Privacy Policy

Introduction

YOIBI ("we", "us", "our") is a social media platform for tweets, videos, meet-up rooms, and direct messages. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at www.yoibi.com.

Information we collect

You provide some information directly to us when you create an account, which includes:

• Account information: your name, email address, username (handle), and optional profile details such as bio, country, age, and phone number.
• Content you create: your tweets, replies, videos, meet-up room details, and direct messages.
• Media you upload: images, video files, and thumbnails (including media attached to tweets, profile banners, and direct messages).

We also collect information automatically when you use YOIBI:

• Usage data: how you interact with the platform, including the content you view, create, engage with, and share.
• Device and connection data: IP address, browser type, operating system, mobile carrier, and device identifiers.
• Log data: actions you take on the platform, error reports, and crash data.

Information from third parties: When you sign in with Google, we receive your Google profile information (name, email, profile picture) as configured in our authentication provider.

How we use your information

We use the information we collect for various purposes:

• Account creation and management: to create and maintain your account, authenticate you, and provide personalized experiences.
• Content delivery: to store, display, and distribute the tweets, videos, meet-up rooms, and direct messages you create.
• Communication: to send you important notifications, security alerts, and to contact you about updates to our service or this Privacy Policy.
• Moderation and safety: to enforce our Community Values, detect and remove prohibited content, and prevent spam or abuse.
• Analytics and improvement: to understand how the platform is used and to improve our services.
• Customer support: to respond to your questions and provide assistance.

Information sharing and disclosure

We do not sell your personal information. We share your information only in the following circumstances:

• With your consent: when you expressly authorize us to share it.
• To protect rights and property: in connection with efforts to protect the safety, security, or rights of YOIBI, our community, or others.
• Legal compliance: if required by law, subpoena, or court order, or to prevent fraud, harm, or criminal activity.

Service providers: We use third-party service providers to help us operate YOIBI:

• Media hosting: We use Cloudinary to store and serve video files, images, and thumbnails (including direct message media). Your media files are stored on Cloudinary's secure servers.
• Email delivery: We use Resend to send you verification emails and important notifications.
• Realtime audio/video and messaging infrastructure: We use LiveKit for WebRTC-based meet-up rooms, and Socket.IO for direct messaging, online presence, and typing indicators.
• Database storage: We use MongoDB Atlas for persistent data storage.

Data storage and security

Your data location: Your information is stored on MongoDB Atlas, a managed cloud database service. The exact location of the database servers is determined by MongoDB's infrastructure.

Security measures: We implement appropriate technical and organizational measures to protect your information, including:

• Secure server-side authentication using Better Auth with JWT verification against JSON Web Key Sets (JWKS).
• Rate limiting to prevent abuse and unauthorized access attempts.
• Encrypted transmission of data between your device and our servers.
• Server-side validation and sanitization of all user-submitted content.

Your rights and choices

You have the following rights regarding your information:

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can update your profile information at any time through your account settings.
• Deletion: You can request deletion of your account and associated personal data. Learn more in our Terms of Service under "Account Termination".
• Objection: You can object to certain processing activities, such as marketing communications.

Cookies and tracking technologies

Rationale: We use essential cookies and similar tracking technologies to recognize your browser or device and to enhance your experience on YOIBI. These are strictly necessary for the platform to function.

The technologies we use include:

• Cookies and similar technologies: We use cookies and comparable technologies (such as pixels, beacons, and local storage) to remember your preferences, keep you signed in, and recognize when you return to YOIBI.
• Analytics cookies: We use analytics to understand how the platform is used. This helps us improve our service.

Your choices: You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies or alert you when they are being set. However, if you do this, some parts of YOIBI may not work properly.

Children's privacy

YOIBI is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information in accordance with applicable law.

Data retention

We retain your information for as long as necessary to provide our services and as required by law. Specifically:

• Account data: Retained while your account is active.
• Content: Tweets, videos, and other content you create are retained until you delete them or your account is deleted.
• Usage logs: Retained for a reasonable period to understand platform usage and troubleshoot issues.
• Backup copies: May be retained for disaster recovery purposes but are secured and access-controlled.

When you delete your account, we purge your personal information in accordance with our data deletion procedures, though some residual data may remain in backup systems for a limited period.

International data transfers

Your information may be transferred to, stored, and processed in countries outside your own. We use Cloudinary, MongoDB's global infrastructure, and other third-party services that operate globally. We take appropriate safeguards to protect your information in accordance with applicable data protection laws, including standard contractual clauses approved by relevant authorities.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will provide a more prominent notice (such as posting a notice on our website or sending a notice to the email address you have provided).

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and share your information.