Privacy Policy

Yup Nope mobile app · Effective October 16, 2026

1. Who we are

Yup Nope (“the app”, “we”, “us”) is operated by Dise Labs LLC, 5900 Balcones Dr, Ste 100, Austin, TX 78731, United States. Questions or requests about your data: support@yupnope.app.

2. What we collect

Your guest account (everyone)

When you first open the app, it creates an account for you automatically. That account has a random ID and no name, email or other personal details. A sign-in token is kept in your phone’s secure storage (the iOS Keychain or Android Keystore) and a matching session record is kept on our server.

Session security details

With each session our server records the IP address and the device/app type (“user agent”) it was created from. We use these only to keep accounts secure and to detect abuse.

If you choose to sign in with Apple or Google

We receive what you allow Apple or Google to share: an account identifier from that provider, and usually your name and email address. With Apple you can hide your email; we then receive a private relay address from Apple instead. We never receive your Apple or Google password.

Requests to our servers

Like any internet service, our servers and our network provider see the IP address of your device when the app connects. We use it to deliver the service and to limit abusive traffic (rate limiting).

If you subscribe (Pro)

Payments are handled by Stripe. Your card details go to Stripe, never to us. We keep your Stripe customer ID and your subscription's status and dates, so the app knows whether you have Pro. To make sure each person gets the free day only once, we keep a scrambled code derived from the card that started a free day (not the card number); it cannot be turned back into card details, is not linked to your account, and is kept for 2 years — also after you delete your account. Stripe keeps payment records as the law requires; see Stripe's privacy policy.

Your age range

The app asks Apple or Google for the age range they have already verified for your account (for example “adult” or “under 18”), so that the app is not used by minors. This check happens on your phone; we do not store your age range or your birthdate on our servers.

What we do not collect

No contacts, photos, precise location, advertising identifiers, payment information, trading or bank accounts, health data, or any analytics or tracking data. The market information you look at in the app (odds, prices, charts) is the same for everyone and is not linked to you.

3. How we use it

• To create and run your account and keep you signed in.
• To keep the service secure and prevent abuse (for example, limiting how often an address can create accounts).
• To meet legal obligations and respond to lawful requests.

We do not use your data for advertising, we do not build profiles about you, and we do not sell your personal information or share it for cross-context behavioral advertising.

4. Who we share it with

Only with service providers needed to run the app, and only for that purpose:

• Cloudflare — our network and security provider. All connections pass through it, so it processes your IP address and request details.
• Apple and Google — only if you choose to sign in with them, and for the age-range check described above. Their own privacy policies apply to what they do.
• Stripe — if you subscribe: it processes your payment and card details.

Our servers are run by us in the United States; no other hosting company holds your account data. Every provider that processes data for us is bound to protect it at least as well as this policy does. We may also disclose information if required by law, or if the app is transferred to a company we form or to a new owner — in which case this policy continues to apply to your data.

5. How long we keep it

• Account: until you delete it. A guest account that has had no active session for 60 days can no longer be reached by anyone, so we delete it.
• Sessions (with their IP address and device type): until you sign out, or 60 days after last use, whichever comes first.
• Rate-limiting records (an IP address range per request type): 24 hours.
• Subscription records: until you delete your account (deleting cancels the subscription first). Free-day card codes: 2 years.
• Backups of our database are kept for up to 14 days and then overwritten.

When you delete your account, it is removed from our live database immediately and from backups within 14 days. If you signed in with Apple, we also ask Apple to remove the link between your Apple ID and the app.

6. Your choices and rights

• Delete your account in the app: Account → Delete account.
• Sign out at any time; the app then continues with a new guest account.
• Remove the app’s access from your Apple or Google account settings (Apple: Settings → your name → Sign in with Apple; Google: your Google Account → Security → Third-party connections).
• Ask us to tell you what we hold about you, correct it, or delete it, by emailing support@yupnope.app. We answer within 45 days.

Depending on where you live (for example California, Texas, or other US states with privacy laws), you may have these rights by law. We offer them to everyone, and we will not treat you differently for using them. Because we do not sell or share personal information for advertising, there is nothing to opt out of.

7. Children

The app is for adults (18 and over). We use the age range verified by Apple or Google to keep minors out, and we do not knowingly collect personal information from anyone under 18. If we learn that we have, we delete it.

8. Security

All connections are encrypted (HTTPS/TLS). Sign-in tokens are kept in your phone’s secure storage, our account database is not reachable from the internet, and access to our servers is restricted. No system is perfectly secure, but we work to protect your information and keep only what we need.

9. Changes

If we change this policy we will update the date above, and tell you in the app before significant changes take effect.

10. Contact

Dise Labs LLC · support@yupnope.app