Privacy

What is collected

Your email address, given when you sign in. It is used to send the six-digit sign-in code and, if ever needed, to reach you about your account. Since 4 October 2026, a new account also receives a few onboarding emails from YLC — during its first weeks, never two on the same day; those about the Pass stop once a Pass is taken, and all of them stop if the account is suspended or deleted. They are sent by Resend, with click and open tracking switched off. Each one carries a one-click unsubscribe link, and the “Emails” card of your account turns them off or back on; sign-in codes, receipts and messages about your Pass are not affected.

What you choose to publish: display name, username, bio, and whether your profile is public. Your time zone, which decides which day a play belongs to and therefore your streak.

If you use Vivra, Motiv or Glyphi: what you tell the AI in the conversation, the details you give for your site, video or design — the name of your business, the contact details you choose to show, your colours —, the photos and files you add (logos, pictures, PDFs), your brand kit, and the sites, scripts, videos and designs made from them. Your brand kit (logo, colours, fonts, tone, details) is readable by the other apps of the suite you use, so they can apply it. A site you publish is public at the address you chose, until you take it offline.

If you use Ondra: the description of your business you give it, the posts you write or have written, the images and videos you upload or have made, when they are scheduled, and the social accounts you connect — their name, picture and the network's identifier, never your password. Once a post is published: its public numbers (reach, interactions) and the comments left under it, as the network reports them.

How you play: for each day and each door, what you played, when, and what it earned. The greens and XP ledgers, the projects you funded, and the draw tickets those produced.

What you do in the feed: your posts, the games you publish with the move log that allows them to be replayed, the hearts you give, and the accounts you follow. Who you follow is visible only to you; a public page shows a follower count and nothing more.

The public profiles you visit: one row per person visited and per day, so that they can be told somebody looked. They learn your name, not how many times nor at what hour. That trace is readable by nobody, serves only that notice, and is erased after thirty days. A profile set to private receives nothing and is not concerned.

The accounts you block, and the reports you send: the account concerned, the reason chosen and the sentence you add if you add one. A block is visible only to you. A report is read by the team and by nobody else — the person concerned learns neither that they were reported nor by whom: a report that can be seen is a report nobody dares to send.

If you connect a step source on the web: your daily step count, read from your device maker's servers, and the encrypted tokens that let us read it. In the phone app, the count is read on the device itself, from Apple Health or Health Connect, and only a daily total leaves it. Either way, a daily step count describes the physical activity of an identified person, so it is treated as health data under Article 9 of the GDPR. The legal basis is your explicit consent — the authorisation you gave at the maker or on the phone, and which you withdraw there or here.

In the phone app: an identifier the app draws for itself the first time it runs, which distinguishes two phones and authorises nothing; and, with every request that sends steps, an attestation issued by Apple or by Google that proves the request comes from this app, unmodified, on a genuine device. No advertising identifier is ever read. If you turn notifications on, the token your phone gives us to reach it.

If you take the YLC Pass: the subscription itself and the activation codes it entitles you to. No postal address is asked for — the subscription is digital, and nothing is shipped. No card is ever seen by us: a card payment is made on Whop's own page — or on Stripe's, for a subscription taken before 27 September 2026. A USDC payment made from the former YLC wallet before 28 September 2026 remains public on the Base network, like everything recorded there. For a subscription taken earlier through the App Store or Google Play, the store sends us a signed receipt carrying an identifier for your subscription and never your Apple or Google account. Whop, or Stripe, keeps for a card subscription the details it needs to charge and invoice it.

If you arrive through an affiliate link: the affiliate's Whop username, kept for thirty days in a cookie in your browser, then with your account once you sign in — the first affiliate stays attached to it. It is passed to Whop with each of your payments, so that Whop can credit that affiliate. Nothing else about you is sent to the affiliate by us.

If you become an affiliate: you connect your Whop account on Whop's own page; we keep its identifier and username with your account, and read from Whop the figures of your affiliate account to show them to you.

If you sign in to another app of the suite with your YLC account: the record of that sign-in — which app, and when you allowed it — kept by the sign-in service so that the app can recognise you next time.

If you link your Zealy account to take part in the community quests: the Zealy identifier of your account, kept with ours so that Zealy can ask whether a quest is done.

No analytics, no advertising identifiers, no tracking across other sites. Location only for Today's harvest, in the Walk door, and only while that screen is open: when you pick up an object, your position is sent once to check you are within 30 m of it, then discarded — it is never stored, logged or shown to anyone. We keep only which object you picked up, which is the same for your whole neighbourhood. Steps are counts, never a route.

Why

To run the game: the server replays every game from the moves it recorded, and that is what decides what a day was worth. Without them there is no score and no greens.

To keep it fair: the times at which a move was made are kept so that unusual patterns can be looked at by a person. They are never used to suspend an account automatically.

To show what you asked to show: a public profile exists because you set it to public, and shows only what this policy lists.

To count a day that was not played on a screen: steps are read on a schedule, or from the phone's own health store, because that is the only honest way to count them — nothing typed in a browser is ever accepted as a step.

To be sure a request comes from the app: the attestation says that the application is genuine and unmodified. It says nothing about who you are, it is checked once and kept no longer than the check.

To buy the impact a project funds: a purchase order exists because plastic has to be collected by somebody.

Who else sees it

Supabase hosts the database and handles sign-in. Vercel hosts and serves the application. Resend sends the emails, and receives the ones written to our contact address. Each of them processes data on our instruction and for no other purpose.

Crisp carries support: the chat bubble inside your account, and the messages sent to our contact address. It sees what you write, the address it comes from, your username, and the figures already shown to you in the sidebar — your greens, your XP, your level. It is a French company and it stores this in the European Union. There is no chat on the public site: it loads only once you are signed in — as a bubble on a computer, and on a phone or in the apps only when you open the chat from “Contact us”.

Microsoft Clarity measures how ylcnetwork.com is used — clicks, scrolling and the pages viewed, never what you type, which it masks — so we can improve the site. It loads only if you click “Accept” on the cookie banner, and nothing at all if you decline; the “Cookies” link at the bottom of every page changes your choice. It runs only on the public site, never inside your account or the apps. Microsoft keeps this data for up to 13 months.

We also measure the audience of our public sites ourselves — ylcnetwork.com, the app pages on ylcnetwork.com, thegreen.today, straby.app and the account sign-up page — without any cookie and without any third party: for each page viewed, the page, the site that sent you there reduced to its name (instagram, google…), the campaign tags of the link, the affiliate code if there is one, the language and the type of device. Your IP address is never stored: a daily fingerprint, computed with a random value that is deleted the next day, only lets us count each visitor once per day. Nothing is measured inside the apps, nor if your browser sends “Do Not Track”. Page views are deleted after 90 days and only daily totals are kept. When you create an account, we keep where it came from (the source, the campaign and the affiliate code of your first visit), to know which channels bring people to YLC.

Sentry receives error reports, so that we learn about a bug before someone has to write to us about it: what broke, on which page, and the kind of browser or phone. It receives no name, no email address and no IP address — the application is set to send none of them — and it records no screen. It stores the reports in the European Union, in Germany. We use it on the basis of our legitimate interest in keeping the service working.

Cloudflare Turnstile (Cloudflare, Inc., United States) guards the sign-in page: when you ask for a code, it checks that a person and not a program is asking. It receives technical signals from your browser and your IP address — never your email address — and answers with a one-time token that we pass on with your request.

Until 28 September 2026, each account received a wallet provided by Sequence (Horizon Blockchain Games Inc., Canada), on the Base network, and the creatures collected in The reef were recorded to it as non-transferable collectibles. This has stopped: no wallet is created and nothing is recorded any more. The address of a wallet created before that date remains stored with your account, and what was recorded on the public blockchain is permanent and visible to anyone who knows the address.

The pass and credit top-ups are paid on the website with Whop (Whop Inc., United States), on its own page, by card, Apple Pay or Google Pay. Whop is the merchant of record: it receives your email address, your country, the offer you chose, an internal identifier of your YLC account so that the payment reaches the right account, and the affiliate's username if you came through a link; it charges, invoices and collects VAT, under its own privacy policy. Subscriptions taken before 27 September 2026 are still handled by Stripe, or by Apple or Google for those taken through their store; a period paid in USDC before 28 September 2026 runs to its end with no provider involved. Card details never reach us. Greenspark buys the impacts a funded project pays for. Tremendous delivers a draw prize to the winner's email address.

The agency that invited you. If you create your account through an affiliate's link, a box — ticked by default, which you can untick — lets that agency see your first name, your email address and, if your showcase lists one, your WhatsApp number, so it can contact you to help you get started. Whether or not you tick it, the agency sees your username, your agency's name, your sign-up date, the status of your Pass and how far you have got (agency named, showcase published, first client). It can also have YLC send you short messages of encouragement by email (three a week at most); your replies only reach it if you shared your details. You can withdraw or give this consent at any time in Settings → Profile, with immediate effect, and stop its messages from the link at the bottom of each one. Accounts created before 15 October 2026 share nothing unless they choose to.

Steps are read on the phone, from Apple Health or Health Connect, never written to: a one-way authorisation you grant in the phone's settings and can revoke there at any time. Nothing leaves the device but a daily count.

Apple and Google answer the attestation: we ask them whether this application, on this device, is genuine. They answer about the app and the device, never about you.

If you connect a step source on the web, Google (Google Health) or Oura, whichever you connected, sends us your daily step count: you authorised it on their own page, and you can disconnect it from the app or from them.

If you turn notifications on, Apple (on an iPhone) or Google (on an Android phone) delivers them: they receive the text of the notification and your phone's token, nothing else from us.

In the Post door, the idea you type for your image is sent to OpenAI (United States), which checks it against its usage rules and draws the image. It receives the idea only — never your name, your email address or your greens.

The map of Today's harvest is drawn with tiles from OpenFreeMap, which your browser fetches: like any server that sends an image, OpenFreeMap sees your IP address and which area of the map is shown.

Zealy runs the community quests. When it asks whether a quest is done, it sends us the identifier of your linked account and we answer yes, or no with a sentence it shows you; it receives nothing else about you from us.

Straby, published by the same company, YLC NETWORK FZC, is part of the suite of apps. For people who sign in to it with their YLC account, and for them only, it receives: your YLC account identifier, your email address, your username, whether your pass is active — its tier and, where there is one, the date it is paid up to — and which apps of the suite it unlocks; and, when you use AI in Straby, the balance of your AI credits, which it reads and spends from. It never receives your payments, your card or your greens. It receives this when you sign in, and may ask for it again later, server to server, to keep your pass up to date without you having to sign in again. We send it because you asked to use your account there.

What you do in Straby as an account holder — your pages, your cards, your contacts — is Straby's own data, described in its own privacy policy at straby.app/legal/privacy; what concerns the visitors of your pages is described below, in “If you visit a page made with a YLC app”. An app outside the suite would receive nothing without first asking your consent on a YLC page.

Vivra, Motiv and Glyphi, published by the same company, use AI models: Anthropic (United States) to hold the conversation and write the site, the script, the animation or the design, and OpenAI (United States) to create images and, in Motiv, the voice-over. They receive what you write in the conversation and the details you give for your site or video — never your account's email address, your payments or your greens — and, under their commercial terms, neither uses it to train its models. If you ask Vivra to show your Google reviews, Google receives the name of your business to find them. We send this because you asked for the site or the video to be made. Their screens, and the sites and videos they make, load fonts from Google Fonts — and, in Motiv, animation scripts from jsDelivr — in the browser that displays them: those servers see its IP address.

Ondra publishes through bundle.social (United States), which holds the approved applications with Meta, LinkedIn, TikTok, Pinterest and Google: it receives the posts you approve and their images and videos, and keeps the connection to the accounts you link. Ondra writes with Anthropic, makes images with OpenAI and videos with Higgsfield (United States); they receive the description of your business and what you ask for — never your account's email address or your payments.

Canva (Canva Pty Ltd, Australia), only if you connect it from your YLC account (Account → Canva): the YLC apps then use your Canva account on your behalf. When you tap “Open in Canva” in the Studio or in Glyphi, the file you chose is sent to your Canva account and a design is created there. When you open the Canva picker in Straby, Ondra or Tapio, we read the list of your designs (title and thumbnail) and, for the design you import, its export, which we copy into your YLC storage. Nothing is sent or read without your action, and never in the background. We keep your Canva connection keys encrypted, with your Canva display name and identifier; your Canva password never reaches us. You can disconnect Canva at any time from your YLC account, which revokes our access at Canva and deletes the keys; designs already in Canva stay in your Canva account, under Canva's own privacy policy.

Memra, published by the same company, sends a notetaker into the meetings you choose (Google Meet, Zoom, Teams) through Recall.ai (Recall.ai, Inc., United States; data processed and stored in its European region, Frankfurt), which records the meeting and transcribes it by speaker; Recall.ai acts as our processor. The transcript is then sent to Anthropic (United States) to write the summary, the decisions, the tasks and the follow-up email; it receives the transcript, the meeting title and your first name, never your email address. The notetaker joins under the name “Memra · your first name” and announces in the meeting chat that the meeting is recorded and transcribed — you remain responsible for informing the participants and obtaining their agreement where the law requires it. Recordings, transcripts and summaries are kept 90 days, then deleted automatically; you can delete a meeting at any time, which also deletes its recording at Recall.ai. Nothing is sent by email for you: the follow-up email is copied or opened in your own mail app.

Relka, published by the same company, gathers in one address book the contacts your YLC apps already hold (your Straby page, your shop, Cadra, Semblo, Memra) and those you import; they stay in your account and are only shown to you. Emails you send from Relka leave through Resend (Resend, Inc., United States; European region, Ireland) from a YLC address in your name, with your own address for replies; when you ask the AI for a summary or a reply, Anthropic (United States) receives that contact's history (forms, messages, purchases, notes), never your account's email address, and does not use it to train its models. WhatsApp messages leave from your own phone; Relka only notes them. Task reminders are emailed to you. You can delete a contact and its whole history at any time.

Clama, published by the same company, helps you ask your customers for Google reviews. To link your business, Clama queries the Google Places API (Google LLC, United States) with the name you type; it keeps only the Place ID, and a daily record of your own rating and review count. Google reviews are read from Google each time they are shown and are never stored. When you ask a customer for a review, Clama keeps the name and email address you give, sends the request through Resend (Resend, Inc., United States) from avis@ylcnetwork.com, and records whether it was opened, whether the Google button was used and any private note the customer writes; email addresses are erased after 180 days (a one-way fingerprint remains, so that someone who unsubscribed is never asked again), and you must only ask people who were really your customers. To draft a reply to a review, the review text, its author's name, your business name and your brand voice are sent to Anthropic (United States); they are not used to train its models.

Apela, published by the same company, answers your business phone with an AI agent. Calls are handled by ElevenLabs (Eleven Labs, Inc., United States; speech recognition, voice and the language model, Google Gemini through ElevenLabs) and carried by Twilio (Twilio Inc., United States; the phone number and the call). Every call starts by telling the caller that they are speaking to an AI and that the call is recorded and transcribed. We keep the transcript, the caller's number and the summary written by Anthropic (Anthropic PBC, United States) for ninety days, then delete them; ElevenLabs keeps no audio and deletes the transcript after thirty days. The summary is emailed to you through Resend. To give you a number we pass your business's legal details to Twilio, as telecom regulators require.

Rispa, published by the same company, answers the messages your customers send to your WhatsApp Business number with an AI assistant. You connect your number through Meta's official sign-up (Meta Platforms Ireland Ltd / Meta Platforms, Inc., WhatsApp Business Platform); Meta gives us an access token for your WhatsApp account only, which we keep encrypted. Each message is written by Anthropic (Anthropic PBC, United States) from the business details you entered; voice messages are transcribed by OpenAI (OpenAI, L.L.C., United States) when you allow it, and the audio is not kept. The first reply of every conversation says it comes from an AI assistant. We keep the conversations ninety days, then delete them; Meta keeps its own copy under its terms. You can disconnect your number at any time.

Montra, published by the same company, is a video editor that runs in your browser. The media you import (videos, images, sounds) are stored by Supabase in the European Union, in a private space of your account read only through short-lived signed links; your projects are saved there too. Exporting a video is done entirely in your browser: the finished file is never sent to us. When you ask for automatic captions, only the soundtrack of your project is sent to OpenAI (OpenAI, L.L.C., United States) to be transcribed with the timing of each word; it is not kept by us after the transcription and is not used to train their models. You can delete your media and projects at any time.

Vezzo, published by the same company, records your screen, your camera and your microphone in your browser and gives you a link to share. Recording starts only after you choose what to share in your browser's own window, and stops when you press Stop. The video is uploaded while you record and stored by Supabase in the European Union, in a private space of your account; it is shown only to the people your sharing setting allows (anyone with the link, the YLC accounts you invite, or anyone with the password), through short-lived signed links. When someone watches, we count the view without keeping their IP address (a daily fingerprint only); if they are signed in with YLC, you see their name. Viewers who react or comment do so under their YLC name, and you may add a person who commented to your Relka contacts with their name and e-mail address. When you ask for the AI transcript, only the soundtrack is sent to OpenAI (OpenAI, L.L.C., United States) and the transcript to Anthropic (Anthropic PBC, United States) for the title, summary and chapters; they keep nothing for training. E-mails about views and comments are sent through Resend and can be turned off. You can delete a video at any time; its link then stops working.

Didra, published by the same company, lets a creator publish online courses and a members area. When you create a course, its lessons (videos, texts, PDF files, quizzes) are stored by Supabase in the European Union, in a private space read only through short-lived signed links given to the course's members. When you join a course, the creator of that course sees your name and e-mail address, your progress and your quiz results, and the members of the course see the name and messages you post in its community; the creator can hide or delete them. A paid course is sold by its creator, who is the seller: the payment is processed by Whop (Whop, Inc., United States) on the creator's own Whop account, which receives your payment details, and YLC takes no fee (only Whop's payment fees apply). If a creator asks for a course outline written from a sentence, that sentence is sent to Anthropic (United States). A completion certificate shows the name you choose, at a public address that only you and the creator know until you share it.

Cadra, published by the same company, gives you a public booking page. When someone books a meeting with you, we keep the name, e-mail address, time zone, message and answers they give, so that you see them in your calendar and both of you receive the confirmation, the reminders (24 hours and 1 hour before) and the cancellation or rescheduling e-mails, sent by Resend (Resend, Inc., United States; European region). The person who books receives a private link to cancel or reschedule. If your calendar is connected, the booking is written into it with the other person as a guest. The address of a person who books is never added to any mailing list. A visitor's IP address is never stored: a daily fingerprint only limits repeated attempts. Background photos come from Wikimedia Commons, with their author and licence shown on the page.

Your calendar (Google Calendar or Outlook), only if you connect it from your YLC account (Account → Calendar). The connection is held by Composio (Composio, Inc., United States), our processor, which stores the access granted by Google or Microsoft and passes our requests on: the Google or Microsoft consent screen therefore names Composio. We read the events of your main calendar — time, title, meeting link, whether you organise or declined it — when an app needs them: Memra, to send its notetaker to the meetings you choose (about once an hour, and again just before a meeting it joins), and Cadra, to show your free slots; Cadra writes only the bookings you accept, with a Meet or Teams link. Events are not kept by YLC beyond what the app shows you (Memra keeps the upcoming meetings of the next 14 days, deleted two days after they end). Memra's and YLC's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: it is never used for advertising, never sold, and never read by people except with your consent, for security or where the law requires it. You can disconnect at any time from your YLC account, which removes the connection at Composio, or remove access in your Google or Microsoft account.

Nothing is sold, rented, or shared with advertisers. Public profile pages are, by definition, visible to anyone — that is what making a profile public means, and it can be turned off at any time from the profile screen.

If you visit a page made with a YLC app

This part is for people who visit a public page made by a user of a YLC app — a Straby page, an agency page, an AI twin, a shop — with or without an account. For what you type into such a page, the user who owns it decides what is asked and what is done with it: we hold it on their behalf, we do not use it for our own purposes, and we do not sell it.

On a Straby page, each view and each click is recorded for the page owner's statistics: a random identifier kept in your browser, the type of device, the site you came from, and an approximate country and city deduced from your browser's time zone — your IP address is not used for this. These records are deleted after 400 days. If you left your details on the page and come back later from the same browser, the owner sees that this contact came back.

If you fill in a form on a Straby page — exchanging contact details, subscribing, asking a question — what you type, and your agreement to receive the owner's messages if you tick it, is stored as a contact of the page owner, who is told by email. Depending on the tools the owner has connected, it is also passed to their CRM (HubSpot or Salesforce), Slack, Google Sheets or their own webhook, and to Mailchimp only if you gave that agreement. It stays until the owner deletes it or closes their account. To exercise your rights over it, write first to the page owner; you may also write to us.

If you ask an agency for a quote from its page, your name, email address, activity and request go to that agency's client list and its YLC contact book (Relka), and the agency is told by email. Your IP address is used only as a one-way fingerprint, to limit repeated requests, and is not stored.

If you talk to an AI twin (Semblo), on its own page or inside another page, your browser receives a cookie holding a random identifier, valid for one year, so that the conversation carries on from one message to the next. Your messages and the twin's answers are kept, and the expert who owns the twin can read them, together with your country as our host derives it from your connection and, if you give them, your first name and email address. Your messages are sent to Anthropic (United States) to write the answers; a voice call goes through ElevenLabs (United States), and its transcription through fal (United States). No automatic deletion is scheduled: ask the expert, or us, to delete a conversation.

If you buy a product from the shop of a Straby page, you pay on the seller's own Whop page (Whop, Inc., United States), which receives your payment details: the seller is the merchant. We record the sale — your email address, the product, the amount and Whop's payment reference — so that the product can be delivered to you and the sale appears to the seller.

Reporting content

If you report content from our report page (account.ylcnetwork.com, “Report content”), we keep the address you report, the app concerned, the reason you chose, the details you write, the language of the page and, only if you give it, your email address. Your IP address is never stored: a one-way fingerprint of it only limits repeated reports. The report is read by the YLC team, which is alerted by email, and by nobody else: the person or page you report is not told who reported it, and your email address is used only to reply to you about the report. No automatic deletion is scheduled.

How long

As long as the account exists, except for the trace of a profile visit, which is erased after thirty days, and Memra meetings (recording, transcript, summary), deleted after ninety days by a nightly task, and the view and click statistics of Straby pages, deleted after 400 days. There is no other automatic purge scheduled, and saying otherwise would be an undertaking that nothing enforces.

Your rights

If the GDPR applies to you, you may ask for access to your data, correction, erasure, a copy in a portable form, or restriction of processing. Display name, username, bio, time zone and profile visibility can be corrected yourself from the profile screen.

You delete your account yourself, from Settings → Delete my account, in your YLC account: it is deleted at once, with what it holds in every app, after your Pass is cancelled at Whop. If you took part in a draw already held, it is anonymised rather than deleted — your address, name, bio, username and photo are erased, and the row proving the draw stays: a draw already held has to remain verifiable.

If you have no YLC account — you only left your details on a page made with a YLC app — or if you connected Facebook, Instagram or WhatsApp and removed the app from your Facebook settings, the page “Delete my data” (account.ylcnetwork.com, linked at the bottom of this page) explains what to do and lets you send a request. Each request gets a confirmation code to follow it, and is answered within one month at most.

You may also complain to your local data protection authority.

Contact

Write to support@ylcnetwork.com. It reaches a person, not a queue.

Governing language

This document exists in several languages. **The English version governs**: it is the language it was drafted in, and the language of the applicable law. The other versions are courtesy translations; in case of divergence, the English version applies.

This clause does not deprive anybody of the mandatory provisions of their national consumer law, nor of the right to bring proceedings before the courts of their place of residence.