Privacy Policy — YoHomie

Last updated: September 17, 2026

1. Data Controller

The data controller for your personal data is YoHomie (referred to as "we", "us", "YoHomie"), reachable at: kontakt@yohomie.app.

2. Age of users

YoHomie is not directed at children, and it does not contain adult-only content either. By creating an account you confirm that you meet the age requirements of the law that applies in your country — in Poland a person can use online services without a guardian’s consent from the age of 16, and the threshold differs elsewhere. We do not collect your date of birth and we do not verify your age. Access to an individual event may require age confirmation where the organiser or the law requires it.

3. What data we collect

While you use the YoHomie app we may collect:

• Account data: email address, name, profile picture, interests
• Activity data: events you join or create, groups you belong to
• Communication data: private messages and group chats
• Technical data: IP address, device type, operating system, push notification token
• Location data: your device's approximate location (the ACCESS_COARSE_LOCATION permission), if you allow it. It is used only to suggest your city and to sort events by "near me". We do not collect precise GPS location, we do not track your movement and we do not keep a location history. You can decline — the app works normally and you pick your city from a list.
• Calendar data: if you connect a Google or Apple calendar, we read your busy times so we do not suggest events when you are unavailable, and we can add an event at your request. Your personal meetings stay with your calendar provider — we do not copy them into our database.
• Homie AI conversations: the content of the conversation and, only with your explicit consent, a preference profile built from it.

4. Why we use your data

We process your data in order to:

• Provide the app's services (sign-in, events, groups, chat)
• Personalise recommendations through Homie AI
• Send push notifications (if you consented)
• Send system emails (for example password reset, address confirmation)
• Handle Premium payments
• Keep the service secure and prevent abuse
• Analyse and improve the app

5. Homie AI

The content of your conversations with Homie AI is sent to a language model provider (OVH AI Endpoints, France), which processes it on our behalf to generate a reply.

Learning about you is a separate, explicit consent and it is off by default. Until you turn it on, we do not build a preference profile from your conversations. You can withdraw the consent at any time and delete the profile that was built — in the "My data" screen.

6. Legal basis for processing

• Performance of a contract (Art. 6(1)(b) GDPR): processing necessary to provide the service
• Legitimate interest (Art. 6(1)(f) GDPR): security, abuse prevention, analytics
• Consent (Art. 6(1)(a) GDPR): push notifications, approximate location, calendar connection, Homie AI learning

7. Sharing data

We do not sell your data. We entrust it to the following parties, only to the extent needed to run the app:

• Other users: your profile (name, picture, interests), visible according to your privacy settings
• OVH (France / Poland): server infrastructure, database, image storage and the Homie AI language model
• Google (Ireland / USA): Google sign-in, push notifications (Firebase Cloud Messaging), Google Calendar, Google Play purchases
• Apple (Ireland / USA): calendar on Apple devices
• Stripe (Ireland / USA): Premium payments in the web version
• Resend (USA): delivery of system emails
• Public authorities: only where required by law

Some events in the app come from our ticketing partner KupBilecik.pl. That is public event data — we do not send them your personal data.

8. Data retention

We keep your data for as long as you use your account. After you delete your account, the data is removed within 30 days, except where the law requires us to keep it.

We take encrypted backups of the database and store them outside the application server. Backups are rotated and the oldest are removed — a deleted account may therefore remain in a backup until that backup expires.

9. Your rights

You have the right to:

• Access your data
• Rectify incorrect data
• Erase your data (the "right to be forgotten")
• Port your data
• Restrict processing
• Object to processing
• Withdraw consent at any time

You can delete your account and all your data yourself in the app: Profile → Settings → Delete account. To exercise the other rights, write to: kontakt@yohomie.app

10. Cookies and tracking technologies

The YoHomie mobile app does not use cookies and does no advertising tracking. Sign-in tokens are stored in the device's secure system storage (Keychain on iOS, Keystore on Android). Local app settings, such as your chosen language or theme, are stored on the device.

11. Security

We apply standard industry safeguards: TLS encryption, password hashing (bcrypt), short-lived access tokens with refresh token rotation and reuse detection. Sessions can be revoked by signing out or changing your password.

12. Changes to this policy

We will announce material changes in the app. The date of the last update is at the top of this document.

13. Contact

For privacy and data protection matters: kontakt@yohomie.app