Privacy Policy
The short version
Yorlo has no accounts, no ads, no tracking, and no third-party analytics. What you do in the app stays on your phone. Two things leave your device: an anonymous request for fresh content, and — only if you allow notifications — a registration that lets us send Yorlos to that device. On the website we store an email address if you join the waitlist, and we count page visits without cookies.
What stays on your device
Everything personal: the items you keep, your answers, what you’ve already seen, and your preferences (like haptics). This is stored only on your phone. We cannot see it. Deleting the app deletes it.
Fetching content
Yorlo periodically requests the latest content from our server (hosted on Supabase, in the United States). These requests carry no account, no name, and none of your in-app activity. Like all internet traffic, a request exposes your device’s IP address to the server; standard, short-lived infrastructure logs are kept briefly by our hosting provider to operate and protect the service and are not used to identify you, build profiles, or advertise. If you’re offline, Yorlo uses the content it already has.
Notifications
If you allow notifications, Yorlo sends a few Yorlos to your device each day — three or four, at times chosen for that device inside its waking hours, never overnight, each one different from the last. To do that, the app registers the device with our server and sends:
- a push token — an identifier Apple creates for this app on this device so that Apple can deliver notifications to it. It is not your name, phone number, or Apple ID, and it changes if you reinstall the app;
- your device’s time zone — so notifications arrive during your day and not at night;
- the app version and iOS version — so we only send Yorlos this version can open.
We use this information for one purpose: delivering notifications and choosing which Yorlo each device receives, so a device is not sent the same one twice within its cooldown. We also keep a record of each send — which token, which Yorlo, when, and whether Apple accepted it — so we can see that the service works and stop sending when it doesn’t. We do not know who a device belongs to, we do not link it to any other information, and we do not use it for advertising or tracking.
We keep the registration while the device stays registered. When Apple tells us a token is no longer valid — for example, because you deleted the app or turned notifications off — the registration is marked inactive and no more Yorlos are sent to it. Send records are kept as operating records of the service. To stop notifications at any time, turn them off for Yorlo in iOS Settings; deleting the app also ends them. If you open a notification, Yorlo records that it was opened — the same token, day and notification it was sent as — so we can tell that delivery is working. That record is used only to operate and measure our own notifications, never for advertising or tracking.
In App Store terms, this is “Device ID” and “Other Data” (time zone, app version, iOS version), used for App Functionality and associated with the device, not used for tracking. Our App Store privacy details say the same.
No account, no sign-up
There is nothing to sign in to. The app never asks for your name, email, phone number, or a password.
The website
Waitlist. If you enter your email address on the Yorlo website, we store it so we can send you one message: the announcement that Yorlo is available. That is the only thing we use it for. We don’t sell it, rent it, share it, or add you to any other mailing list. Along with your email address we store the date and time you signed up; how you arrived at the site (the referring page, any campaign tags in the link you followed, and the page you landed on); your browser’s user-agent string; and a one-way, irreversible hash of your IP address, used only to limit spam signups. We keep this until the announcement has been sent, or until you ask us to remove it — whichever comes first. To be removed at any time, email yorlohelp@yahoo.com.
Visit counting. The website records a page view when a page loads, and a click on the App Store button: the page address, the referring page, any campaign tags in the link, and a one-way hash that lets us count visitors without storing your IP address. There are no cookies, no advertising pixels, and no third-party analytics service; the count is kept by us, on Supabase.
The website is hosted by Vercel and its data is stored with Supabase. Both keep standard, short-lived infrastructure logs used only to operate and protect the service.
What we don’t do
- No advertising and no ad tracking.
- No third-party analytics or crash-reporting tools, in the app or on the website.
- No access to your location, contacts, camera, microphone, photos, or health data.
- No selling, sharing, or monetizing your information — including the email address you give us.
Sharing
When you tap Share, Yorlo hands the text to Apple’s standard iOS share sheet. What you share and where it goes is handled by iOS and the app you choose. Yorlo doesn’t record it.
Children
Yorlo is intended for a general audience and is not directed at children under 13. The app collects no personal information from anyone. We do not knowingly collect personal information from children through the website waitlist either; if you believe a child has given us an email address, contact us and we’ll delete it.
Changes
If a future version of Yorlo changes how data is handled, this policy and the App Store privacy details will be updated before that version ships.
Contact
Questions about privacy, or to have your waitlist entry deleted: yorlohelp@yahoo.com