YeloPrivacy Policy
This policy explains how NEARCRAFT TECHNOLOGIES (OPC) PRIVATE LIMITED ("Nearcraft", "we", "us") collects, uses, shares and protects your personal data when you use the Yelo mobile app and yeloapp.in (together, "Yelo"). We are the Data Fiduciary for this data under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").
Short version: we collect only what we need to make and send your greeting cards. We do not sell your personal data. You can delete your account and all your data from inside the app at any time.
1. Data we collect
Data you give us
- Account details: your name and email address, and a password if you sign up with email. Passwords are stored only in hashed form. If you sign in with Google, we receive your name, email address and profile picture from Google.
- Profile: the display name and photos you add so they appear on your cards.
- Preferences: your language, state, notification times, whether you want promotional messages and, if you choose to set one, the political party whose content you want to see. Choosing a party is optional and is used only to show you relevant cards.
Data collected automatically
- Usage: which cards you have already been shown, so we can show you new ones, and a record of the notifications we send you.
- Device and technical data: a push-notification token, device identifier, platform (Android or iOS), app version, IP address and browser or device user agent, which we use to keep you signed in, secure your account and deliver notifications.
Device permissions
- Photos and camera: used only when you choose a photo or take one for your profile. We upload only the photos you pick.
- Storage / media library: used to save the cards you create to your device.
- Notifications: used to send you daily cards and festival reminders. You can turn them off in the app or in your phone settings.
When you share a card to WhatsApp or another app, the sharing happens on your device. We do not read your chats or your contacts.
2. How we use your data
- To create your account, sign you in and keep your account secure.
- To put your photo and name on cards and show you cards in your language and region.
- To send the notifications you have chosen to receive.
- To provide premium features you buy, and check your subscription status.
- To fix bugs, prevent abuse and improve the app.
- To send you offers and updates, but only if you have opted in. You can opt out at any time in Settings.
- To meet our legal obligations.
We process your data on the basis of the consent you give when you sign up and use the app, and for the legitimate uses permitted by the DPDP Act. You can withdraw consent at any time by deleting your account (see section 6).
3. Who we share it with
We do not sell or rent your personal data. We share it only with service providers that run Yelo on our behalf and are bound to protect it:
| Provider | Purpose |
|---|---|
| Cloudflare, Inc. | Hosting, database and storage for your account data and photos |
| Google LLC | Google Sign-In, Firebase Cloud Messaging for Android notifications, and Google Play Billing for purchases |
| Expo (650 Industries, Inc.) | Delivering push notifications |
| Apple Inc. | Push notifications and in-app purchases on iOS |
Payments are processed by Google Play or the Apple App Store. We never receive your card or bank details. We may also disclose data when required by law, a court order or a government authority, or to protect the rights and safety of our users and the public.
Some of these providers process data on servers outside India. Where they do, we rely on their contractual commitments to protect it, consistent with the DPDP Act.
4. How long we keep it
We keep your data while your account is active. When you delete your account we immediately delete your profile, photos, preferences, sessions, notification tokens and viewing history. Copies in encrypted backups are overwritten within 30 days. We may keep limited records longer where the law requires it, for example purchase records for tax purposes.
5. Security
Data is encrypted in transit (HTTPS) and stored with access controls. Passwords are hashed. No system is perfectly secure. If a breach affects your personal data, we will notify you and the Data Protection Board of India as the law requires.
6. Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we hold about you;
- Correct and update it (most of it can be edited in the app);
- Erase it: delete your account in Settings → Delete Account, or follow the steps at yeloapp.in/delete-account;
- Withdraw consent at any time;
- Nominate another person to exercise these rights if you die or become incapacitated;
- Raise a grievance with us and, if you are not satisfied, with the Data Protection Board of India.
To exercise any right, email support@yeloapp.in from the address linked to your account. We respond within 30 days.
7. Children
Yelo is meant for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.
8. Changes to this policy
If we make material changes, we will tell you in the app or by email before they take effect. The date at the top shows when this policy was last updated.
9. Contact and Grievance Officer
Grievance Officer: Saransh Bibiyan, Director
Email: support@yeloapp.in
Company: NEARCRAFT TECHNOLOGIES (OPC) PRIVATE LIMITED
We acknowledge grievances within 24 hours and aim to resolve them within 15 days.