Yuuvii is a family-safety product built by FMC Software (“we”, “us”). Our entire product philosophy is data honesty and data minimization — this policy is written the same way. It covers the yuuvii.co website and the Yuuvii mobile apps for Android and iOS.
What we collect
- Parent account: e-mail address and authentication data. Parents are the only account holders — children do not have accounts.
- Child profile: a display name (a nickname is fine), birth year and month (needed to apply the correct legal consent tier), and an avatar choice. We do not ask for the birth day, real name, school or any other identifier.
- Location data: the child device’s position together with its accuracy and the time it was measured. We never store a location without those two attributes.
- Device health: battery level and permission status of the child device, so we can tell you why a location is unavailable instead of showing stale data.
- Push tokens: to deliver safety notifications (e.g. safe-zone arrivals, SOS) to parent devices.
- Website: the site collects nothing. If you write to us, we store only what you send.
What we never collect
No message or chat contents. No call logs. No microphone or camera access. No browsing history. No advertising identifiers. The app is always visible on the child’s phone — Yuuvii has no hidden mode, by design and by policy.
Retention — the 30-day rule
Location history is kept for 30 days and then permanently deleted. This is a product commitment, not a configurable setting: the same number appears in the in-app consent screen, this policy, and our store listings. Account data is kept while your account exists and deleted when you delete it (see Data Deletion).
Consent
Location sharing for a child starts only after a parent gives explicit, recorded consent — consent checkboxes are never pre-ticked. During pairing, the child is shown an age-appropriate explanation of what is shared. For age tiers where the law requires it (COPPA in the US; GDPR ages 13–16 across the EU), we record verifiable parental consent before any data flows.
Where data lives and who processes it
- Supabase (database & authentication) — EU region (Frankfurt, eu-central-1).
- Hetzner (application servers) — Germany.
- Cloudflare (network security & DNS).
- Google Workspace (e-mail, for messages you send us).
- Expo push notification service (United States) — delivers notifications to your devices. A notification body can contain your child’s first name and a safe-zone name (for example "Ela arrived at School"), because that is the message itself.
- RevenueCat — subscription status. It receives your store purchase identifier and your Yuuvii account id; it never receives location data.
We do not sell personal data. We do not share it with advertisers. There are no ads in Yuuvii.
Your rights
Under GDPR (and equivalent laws), you can request access, correction, export or deletion of your family’s data at any time — from inside the app once launched, or by writing to [email protected]. We answer within 30 days. If you believe we handle data unlawfully, you may complain to your local data-protection authority.
Changes
If this policy changes in a way that matters (new data category, new processor, different retention), we announce it in the app and on this page before it takes effect — never silently.