Hello Yellow! — Privacy Policy

Effective date: 24 June 2026

Last updated: 6 July 2026

This Privacy Policy explains what personal data the Hello Yellow! mobile app ("Hello Yellow!", "the app", "we", "us") collects, how we use it, who we share it with, and the rights you have. Hello Yellow! is a social game in which friends photograph yellow cars they spot to score points in shared challenges.

1. Who we are (Data Controller)

The data controller responsible for your personal data is SIA LD Trading, registration number 42103109628, registered at Artilērijas iela 3 - 20A, Rīga, LV-1001, Latvia.

For any privacy question or request, contact us at info@helloyellow.fun.

2. The data we collect

Account & identity

You sign in with Sign in with Apple. Apple shares with us your name and an email address (which may be Apple's private relay address if you choose to hide your email). We store a display name and an internal user identifier. We do not receive or store your Apple password.

Photos you submit ("catches")

When you capture a catch, we collect and store the photo and a smaller thumbnail of it, together with:

You may mark an individual photo's location as hidden, which prevents the location from being shown to other users; the location is still stored on our systems unless you delete the photo. When you delete a personal photo, it is immediately hidden from your timeline and your friends' feeds; the photo file and its stored location are permanently removed from our systems within 30 days. Photos you have submitted as catches in a challenge are retained as a record of that challenge for the other participants, even after deletion, but have their location stripped at the time of deletion.

Social & gameplay content

To run the game we store: your friends and friend requests; the challenges you create or join and your participation in them; your catches and their scoring status; disputes you open or vote on; and the comments and likes you add to photos.

Device & technical data

If you enable notifications, we store a push notification token from Apple so we can deliver alerts. We process basic technical information necessary to operate the service (for example, network requests to our backend). We do not use third-party advertising or analytics tracking SDKs.

3. How we use your data

4. Automated content (AI-generated recaps)

At the end of a challenge, we generate a short written recap and award descriptions. To do this, challenge data — player display names, scores, notable gameplay events, and participant comments on photos — is sent to our AI provider, Anthropic (the Claude model), which returns the generated text. This processing is limited to text about the challenge. It does not make any decision that produces legal or similarly significant effects about you.

5. Who we share data with

We do not sell your personal data, and we do not share it with third-party advertising networks. We may feature content you post — such as your catches — in our own marketing and promotion of Hello Yellow! (for example, in our App Store listing, on our website, or on our social channels), as described in our Terms of Service. We otherwise share data only with service providers ("processors") that help us run the app, and only as needed:

ProviderPurpose
SupabaseBackend hosting: authentication, database, photo storage, and push-notification relay.
AppleSign in with Apple (identity) and the Apple Push Notification service (notification delivery).
AnthropicGenerating end-of-challenge recap text (see section 4).
CloudflareServing our website and invite links at helloyellow.fun.

We may also disclose data where required by law, or to protect the rights, safety, or property of our users or us.

6. Legal bases (EEA/UK users)

Where the EU/UK GDPR applies, we rely on: performance of a contract (to provide the app you signed up for); legitimate interests (to keep the service secure and functioning); consent (for example, push notifications and device location, which you can withdraw in your device settings); and legal obligation where applicable.

7. International transfers

Our service providers may process data in countries outside your own, including the United States. Where required, such transfers are protected by appropriate safeguards under our agreements with these providers, such as the European Commission's Standard Contractual Clauses.

8. How long we keep your data

We keep your personal data for as long as your account is active.

Deleted photos. When you delete a personal photo, it is hidden immediately. The photo file and its stored location are permanently deleted from our systems within 30 days. Photos submitted as catches in a challenge are retained as part of that challenge's record for the other participants, with their location stripped at deletion time.

Deleted accounts. When you delete your account (Settings → Delete account): your profile is anonymised ("Former player"), your personal photos and their storage files are permanently removed within 24 hours, and your social connections (friends, friend requests, comments, and likes) are deleted. Challenge catches you submitted remain as an anonymous record for other participants, with all personal identifiers (name, avatar, location) removed. The anonymised record cannot be connected back to you. Encrypted backups held by our hosting provider are rotated and overwritten on a rolling basis (typically within 30 days).

9. Your rights and choices

You can, at any time, from within the app:

Depending on where you live, you may also have rights to access, correct, port, restrict, or object to the processing of your personal data, and to lodge a complaint with your data protection authority. To exercise rights that are not available in the app (such as a copy of your data), contact us at info@helloyellow.fun. We do not currently offer an in-app data export; we will respond to verified requests by email.

10. Children

Hello Yellow! is not directed to children under 13, and you must be at least 13 years old to use it. We do not knowingly collect personal data from children under 13; if you believe a child has provided us data, contact us and we will delete it.

11. Security

Data is transmitted over encrypted connections (HTTPS/TLS) and stored by our backend provider with access controls that restrict each user's data to that user and the friends and challenge participants who are permitted to see it. No system is perfectly secure, but we take reasonable measures to protect your data.

12. Changes to this policy

We may update this policy from time to time. We will revise the "Last updated" date above and, where changes are material, provide a more prominent notice.

13. Contact

Questions or requests: info@helloyellow.fun
Postal: SIA LD Trading, Artilērijas iela 3 - 20A, Rīga, LV-1001, Latvia