Privacy Policy

YOBY protects family and children’s data with privacy-first design, parental controls, invite-only access, no advertising and clear GDPR rights.

Last updated: July, 7 2026

YOBY is built for families, children and better money habits.

This Privacy Policy explains how we collect, use, protect and delete personal data when you use the YOBY website, create a family account, join a family pond, receive our emails or interact with our services.

We try to keep this policy clear. Privacy should not require a lantern, a lawyer and three maps of the underground Mole tunnels.

1. Who we are

YOBY is operated by:

YOBY
Contact email: privacy@yoby.fun

For general questions, you can also contact us at:

ricardo@yoby.fun
stefano@yoby.fun

For the purposes of data protection law, YOBY is the data controller of the personal data described in this Privacy Policy.

2. What YOBY is

YOBY is a digital world where children and parents can explore ponds, meet mentor characters, complete quests and build healthier financial habits together.

The service is designed around family accounts. A parent or guardian creates the family pond and invites children or other family members.

YOBY is not an open social network. Children cannot be contacted by strangers.

3. The data we collect

We only collect the data we need to provide, protect and improve YOBY.

Account data

When a parent or guardian creates an account, we may collect:

name
email address
password or authentication credentials
account preferences
language
country or region
family account settings

Child profile data

When a child profile is created inside a family pond, we may collect limited information such as:

nickname or display name
age range or date of birth, where needed for age-appropriate features
avatar or duck customisation choices
family pond membership
progress inside YOBY
quest activity and learning interactions

We aim to avoid collecting unnecessary identifying information about children.

Family pond data

To provide the YOBY experience, we may process:

family members invited to the pond
parental control settings
completed quests
collected symbolic items, such as shells, seeds and stars
learning progress
weekly recap information
family goals and shared educational progress

Communication data

If you contact us, join a waiting list, subscribe to a newsletter or request information, we may collect:

email address
name
message content
organisation, if you contact us as a school, bank or partner
communication history

Payment data

YOBY offers paid plans, payments may be processed by STRIPE a third-party payment provider.

We do not store full payment card details on our servers. The payment provider may process the information required to complete the transaction, such as billing details, payment method, transaction status and invoice information.

Technical data

When you use the website or app, we may collect technical information such as:

IP address
browser type
device type
operating system
pages visited
approximate location derived from technical data
access times
error logs
security logs

This helps us keep YOBY working, secure and reasonably duck-proof.

4. How we use personal data

We use personal data to:

create and manage user accounts
create and manage family ponds
allow parents to invite and manage family members
provide quests, characters, progress and learning activities
adapt the experience to the child’s age range
provide parental controls
generate family recaps
send service messages
send newsletters or updates, where permitted
process payments and subscriptions
respond to support requests
prevent abuse, unsafe behaviour and unauthorised access
improve the product
comply with legal obligations

We do not sell family data.

We do not use advertising inside the YOBY experience.

5. Legal bases for processing

Depending on the situation, we process personal data under one or more of the following legal bases:

Contract

We process data when it is necessary to provide the YOBY service, manage accounts, deliver features, process subscriptions and support users.

We may rely on consent for optional communications, certain cookies or optional features.

Where consent relates to a child and the law requires parental authorisation, we ask for consent from the parent or guardian.

Legitimate interests

We may process data for legitimate interests such as service security, fraud prevention, product improvement, technical maintenance and basic analytics, provided these interests do not override the rights and freedoms of users, especially children.

Legal obligation

We may process data when required to comply with accounting, tax, consumer protection, safety or legal obligations.

6. Children’s privacy

YOBY is designed for children, but children do not create an open public account by themselves.

A parent or guardian creates the family account and invites children into the family pond.

For children under the age required by applicable law to give valid consent for online services, we rely on the parent or guardian to provide or authorise consent where necessary.

We design YOBY to minimise the personal data collected from children.

Children cannot be contacted by strangers through YOBY.
Children cannot freely enter public chats.
Children cannot access videochat without the required adult presence.

The pond is playful. The gate is not made of cardboard.

7. Safety and moderation

YOBY includes safety features designed to protect children and families.

These may include:

invite-only access
parental controls
automatic content filtering
restricted communication features
age-appropriate experiences
safety logs
account suspension or removal in case of unsafe behaviour

Where messages or interactions are checked for safety, we process the relevant content only for the purpose of protecting users and maintaining a safe service.

8. No advertising to children

YOBY does not use advertising inside the product experience.

We do not sell children’s data to advertisers.
We do not profile children for advertising.
We do not build YOBY around ad impressions.

A financial education world for children should not whisper “save wisely” while throwing glittery ads into the reeds.

9. Cookies and similar technologies

The YOBY website may use cookies or similar technologies.

Some cookies are necessary for the website to work, for example to manage login sessions or security.

Other cookies, such as analytics cookies, are used only where permitted by law and, where required, after your consent.

We may use cookies for:

essential website functions
account login and session management
security
language preferences
analytics, if enabled
newsletter or membership features, if enabled

You can manage cookies through your browser settings and, where available, through our cookie banner or consent settings.

If you subscribe to our newsletter or request updates, we may send you emails about YOBY.

You can unsubscribe at any time using the link in the email or by contacting us.

We may still send essential service emails related to your account, subscription, safety or legal notices.

We only share personal data when necessary.

We may share data with trusted service providers who help us operate YOBY, such as:

hosting providers
email providers
payment processors
analytics providers, if enabled
security and infrastructure providers
customer support tools
professional advisors, where necessary

These providers may process data only according to our instructions and for the purposes described in this Privacy Policy, unless they act as independent controllers under applicable law.

We may also share data if required by law, court order or competent authority.

12. International transfers

We aim to use European or GDPR-compliant providers whenever possible.

If personal data is transferred outside the European Economic Area, we use appropriate safeguards required by data protection law, such as adequacy decisions, Standard Contractual Clauses or equivalent protections.

13. How long we keep data

We keep personal data only for as long as necessary.

Typical retention periods may include:

account data: for as long as the account is active
child profile data: for as long as the family pond is active, unless deleted earlier
support messages: for the time needed to handle the request and keep reasonable records
billing records: for the period required by tax and accounting law
security logs: for a limited period necessary to protect the service
newsletter data: until you unsubscribe or request deletion

When data is no longer needed, we delete it or anonymise it.

14. Your rights

Under applicable data protection law, you may have the right to:

access your personal data
correct inaccurate data
request deletion of your data
restrict processing
object to processing
request data portability
withdraw consent, where processing is based on consent
lodge a complaint with a data protection authority

Parents and guardians may also exercise these rights on behalf of their children, where applicable.

To exercise your rights, contact us at:

privacy@yoby.fun

We may need to verify your identity before responding.

15. Deleting your family data

You can request deletion of your account and family pond data.

When a family account is deleted, we will delete or anonymise the associated personal data, unless we need to keep certain information for legal, security or accounting reasons.

The family pond belongs to the family.
It should be possible to close the gate and take the ducks home.

16. Security

We use technical and organisational measures designed to protect personal data from unauthorised access, loss, misuse or disclosure.

These measures may include:

encrypted connections
access controls
authentication systems
limited staff access
security monitoring
backups
provider due diligence
child-safety design controls

No digital service can guarantee absolute security, but we design YOBY with protection as a core part of the product.

17. Schools, banks and partners

If YOBY is used through a school, bank, municipality, foundation or other partner, additional terms may apply.

In some cases, the partner may act as an independent controller or joint controller. In other cases, YOBY may act as a processor on behalf of the partner.

When this applies, we will provide specific information for that project, pilot or partnership.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If the changes are important, we will notify users through the website, email or inside the service.

The updated version will always show the latest revision date.

19. Contact us

For privacy questions, requests or concerns: