Privacy policy

Yadii (the operator's legal name and address will be added before launch) decides why and how your information is used. [Lawyer: add the legal name and address, and say whether we must register a database, appoint a privacy protection officer or name an EU representative]

Questions about privacy go to vintyshminty@gmail.com.

We only collect what the service needs. Here is the full list, and the reason for each part.

• Your account: email, username, a password kept in scrambled form, and which sign in method you use (Apple, Google or email). We need it to let you in and keep your account safe.
• Your profile: display name, photo, a short bio, city and country, and the language you choose. Other people see it. We need it so buyers and sellers can recognise each other.
• Your settings: notification choices, privacy choices and whether Home learns from what you do. We need them to follow your choices.
• Your addresses: the names, street and phone number you save for delivery. We need them to complete an order, and the seller sees what a delivery needs.
• What you list: photos, descriptions, prices, category, size and brand, and your drafts. We need them to run your sale. Listings are public.
• Your messages and offers: what you write to other people, with photos you send. We need them to deliver the conversation, to look into reports, and for the AI helpers described below.
• Your orders: what you bought or sold, prices, the delivery address, status and any dispute. We need them to run the order and for records. In practice mode they are simulated.
• Your balance and payouts: the practice balance and the history of it. We need it to show your sales. No bank or card details are collected today.
• Reviews: ratings and what you wrote. Reviews are public.
• Reports and blocks: who reported what, and who you blocked. We need them to keep the community safe.
• Sessions and devices: where you are signed in, with the kind of phone or browser and the time you last used it. We need them to keep you signed in and to let you sign out of other devices.
• Push tokens: a code that lets us send a notification to your phone, if you allow notifications.
• What you do on the service, for Home: which items you open, favourite, search for and scroll past, and which sellers and sizes you follow. We use it to learn what you like and to build your Home.
• Things you save: favourites, saved searches and follows.
• Basic technical records: the time of requests and errors, and your approximate network address, so we can find faults and stop abuse.

Your face data never leaves your phone. If you use Face ID to unlock Yadii, the phone does the checking and we receive nothing about it.

Home shows items you may like. To do that, it notes what you open, favourite, search and browse. What you did a long time ago counts for less and less: a score halves after 7 days with no new action. The raw records of your actions are deleted after 180 days, and the records of items that only passed in front of you are deleted after 30 days.

You are in control. In Settings, Privacy, you can turn off Tailor Home to what I do, which also clears what Home learned. You can also use Reset to start fresh, or choose Not interested to hide items and categories from Home. We do not use this to show ads, and we do not sell it to anyone.

Some parts of Yadii use AI from Anthropic (Claude) to help you. It suggests and warns. It never decides anything about your account, your money or your orders. A person on our team does that.

• Selling: it reads the photos and words of your listing to suggest a category, brand and condition, and to give photo tips.
• Searching: it turns what you type in search into filters.
• Safety: it checks new and changed listings for items that are not allowed, fakes and scams, and helps us sort reports. Anything it finds goes to a person on our team.
• Chat: it reads the messages in your conversations to warn you about likely scams, such as someone asking you to pay or talk outside Yadii. If it sees a likely scam, our team may look at that conversation.
• Problems with an order: when a buyer reports a problem, it reads that order's details and the chat about it, and writes a short summary for a person on our team, who decides.

We do not send your name, email or phone number with what the AI reads. Anthropic may not use it to train its models. [Lawyer: confirm the Anthropic terms and the legal basis for automated checks of messages]

Other people on Yadii:

• Everyone can see your public profile, your listings and your reviews.
• A buyer and a seller in an order see what the order needs, such as names, the delivery address and phone number, and the item.
• Only the person you write to sees your messages (and Yadii, if someone reports a conversation or the AI helper sees a likely scam).

Companies that help us run Yadii. They process your information for us and only for that:

• Vercel runs our servers, in the EU (Frankfurt).
• Neon keeps our database, on Amazon servers in Frankfurt.
• Cloudflare R2 stores photos.
• Upstash (Redis) helps live chat reach you quickly, if it is switched on.
• Resend sends our emails, such as your sign in codes.
• Apple and Google, if you choose to sign in with them.
• Expo sends push notifications to your phone.
• Anthropic runs the AI helpers described above. It receives only what each helper needs to read, never your name or contact details.

We may also share information when the law or a court requires it, or to protect people from harm or fraud. We do not sell your personal information. [Lawyer: confirm this section, the processor agreements, and what to say about the photo helper provider]

Our servers and database are in the European Union (Frankfurt). Some of the companies above, for example Anthropic, Expo, Apple, Google and Resend, may handle information in other countries such as the United States. Israel and the EU recognise each other's level of protection, and for other places we rely on suitable safeguards. [Lawyer: confirm the transfer basis for each provider and for transfers outside Israel and the EU]

• Home activity: 180 days for actions, 30 days for items that only passed in front of you. Taste scores fade by half every 7 days.
• Your account, profile, listings and messages: until you close your account. [Lawyer: confirm]
• After you close your account: we clear your personal details, hide your listings, and remove your Home activity and hidden items. Orders and reviews are kept under an anonymous name, because the other person in the order needs them, and records may be required by law. [Lawyer: confirm how long order records must be kept]
• Sessions, push tokens and technical records: to confirm. [Lawyer: confirm the retention periods]
• Reports and blocks: to confirm. [Lawyer: confirm the retention periods]

You can:

• See the information we hold about you.
• Fix information that is wrong. You can change your profile, addresses and settings yourself in the app and on the website.
• Delete your account, in Settings. This clears your personal details as described above.
• Turn off Home learning, reset it, or hide things from Home.
• Ask us for a copy of your information, to limit how we use it, or to object to some uses. [Lawyer: confirm which of these rights we must offer under Israeli law and under the GDPR]

To use any right that is not in Settings, write to vintyshminty@gmail.com. We may need to check that it is you. We will answer within a reasonable time. [Lawyer: confirm the response time]

On the website we use two small files. One keeps you signed in. The other remembers your language. We do not use advertising or tracking cookies, and no ad companies follow you from Yadii. [Lawyer: confirm no consent banner is needed for these two]

Yadii is not meant for children. You must be 18, or 16 to 17 with a parent or guardian's permission. If you think a younger child has an account, write to us and we will close it. [Lawyer: confirm the minimum age and parent consent rules]

We protect information with encrypted connections, scrambled passwords, limited access for our team, and automatic checks of our code. No service is perfectly safe. If something happens that puts your information at risk, we will tell you and the authorities as the law requires. [Lawyer: confirm the breach notice duties and the information security rules for the database]

If we change how we use your information in an important way, we will tell you in the app or by email before it starts. The date at the top shows when this page last changed.

Write to vintyshminty@gmail.com for any privacy question or request.

If you think we handled your information wrongly, you can also complain to the Privacy Protection Authority in Israel's Ministry of Justice. You can find how on the Authority's page on gov.il. If you are in the EU, you can also contact your local data protection authority.