Children’s Privacy Notice for Captains (COPPA / GDPR-K)

Last updated: July 29, 2026

This Notice explains how Yup handles a Player’s personal information and how a Captain controls it. A Captain means the adult parent or legal guardian managing the family account, and a Player means a child using a Captain-managed profile.

  • This Notice addresses children under 13 in the United States under the Children’s Online Privacy Protection Act and Rule (COPPA).

  • It also addresses children below the applicable digital-consent age in the EEA and United Kingdom under GDPR and UK GDPR.

Please also read our Privacy Policy and Terms of Service.

1. Who Operates Yup

Controller and operator: Danylo Hennadiiovych Dubrovskyi, a sole proprietor registered in Ukraine.
Address: 30 Hradonachalnytska Street, Apt. 4, Odesa, Odesa Oblast 65052, Ukraine.
Telephone: +380 95 080 66 41. Privacy: privacy@yup.kids
Support: support@yup.kids

2. How Family Accounts Work

An adult creates a Captain account with an email and password, accepts the Terms and Privacy Policy on the welcome screen, and may protect Captain access with a PIN. The Captain creates a family and receives a family code. A Player joins through an invitation or code supplied by the Captain. Players do not provide an email, password, payment account, or Captain PIN. Only a Captain may buy the current subscription.

3. Captain Consent

The Captain account and verified Captain email form the consent channel. By accepting the legal notices and creating or inviting a Player, the Captain represents that they are at least 18 or the age of legal majority, are the Player’s parent or legal guardian or have authority to consent, and authorize the practices described here. Where law requires another verification method, Yup may require it before enabling the relevant Player feature. If consent is refused or withdrawn, Yup may disable or delete the affected Player profile.

4. Player Information We Collect

We may collect:

  • Player name and age.

  • Avatar or profile image.

  • Family membership, invitation, or family code.

  • Missions, routines, and completion status.

  • Coins, XP, points, streaks, rewards, and progress.

  • A photo uploaded as proof of completing a mission, visible only to the Player and Captain.

  • Device type, operating system, app version, language, IP address, approximate location derived from IP, push token, app interactions, logs, diagnostics, security events, and update-delivery information.

  • Players do not provide an email, password, payment details, precise location, contacts, biometric identifiers, government identifiers, health records, or school records.

Yup does not use advertising identifiers, third-party advertising, targeted advertising, or marketing for Players.

5. How We Collect Player Information

We collect Player information:

  • From the Captain when the Captain creates or manages a Player.

  • From the Player when the Player joins, uses features, completes missions, selects an avatar, or uploads a mission-proof photo.

  • Automatically from devices and servers for authentication, security, synchronization, updates, notifications, diagnostics, and reliability.

We do not condition participation on providing more personal information than reasonably necessary for a feature.

6. How We Use Player Information

We use Player information to:

  • Create and display the Player profile.

  • Connect the Player to the Captain’s family.

  • Show missions, routines, rewards, coins, XP, and progress.

  • Process mission-proof photos for the Player and Captain.

  • Synchronize authorized family data.

  • Send enabled service and push notifications.

  • Deliver updates and provide support.

  • Secure the Service and prevent misuse.

  • Diagnose errors and comply with legal obligations.

We do not use Player information for advertising or marketing.

7. Providers and Disclosure

Player information may be processed by:

  • Hetzner for backend and database hosting.

  • Cloudflare R2 for avatars, mission and reward images, banners, and mission-proof photos.

  • Expo, Apple, and Google for app updates, authentication where used, subscriptions managed by the Captain, and push notifications.

  • Within Yup, Player data is available according to family roles. Mission-proof photos are limited to the Player and Captain.

  • We may disclose information when required by law, to protect safety or security, or in a protected business transfer.

We do not sell Player information or disclose it for targeted advertising. Providers may process it only to deliver contracted services under applicable privacy and security obligations.

8. Captain and Player Rights

Captains, meaning parents or legal guardians, may:

. We may verify a request through the Captain’s registered email or other reasonable family-account information.

9. Withdrawal of Consent

If a Captain withdraws consent, Yup will stop further processing that depends on consent and disable or delete the affected Player profile. We may retain limited records required for law, security, fraud prevention, backups, disputes, or proof of prior consent.

10. Retention

We keep Player information while the profile is active and only as long as needed for the stated purposes. After deletion, we remove it from active systems within 30 days unless limited retention is required. Backups are deleted or overwritten on a regular cycle, normally within 90 days. We do not retain Player information indefinitely.

11. GDPR and UK GDPR

The digital-consent age may vary between 13 and 16 in EEA countries and is 13 in the United Kingdom for relevant online-service consent. Yup uses Captain authorization where required. Captains may exercise applicable access, correction, deletion, restriction, objection, consent-withdrawal, and portability rights for a Player.

12. Security

Yup uses access controls, encryption in transit, restricted administrative access, authentication controls, monitoring, backups, and secure-development practices. No online service can guarantee complete security. Report a suspected issue to security@yup.kids.

13. Contact

Danylo Hennadiiovych Dubrovskyi, sole proprietor registered in Ukraine. 30 Hradonachalnytska Street, Apt. 4, Odesa, Odesa Oblast 65052, Ukraine. Telephone: +380 95 080 66 41. Privacy and consent requests: privacy@yup.kids Support:

support@yup.kids Security: security@yup.kids