Privacy policy

1. Information We Collect

We collect information you provide directly, including name, email, phone number, wedding details, and business information for vendors. We also record how the service is used, such as Photo Box and Film Box views and downloads, to run and secure it. We do not use third-party analytics or advertising cookies, and we do not track you across other companies' apps or websites.

In the Yoso Yes mobile app, and only for the features you use, we also collect:

• Photos and videos you choose to upload, picked with your device's photo picker, and photos you take with the camera for business verification or face search. The app never reads your photo library on its own.
• Contacts, only when you import guests: the app reads names and email addresses on your device, and uploads only the contacts you choose to your guest list.
• Messages, reviews, reports and blocks you send, write or make, so they reach the people involved and so we can act on reports.
• A push notification token for your device, so we can send the notifications you turn on. You can turn them off in the app's settings.
• Crash and performance diagnostics (the error, the screen and the device model), so we can fix problems. They are not used to identify you or for advertising.

2. How We Use Your Information

We use your information to provide our wedding planning platform services, process payments, send notifications, improve our services, and comply with legal obligations.

3. Data Sharing

We share your information only with vendors you engage with, the service providers that run Yoso Yes for us, and as required by law. We never sell your personal data. Our service providers are: Stripe (payments), Amazon Web Services (hosting, file storage, email delivery and face search), Twilio (text-message sign-in codes), Sentry (crash reports), Apple and Google (push notifications) and Expo (app updates). Each processes data only to provide its service to us, under terms that protect it at least as this policy does.

4. PIPEDA Compliance (Canada)

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access, correct, and delete your personal information. We obtain meaningful consent before collecting, using, or disclosing personal information.

5. CCPA Rights (California)

California residents have the right to know what personal information is collected, request deletion, and opt-out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@yosoyes.com.

6. Data Retention

You can delete your account in the app (Privacy & security, Delete my account) or by following the steps at yosoyes.com/account-deletion. We retain your data for as long as your account is active. After account deletion, data is anonymized within 30 days. Face recognition data is deleted within 7 days of consent revocation.

7. Face Search

A photographer can let the guests of a Photo Box look for the photos they appear in. It is off unless the photographer turns it on for that Photo Box, and it asks you first: nothing is matched until you agree to the text shown, which we record with the date and its version.

What is processed: the selfie you take or choose, compared once with the faces the Photo Box's photos contain. Why: to show you the photos you are in. Retention: the selfie is analysed in memory and deleted straight after the match; it is never stored, and no face template is kept for you. We keep only the record that you agreed. Withdrawing: choose “Stop using my face” in the Photo Box at any time, or write to privacy@yosoyes.com. Where the law requires explicit consent for biometric information (Quebec's Law 25, the GDPR, Illinois' BIPA), face search is used only with it.

8. Cookies

We use only essential cookies and similar browser storage: to keep you signed in, to remember the language you chose, and to remember that you have seen our cookie notice. We do not use analytics, advertising or tracking cookies, so there is nothing optional to switch on or off. You can read the cookie notice again at any time from Cookie settings, here or in the site footer. If we ever add optional cookies, we will ask for your consent before setting them.

9. Security

We implement industry-standard security measures including encryption in transit (TLS), secure password hashing (bcrypt), rate limiting, and regular security audits.

10. Contact

For privacy inquiries: privacy@yosoyes.com