Yumo Yumo Privacy Notice

Last Updated: April 6, 2026

This legal document is provided in English only.

This Privacy Notice explains which personal data Yumo Yumo collects, why we process it, who we share it with, and how anonymized or aggregated insight products may be created from eligible datasets.

1. Data We Collect

Depending on how you use the Services, we may collect your email address, username, password hash, country, birth date, receipt data, wallet address, support messages, session logs, IP address, device or browser information, captcha verification results, and email verification or password reset records.

2. Why We Process Data

We process personal data to create and secure your account, verify your email, reset your password, provide receipt and spending analysis, support rewards features, respond to support requests, prevent abuse and fraud, keep the platform secure, and comply with legal obligations.

3. Anonymized and Aggregated Insight Products

We may transform eligible datasets into anonymized or aggregated outputs by removing or reducing data points that directly identify a person. These outputs may be used to generate statistics, benchmarks, market insights, analytics, reports, and product intelligence. Where those outputs no longer identify a specific person, they may be shared, licensed, commercialized, or offered to partners or customers.

4. Legal Basis

Where applicable, we process personal data because it is necessary to perform our contract with you, to protect legitimate interests such as security and fraud prevention, to comply with legal obligations, or because you have given consent for optional processing. Not every processing activity depends on consent.

5. Service Providers and Recipients

We may use infrastructure, hosting, database, email, security, analytics, and support vendors to operate the Services. In the current technical setup this may include providers such as Vercel, Neon, Resend, Cloudflare, Zoho, Google, and similar vendors. We may also disclose data to regulators, courts, or public authorities where legally required.

6. International Transfers

Because some of our vendors or servers may operate internationally, your data may be processed in countries outside your own jurisdiction. We aim to use appropriate technical and organizational safeguards for those transfers.

7. Retention

We keep personal data only for as long as needed for the purposes described in this Notice, for account security, for service continuity, or to meet legal, tax, audit, and dispute-resolution obligations.

8. Your Rights

Depending on where you live, you may have rights to request access to your data, ask for correction or deletion, object to certain processing, request restriction, ask for portability, or withdraw consent for optional processing where consent was used.

9. Security

We use reasonable technical and organizational measures to protect data, including access controls, hashed passwords, and operational security practices. No system can guarantee absolute security.

10. Age Restriction

The Services are intended for adults. You must be at least 18 years old, or the age of legal majority in your jurisdiction, to create an account.

11. Updates

We may update this Privacy Notice from time to time. Material updates may be announced through the website, app, or another appropriate digital channel.

12. Contact

For privacy or data protection questions, contact us at info@yumoyumo.com.

This Notice should be read together with the Terms & Conditions and the disclosures shown during signup.

Last Updated: April 6, 2026