Data & GDPR
YOBY protects family and children’s data with GDPR-first design, parent-led controls, no ads in the child-facing experience and privacy-friendly analytics.
Your family data stays yours.
YOBY is made in Europe for European families.
That means privacy is not a decorative checkbox at the bottom of a long form. It is part of how we design the pond: who can enter, what data is collected, how children are protected, what parents can control and how families can leave.
We do not sell family data.
We do not use advertising inside the child-facing YOBY experience.
We do not build profiles of children for marketing.
We use Matomo in privacy mode and do not collect visitor-level analytics data.
The pond belongs to the family.
The data should too.
Read our Privacy Policy
Manage cookie settings
Privacy-first by design
YOBY is built around a simple idea: children should be able to learn healthy money habits without becoming tiny data fountains in duck hats.
So we collect only what we need to provide the service, keep it safe and make the family pond work.
That may include account data, family pond settings, child profiles, game progress, parental control settings, technical security information and support messages.
We do not collect data just because it might be useful someday.
We do not treat children’s attention as inventory.
We do not turn family learning into advertising fuel.
GDPR-first, not GDPR-later
YOBY is designed with GDPR principles in mind from the beginning.
That means we aim to follow principles such as:
Lawfulness, fairness and transparency
We explain what data we use and why.
Purpose limitation
We use data for clear purposes connected to the YOBY service.
Data minimisation
We collect what we need, not every pebble under the pond.
Accuracy
We try to keep account and family information correct and up to date.
Storage limitation
We keep data only for as long as needed.
Security and confidentiality
We protect data with technical and organisational measures.
Accountability
We document and review how data is handled.
A family product should not ask for trust by shouting “trust us”.
It should earn trust quietly, one design choice at a time.
Children deserve extra care
YOBY is designed for children and families.
Children’s data needs stronger protection, clearer explanations and more careful choices. That is why YOBY starts from the parent account and the family pond.
Children do not create open public profiles.
Children cannot be contacted by strangers.
Children do not enter a public social network.
Parents manage access, permissions and family settings.
The child gets a world to explore.
The parent keeps the map, the gate and the lantern.
Parent-led consent and control
Every family pond starts with a parent or guardian.
Parents can:
- create and manage the family account
- invite family members
- create and manage child profiles
- control access to the family pond
- restrict areas or features
- review weekly family progress
- manage richer interaction features
- request deletion of family data
Where the law requires parental consent or authorisation for children’s data, YOBY is designed to work through the parent or guardian.
No secret door.
No hidden pond behind the pond.
What data YOBY may process
YOBY may process different types of data depending on how you use the service.
Account data
This may include:
- parent name
- email address
- login credentials
- language
- country or region
- account settings
- subscription status, if relevant
Family pond data
This may include:
- invited family members
- child profiles
- parental control settings
- family pond configuration
- progress inside the YOBY world
- completed quests
- symbolic items such as shells, seeds and stars
- weekly recap information
Child profile data
This may include limited information such as:
- nickname or display name
- age range or date of birth, when needed
- avatar or duck customisation
- learning progress
- quest activity
- family pond membership
We aim to minimise identifying information about children wherever possible.
Technical and security data
This may include:
- login/session information
- security logs
- error logs
- device or browser information needed for compatibility
- anti-abuse signals
- system events needed to keep YOBY safe and working
Support and communication data
If you contact us, we may process:
- your email address
- your name
- your message
- support history
- organisation details, if you contact us as a school, bank or partner
What we do not do
YOBY does not use family data as a hidden business model.
We do not:
- sell family data
- sell children’s data
- use advertising inside the child-facing game experience
- build advertising profiles of children
- allow strangers to contact children
- use Matomo to identify visitors
- collect visitor-level analytics data through Matomo
- track people across websites through Matomo
- turn private family learning into public social media activity
The ducks may collect shells.
We do not collect children for ads.
Matomo in privacy mode
YOBY uses Matomo in privacy mode to understand how the website is performing through aggregate statistics.
This helps us understand general things like:
- which pages are useful
- whether the site is working
- whether visitors can find what they need
- whether something is broken
- how to improve the experience
We do not use Matomo to identify individual visitors.
We do not collect visitor-level analytics data.
We do not build visitor profiles.
We do not use Matomo for advertising.
We want to know whether the bridge is broken, not who crossed it wearing red boots.
No advertising inside the YOBY experience
YOBY is a financial education world for children.
That means the child-facing experience should not be shaped by advertising pressure.
We do not use ads inside the YOBY game experience.
We do not use children’s behaviour to target ads.
We do not sell attention back to advertisers.
A product that teaches children patience, goals and better choices should not be whispering “buy this shiny thing” from behind a lily pad.
Data security
YOBY uses technical and organisational measures designed to protect personal data.
These may include:
- encrypted connections
- access controls
- authentication systems
- limited access to personal data
- secure infrastructure practices
- monitoring for abuse or unsafe behaviour
- backups and recovery procedures
- provider due diligence
- child-safety design controls
No digital service can promise perfect security, but YOBY is built with security as part of the pond, not as a fence added after the ducks moved in.
Your GDPR rights
Depending on your location and the situation, you may have rights over your personal data.
These may include the right to:
- access your data
- correct inaccurate data
- request deletion
- restrict processing
- object to processing
- request data portability
- withdraw consent, where processing is based on consent
- lodge a complaint with a data protection authority
Parents and guardians may also exercise rights on behalf of their children, where applicable.
To exercise your rights, contact:
We may need to verify your identity before responding.
Deleting family data
Families should be able to leave.
You can request deletion of your account and family pond data.
When a family account is deleted, we delete or anonymise associated personal data, unless we need to keep certain information for legal, accounting, security or dispute reasons.
The family pond should not become a locked chest at the bottom of the lake.
Schools, banks and partners
YOBY may be used with schools, banks, foundations, municipalities or other partners.
In those cases, additional data protection terms may apply.
Depending on the project, YOBY may act as:
- an independent data controller
- a processor acting on behalf of a partner
- a joint controller with another organisation
The exact role depends on the partnership, the data involved and the agreement in place.
For school or partner pilots, we aim to define data responsibilities clearly before the project begins.
No one should enter the pond without knowing who holds the keys.
International transfers
YOBY aims to use European or GDPR-compliant providers whenever possible.
If personal data is transferred outside the European Economic Area, we use appropriate safeguards required by data protection law, such as adequacy decisions, Standard Contractual Clauses or equivalent measures.
Our data promise
We believe family data should be handled with restraint.
So our promise is simple:
We collect less where we can.
We explain more where we should.
We protect children first.
We do not sell family data.
We do not use ads inside the child-facing experience.
We give parents control.
We make deletion possible.
Privacy is not the absence of fun.
It is what lets the fun happen safely.
Contact
For privacy and data protection questions:
For general contact: