Privacy Policy

YEAUP, operated by a sole trader ("we", "us"), operates the YEAUP mobile application and the yeaup.com.au website. This policy explains how we collect, use, and protect your personal information.

1. INFORMATION WE COLLECT

We collect information you provide directly: name, email address, profile details, sport preferences, location suburb, and profile photo. We also collect anonymous in-app usage analytics and diagnostic/error logs - for example, which features are used, sports viewed, sessions created or joined, and app errors - to understand how YEAUP is used and to fix problems. This analytics and diagnostic data is stored in our own secure database, is not sold, and is not shared with any third-party advertising or analytics network. It never includes your private messages or your precise GPS location. See section 5 for where your data is stored.

If you install YEAUP from one of our links, posts or posters, we record which one it was (on Android this comes from Google Play's install referrer), and, if you choose to answer, where you heard about YEAUP. We use this only to see, in totals, which of our marketing works. It is kept with your account, deleted with it, and never used for advertising or shared.

2. HOW WE USE YOUR INFORMATION

We use your information to:

• Match you with nearby sessions and players
• Send notifications about sessions you've joined or hosted
• Personalise your YEAUP experience
• Communicate important updates about the service

3. LOCATION DATA

We collect your general suburb/city location to show relevant local sessions. We do not continuously track your precise GPS location in the background.

4. DATA SHARING

We do not sell your personal information, and we do not use third-party advertising or analytics networks. We share data only with trusted service providers who help us operate YEAUP: cloud hosting and database services, email delivery, push-notification delivery, error and crash reporting, and the AI assistant when you choose to use it. These providers may only use your information to provide their services to us. Section 5 sets out where each of them is located.

5. WHERE YOUR DATA IS STORED

YEAUP is an Australian service, operated from South Australia, and we are bound by the Australian Privacy Principles.

Your account, profile, sessions, messages and photos are stored in Australia, on secure cloud infrastructure hosted in Sydney. Our hosting provider keeps its own backups of that database in Sydney, covering the newest seven days.

A few supporting services operate overseas, or in places we cannot confirm, and we think you should know which:

• Every connection between the app and our servers passes through Cloudflare, a network provider that handles the secure connection on our behalf before traffic reaches Sydney.
• Crash and error reports are processed by Sentry in the United States, to help us fix problems.
• Push notifications are delivered through our push provider, Expo, in the United States, and then by Apple or Google. A push notification about a new message contains the text of that message, so message text passes through those services on its way to the recipient's phone. We do not control how long they keep it.
• Sign-up and confirmation emails are sent using Resend in the United States.
• If you choose to use the in-app AI assistant, the messages you send it are processed by Anthropic in the United States. The assistant is optional, and nothing is sent unless you use it. It has no access to your chats.
• When you search for a venue or address while creating a session, the words you type and the centre of the map you are looking at are sent by our servers to Google (Places) in the United States, so it can suggest matching places. Google does not receive your name, account or device.
• Twice a day we take our own backup of the database, including messages, and store it as a private file on GitHub for 90 days. GitHub does not tell us which country those files are held in, so they may be outside Australia.
• A copy of each of those backup files is also kept in a Microsoft OneDrive folder until we delete it. We have not confirmed which country Microsoft holds it in.
• Before 17 August 2026 our database was hosted in Mumbai, India. That database was deleted on 12 September 2026. Our own backup files made before that date include a copy of it, so data from before the move, including older messages, stays in those files until they expire or we delete them, as described above. Versions of the app released before 17 August 2026 pointed at that database and no longer work; please update the app.

We do not sell your personal information, and we do not use third-party advertising or analytics networks. We take reasonable steps to ensure any overseas provider handles your information consistently with the Australian Privacy Principles.

6. DATA RETENTION

We retain your data while your account is active. You can delete your account and its associated data from within the app at any time (Settings, then Account & security, then Delete account), or by emailing hello@yeaup.com.au.

Deleting your account removes your data from our live database straight away. Copies in backups are not edited: our hosting provider's backups roll off after seven days, our GitHub backup files expire after 90 days, and the OneDrive copies are kept until we delete them. Section 8 explains what deletion means for messages in particular.

7. SECURITY

We use industry-standard encryption (TLS) for every connection between the app and our servers. Our hosting provider encrypts the storage our database runs on. Access is protected by database-level access controls so users can only reach their own information, and we have verified those controls with tests that run against the live system. Private uploads, such as evidence submitted in a competition dispute, are stored in a private bucket that is not publicly readable.

8. MESSAGES

This section explains who can read the messages you send in YEAUP chats, where copies of them exist, and what happens when you delete one.

Who can read your messages

Messages are private to the people in the conversation: you and the other person in a direct message, or every member of a group chat (a session, club, team or match chat, or a group started from a play request). Nobody outside the conversation can read them through the app, whether or not they have a YEAUP account. Someone who joins a session, club or team later can read the messages sent before they joined. Leaving removes your access, but the messages you sent stay visible to the people still there.

Messages are not end-to-end encrypted. That means they are protected on the way to and from our servers, and the storage they sit on is encrypted, but they are held on our servers in a form our systems can read. This is deliberate. It is what lets the app show a preview of your latest message in your inbox, let you search within a conversation, hide messages between two people who have blocked each other, and act on a conversation you report.

Our admin tools cannot open or read a conversation. The only things an admin can do are remove a message outright, remove a reported session together with its chat, or suspend an account. A report contains the conversation reference, the reason you choose and any notes you add, never the message text.

Direct access to the database, which would show message text, is held by the person who operates YEAUP, by the development and monitoring tools they use, by our automated backup and health checks (some of which run on GitHub's servers), and by our hosting provider. None of these is used to read your conversations.

Notifications carry a copy of your message

When you send a message, each recipient who has not muted the conversation gets a copy of the text in their in-app notification list, whether or not they have push notifications on. In a direct message, that does not happen if either of you has blocked the other. Each recipient who also has message notifications on is sent a push notification containing the text, on every phone they are signed in on. It travels through our push provider, Expo, and then Apple or Google, and stays in the notifications list on their phone until they clear it.

The copy in the in-app notification list follows your message. If you edit the message, the copy is updated. If you delete the message for everyone, or delete your account, the copy is emptied. A notification already delivered to a phone is not recalled.

Where copies of messages are kept

• On our servers in Sydney, for as long as the conversation exists. A session chat is kept after the session ends or is cancelled, and is only removed if the session itself is removed. Club chats are kept for as long as the club exists. A team chat is removed when the team is deleted. Match chats are kept even if the match is removed. In a direct message, a match chat or a group chat, each message is kept until its sender deletes it or deletes their account; the conversation itself, and the other people's messages, stay.
• In our hosting provider's backups in Sydney, for the newest seven days.
• In our own backup files on GitHub for 90 days, and in the OneDrive copies until we delete them. Section 5 says where these are. Backup files made before 12 September 2026 also include a copy of our previous Mumbai database, and so of messages sent before 17 August 2026.

The app does not save your messages to your phone's storage. They are held in the app's memory while it runs and fetched from our servers when you open a chat. Your messages are never included in usage analytics, crash reports or any email we send. One exception: if the app hits an error shortly after you search inside a conversation, the search term you typed may be included in the error report we keep and in the copy sent to Sentry. The messages themselves are not.

What deletion does

From version 2.0.6 you can delete a message for everyone. Deleting a message for everyone empties its text on our servers and removes any reactions to it. It shows as a deleted message, and the other people in the chat see that the next time their chat refreshes. Deleting does not recall the text from places it has already reached: any push notification already delivered to a phone, any copy someone forwarded (a forwarded message is a separate message belonging to the person who forwarded it), and the backups and copies above for as long as they are kept.

From version 2.0.6 you can also edit a message for 15 minutes after sending it. An edit overwrites the message in place and we keep no edit history, but the earlier text remains in any backup taken before the edit.

Deleting your account removes every message you sent, your place in every conversation, your own notification list, your blocks and the copies of your messages in other people's notification lists. If you hosted sessions or organised competitions, deleting your account deletes those sessions and competitions, and a hosted session's chat goes with it, including what other people wrote there. In every other conversation, messages other people sent stay with them. Copies in the backups above are not removed until those backups expire, and the OneDrive copies are kept until we delete them.

Blocking someone

In a direct message, blocking someone means you stop seeing each other's messages (you still see your own), and neither of you is notified about the other. Anything either of you sends afterwards is still stored on our servers but not shown to the other person. Those messages are kept, and if the block is removed they become visible again. Blocking does not change what happens in group chats. Muting a conversation stops notifications only; the messages still arrive.

9. YOUR RIGHTS

Under Australian Privacy Law, you have the right to access, correct, or delete your personal information. You can delete your account and its associated data from within the app at any time (Settings, then Account & security, then Delete account), or contact us at hello@yeaup.com.au.

10. CHILDREN

YEAUP is intended for users aged 16 and over. We do not knowingly collect data from children under 16.

11. CHANGES

We may update this policy from time to time. We will notify you of significant changes via the app.

12. CONTACT

YEAUP, operated by a sole trader
Email: hello@yeaup.com.au