Privacy Policy

Last updated: July 29, 2026

This Privacy Policy explains how Danylo Hennadiiovych Dubrovskyi, a sole proprietor registered in Ukraine (“Yup,” “we,” “us,” or “our”), collects, uses, shares, and protects information when you use the Yup mobile application, website, and related services (the “Service”).

Yup uses product role names. A Captain is the adult parent or legal guardian who creates and manages a family account. A Player is a child who uses a Captain-managed profile. These product names do not change the legal rights or responsibilities of a parent, legal guardian, or child.

Please read this Privacy Policy together with our Children’s Privacy Notice.

1. Who We Are

Controller and operator: Danylo Hennadiiovych Dubrovskyi, a sole proprietor registered in Ukraine
Address: 30 Hradonachalnytska Street, Apt. 4, Odesa, Odesa Oblast 65052, Ukraine
Telephone: +380 95 080 66 41Privacy: privacy@yup.kids
Support: support@yup.kids
For users in the EEA, United Kingdom, or Switzerland, Yup is the data controller unless a specific notice states otherwise.

2. Captains, Players, and Consent

A Captain must be at least 18 years old or the age of legal majority where they live. The Captain creates and controls the family account, accepts the Terms and this Privacy Policy, and decides whether to create or invite a Player. Players do not need their own email, password, payment account, or Captain PIN and join through an invitation or family code provided by the Captain.

For children under 13 in the United States and children below the applicable digital-consent age in the EEA or United Kingdom, Yup obtains authorization through the Captain-controlled account and verified Captain email. Where law requires another verification step, Yup may require it before enabling the relevant Player feature.

3. Information We Collect

Captain Account Information
We may collect:

  • Name or display name.

  • Email address.

  • Password authentication data and security PIN data.

  • Profile image, family avatar, family name, and settings.

  • Language, country, and time zone.

  • Subscription status, transaction identifiers, renewal status, and entitlements.

  • Support messages and policy-acceptance or consent records.

  • Player Information

A Captain may provide or authorize a Player to provide:
Player name and age.

  • Avatar or profile image.

  • Family membership, invitation, or family code.

  • Missions, routines, and completion status.

  • Coins, XP, points, streaks, rewards, and progress.

  • A photo uploaded as proof of completing a mission.

  • Mission-proof photos are visible only to the submitting Player and the Captain.

  • Players do not need an email, password, payment account, or Captain PIN.

Device, App, and Usage Information

We may automatically collect:
Device type, operating system, app version, and language.

  • IP address and approximate location derived from IP address.

  • Push-notification token and notification preferences.

  • Server logs, diagnostics, crash information, and security events.

  • App interactions and update-delivery information.

  • We use this data only to operate, secure, support, and improve the Service.

  • Purchase Information

Apple or Google processes Captain subscription payments. Yup does not receive or store full payment-card numbers.

Website form data may include a name, email, message, browser information, IP address, and basic delivery or security logs.
Yup is not designed to collect a Player’s precise location, contacts, biometric identifiers, government identifiers, health records, school records, or financial-account details.

We do not use advertising identifiers, targeted advertising, or third-party advertising for Players.

4. How We Use Information

We use information to:

  • Create, authenticate, and secure Captain accounts.

  • Create, manage, and synchronize families and Player profiles.

  • Deliver missions, routines, rewards, coins, XP, and progress.

  • Process mission-proof photos for the Player and Captain.

  • Send enabled service and push notifications.

  • Deliver app updates and provide support.

  • Manage Captain subscriptions and family entitlements.

  • Prevent fraud, misuse, and unauthorized access.

  • Diagnose errors and maintain service reliability.

  • Comply with law and enforce our Terms.

  • We do not use Player information for advertising or marketing.

5. Legal Bases

Where GDPR, UK GDPR, or similar laws apply, we rely on:

  • Contract: to provide the Captain-requested Service.

  • Consent: for Player information where parental authorization is required and for optional communications, notifications, or cookies.

  • Legitimate interests: to secure, support, and improve the Service without overriding user rights.

  • Legal obligation: for tax, accounting, safety, consumer-protection, and law-enforcement requirements.

6. Service Providers and Sharing

We disclose information only as needed to operate the Service, comply with law, protect users, or complete a protected business transaction.

  • Hetzner: VPS, backend, and database hosting.

  • Cloudflare R2: family avatars, mission and reward images, banners, mission-proof photos, and email assets.

  • Resend: email verification, password resets, support, and service emails.

  • Expo: EAS Updates and push-notification delivery.

  • Apple and Google: authentication, app-store subscriptions, and iOS or Android push notifications.

  • Framer: public-website hosting and delivery.

  • PostgreSQL is our primary data store. Redis and BullMQ support queues and temporary operational data within Yup-controlled infrastructure.

  • Captains and Players within the same family see information according to their roles. Mission-proof photos are restricted to the Player and Captain.

We may disclose information to professional advisers, authorities when required by law, or a successor in a merger, financing, acquisition, or asset sale.

We do not sell personal information or share Player information for targeted advertising. We require providers to protect Yup data consistently with this Policy and applicable law.

7. Children’s Privacy and Captain Controls

Captains, meaning parents or legal guardians, control Player profiles and may:

  • Review personal information collected from a Player.

  • Correct or update Player information.

  • Remove a Player, delete the Player profile, or delete the Captain account and associated family data.

  • Withdraw consent or refuse further non-essential collection or disclosure.

  • A Player may also start deletion in Profile > Settings > Delete account.

Requests may be sent to privacy@yup.kids. We may verify the request through the Captain’s registered email or other reasonable account information.

8. Account and Data Deletion

To delete your Yup account in the app, open Yup, go to Profile, open Settings, tap Delete account, and confirm deletion.

  • You may also request deletion by emailing privacy@yup.kids from the email associated with the Captain account.

  • Deleting the account removes the Captain account, Player profiles, family data, missions, rewards, progress, and uploaded images.

  • Associated data is removed from active systems within 30 days. Backup copies may remain for up to 90 days.

  • Some records may be retained when required by law or for accounting, security, fraud prevention, disputes, or proof of consent. Queue and cache data expires or is cleared after processing.

Deleting a Yup account does not automatically cancel an Apple or Google subscription. The Captain must cancel it through the applicable app-store account.

9. Privacy Rights

Depending on location, users may have rights to:

  • Access personal information.

  • Correct inaccurate information.

  • Delete information.

  • Restrict or object to certain processing.

  • Withdraw consent.

  • Receive portable data or complain to a regulator.

  • Captains may exercise applicable rights for Players.

We will not discriminate against a user for exercising a privacy right.
To make a request, contact privacy@yup.kids.

10. United States Privacy Notice

Yup does not sell personal information or share Player information for cross-context behavioral advertising. Where state law applies, eligible users may request access, correction, deletion, or an appeal of a denied request.

11. International Transfers

Yup and its providers may process information in Ukraine, the EEA, the United States, and other countries where providers operate. Where required, we use standard contractual clauses or another approved transfer safeguard.

12. Security

We use access controls, encryption in transit, restricted administrative access, authentication controls, monitoring, backups, and secure-development practices. No online service can guarantee complete security. Report a suspected issue to security@yup.kids.

13. Notifications and Communications

Captains and Players may receive account, security, mission, reward, subscription, update, or reminder notifications. Push notifications can be disabled in Profile > Notifications or device settings. We do not send marketing communications to Players.

14. Third-Party Services and Links

The Service may link to Apple, Google, or other third-party services. Their own privacy policies govern information they collect independently.

15. Changes

We may update this Privacy Policy when the Service, providers, or legal obligations change. We will give notice of material changes and request new consent when law requires it.

16. Contact

Danylo Hennadiiovych Dubrovskyi, sole proprietor registered in Ukraine. 30 Hradonachalnytska Street, Apt. 4, Odesa, Odesa Oblast 65052, Ukraine. Telephone: +380 95 080 66 41. Privacy: privacy@yup.kids Support:

support@yup.kids Security: security@yup.kids