Privacy Policy - YurUp

1. Introduction
Welcome to the YurUp mobile application ("App," "we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile application (available on the Apple App Store and Google Play Store) to manage shared households, family chores, expenses, and communication.

By downloading, installing, or using our App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use our App.

2. Information We Collect

2.1 Information You Provide

When you create an account, create a household, or join an existing group in our App, we collect:

• Account Registration Data: Your name, email address, date of birth, and display nickname.
• Authentication Data: Login credentials or social login tokens (e.g., Apple Sign-In, Google Auth).
• Financial Information: Bank account connectivity details (via Plaid) and payment methods (via Stripe) for settling shared expenses or distributing family allowances and rewards.

2.2 Household and Service Data

To provide the core functionality of YurUp across Housemates and Family modes, we collect:

• Group Information: Household names, members, and customized roles (e.g., Parent, Teen, Child, Housemate).
• Household Activity: Chores, routines, grocery lists, court cases, votes, and "Tidy" AI inputs.
• Financial Tracking: Expense records, receipt totals, split configurations, budget limits, and payment statuses.
• In-App Communications: Messages, chat threads, image attachments, reactions, and polls sent within your household.

2.3 Device Information

We automatically collect technical data to ensure the App functions securely:

• Device type, model, and operating system version.
• Push notification tokens (e.g., Firebase FCM tokens) for delivering alerts.
• Crash reports, performance metrics, and App version information.

2.4 Camera and Photo Access

With your explicit permission, the App may request camera and photo library access to:

• Scan and attach photos of physical receipts for expense splitting.
• Document chore completion or share images in household chats.

3. How We Use Your Information

Service Delivery

• Create and manage your household, whether for housemates or family groups.
• Track, assign, and verify chores, routines, and groceries.
• Calculate, split, and facilitate the settlement of shared household expenses.
• Deliver real-time chat messages and "Household Court" voting mechanics.
• Process reward point redemptions and allowance approvals for kids/teens.

Communications

• Send device push notifications regarding chat mentions, pending approvals, chore assignments, or unpaid expenses.
• Respond to your customer support inquiries.
• Provide service updates and account security alerts.

Business Operations

• Securely process payments and financial connections.
• Analyze App usage metrics to improve functionality, UI flows, and our "Tidy" AI feature.
• Ensure community safety and prevent fraudulent accounts.

4. Information Sharing

Within Our Platform

• Household Members: Information you share in the App (such as your name, avatar, chores, expenses, messages, and court case details) is visible to other members of your active household group.
• Parents/Caregivers: In Family mode, Parents or Caregivers have extended visibility over Child and Teen accounts, including spending requests and chore verifications.

Third-Party Service Providers

We securely share necessary data with trusted vendors to operate the App:

• Stripe: Secure payment processing, identity verification, and financial transfers.
• Plaid: Bank account linking and transaction sync for expense management.
• Firebase / Google Cloud: Database hosting, user authentication, secure cloud storage, and push notification delivery (APNs/FCM).

Legal Requirements

We may disclose information without notice when required by law, such as to:

• Comply with legal obligations, subpoenas, or court orders.
• Protect our rights, privacy, safety, or property.
• Investigate and prevent fraud, terms of service violations, or illegal activities.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data transmitted between the App and our servers is secured using TLS/SSL encryption.
• Authentication: Secure credential handling and token-based authentication (Firebase Auth).
• Access Controls: Strict Firebase Security Rules ensuring users can only read/write data for their authorized household groups.
• Financial Security: We do not store raw credit card numbers or bank login credentials; all sensitive financial routing is handled directly by PCI-compliant partners (Stripe and Plaid).

6. Data Retention

We retain your personal information:

• For as long as your account or household remains active.
• Financial transaction records may be retained longer as required for accounting, tax, or legal compliance.
• When an account is explicitly deleted via the in-app settings, your profile data, chat messages, and personal records are permanently purged from active databases.

7. Your Rights and Choices

Account Management

• You can access, edit, or update your profile information directly in the App's Settings modal.
• You can leave a household at any time (rendering your data inaccessible to that group, excluding historical financial/chat records).
• You can permanently request the deletion of your account and all associated data via the in-app "Delete Account" button.

Notification & Device Settings

• You can toggle push notification permissions on or off directly through your device's OS settings.
• You can revoke App access to your camera or photo library at any time via your device's privacy settings.

8. Children's Privacy (Family Mode)

YurUp features a "Family Mode" designed for parents and their children.

• Parental Consent: Child accounts can only be created, invited, or authorized by a verified Parent or Caregiver within the household.
• Data Collection: We only collect the minimum required data (such as a name/nickname and chore status) necessary for the Child to use the App under parent supervision.
• Parental Control: Parents have the authority to manage, restrict, or delete their Child's account and associated data at any time. We strictly comply with the Children's Online Privacy Protection Act (COPPA). If you believe a child has created an account without parental consent, please contact us immediately.

9. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to Know: You may request details about the specific pieces of personal information we have collected.
• Right to Delete: You may request the deletion of your personal information.
• Right to Opt-Out: We do not sell your personal information.
• Non-Discrimination: You will not receive discriminatory treatment for exercising these rights.

10. International Users

Your information may be transferred to and processed on servers located in the United States. By using our App, you consent to this transfer. We utilize appropriate safeguards, including standard contractual clauses, to protect your information during cross-border transfers.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect new features or legal requirements. When we make material changes:

• We will update the "Last Updated" date at the bottom of this policy.
• We may notify you via an in-app alert or email.
• Your continued use of the App after changes are posted constitutes acceptance.