your rights regarding your personal information.

Data we collect

  • Account data

    Email address, encrypted password, date of registration.

  • Profile data

    Age, city, AI-generated username, avatar (optional).

  • Private questionnaire

    Your answers to onboarding questions. This data is never shared publicly.

  • Echoes & interactions

    The echoes you post, reactions you give, and bonds you form.

  • Diary entries

    Private diary entries. Never shared without your explicit opt-in.

  • Usage data

    Anonymous analytics data to improve the platform (IP anonymised).

How we use your data

  • To provide and improve YNBAA services
  • To match you with compatible users using embeddings and AI
  • To enforce our community guidelines
  • To send you platform-related communications (no marketing without consent)

Data sharing

We never sell or share your personal data with third parties for marketing purposes. We only share data with service providers necessary to operate YNBAA (e.g., Supabase for database hosting), all of whom are bound by strict data processing agreements.

Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Withdraw consent for data processing
  • Lodge a complaint with a supervisory authority

To exercise any of these rights, you can delete your account from your profile settings, or contact us via the platform.

Security

We implement industry-standard security measures including encryption at rest and in transit, Row Level Security on our database, and regular security audits. We never store plain-text passwords.

Data retention

We retain your data for as long as your account is active. When you delete your account, your personal data is permanently deleted within 30 days. Anonymised aggregate data may be retained for analytical purposes.