Privacy Policy
Last updated: 2026-08-02
This Privacy Policy explains how Club YAP ("we", "us", "our") collects, uses, and protects your personal data when you use the Club YAP mobile application ("the App").
1. Who We Are
Club YAP is an independently developed app, not part of a larger language-learning company.
Contact: support.clubyap@gmail.com
2. Data We Collect
2.1 Account Data
When you create an account, we collect:
- Email address — used to identify your account and send verification codes.
- Authentication tokens — generated by AWS Cognito to keep you signed in securely.
If you sign in with Google or Apple, we receive your name and email address from those providers. We do not receive or store your Google or Apple password.
2.2 Learning Data
While you use the App, we store, per language you learn:
- Your daily video goal and chosen language(s).
- Which videos you have been shown and whether you watched them.
- Your quiz answers, scores, and pass/fail results (quizzes are multiple-choice, generated ahead of time from the video's content — no data leaves your device to be graded in real time).
- Your streak count and the date of your last completed quiz.
- Approximate location (derived from IP address, at a city level) used only in aggregate, operator-facing analytics — never shown to other users and not used to personalise content.
2.3 Subscription Data
If you subscribe to Club YAP Pro, we receive from RevenueCat:
- Your subscription status (active, expired, cancelled).
- The product tier purchased.
- We do not receive or store your payment card details. All payments are processed by the App Store (Apple) or Google Play (Google).
2.4 Analytics and Crash Reporting
We use the following to improve the App:
| Service | Purpose | Data sent |
|---|---|---|
| Our own analytics (self-hosted, EU) | Usage analytics (screen views, feature usage) | Anonymised event data, stored in our own AWS infrastructure in the EU — not sent to any third-party analytics company |
| Sentry | Crash and error reporting | Stack traces, device type, OS version |
Analytics data is anonymised. We do not send your quiz answers or email address to analytics services.
3. How We Use Your Data
We use your data to:
- Provide and improve the App.
- Assign personalised daily videos matched to your level.
- Calculate your streak and quiz scores.
- Manage your subscription status.
- Diagnose and fix bugs.
We do not use your data for advertising, and we do not sell your data to any third party.
4. Where Your Data Is Stored
All account and learning data is stored in AWS DynamoDB in the EU (eu-west-2, London) region. Data does not leave the EU.
Authentication is handled by AWS Cognito, also in the EU (eu-west-2) region.
5. Third-Party Services
The App integrates with the following third-party services. Each operates under its own privacy policy:
- AWS (Amazon Web Services) — Cloud infrastructure, authentication, database: aws.amazon.com/privacy
- Google Sign-In — Optional sign-in method: policies.google.com/privacy
- Apple Sign In — Optional sign-in method: apple.com/legal/privacy
- RevenueCat — Subscription management: revenuecat.com/privacy
- Sentry — Error monitoring: sentry.io/privacy
Video content is sourced from TikTok. When you tap to watch a video, it opens in an external browser. TikTok's own privacy policy applies to that interaction.
6. Data Retention
- Active accounts: Your profile, progress, and streak data is retained for as long as your account exists.
- Individual quiz-attempt records: Kept for 180 days from when you took the quiz, then automatically deleted. This doesn't affect your streak or overall progress, which are stored separately and kept for as long as your account exists.
- Deleted accounts: When you delete your account in-app, your profile and progress data is marked for deletion and permanently removed within 30 days (during this window you may contact us to reverse the deletion); your individual quiz-attempt records are deleted immediately, not held for 30 days.
7. Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights:
- Right to access — Request a copy of the personal data we hold about you.
- Right to rectification — Ask us to correct inaccurate data.
- Right to erasure — Delete your account in the App (Profile → Account → Delete Account) or email us. Data is purged within 30 days.
- Right to restrict processing — Ask us to pause processing of your data.
- Right to data portability — Request your data in a machine-readable format.
- Right to object — Object to processing where we rely on legitimate interests.
To exercise any right other than account deletion, contact: support.clubyap@gmail.com
We will respond within 30 days. If you believe we have not handled your data correctly, you may lodge a complaint with your national data protection authority.
8. Children's Privacy
The App is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
9. Security
We use industry-standard security measures including:
- HTTPS for all data in transit.
- AWS Cognito for secure, token-based authentication.
- No plaintext passwords stored anywhere in our system.
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
10. Changes to This Policy
We may update this policy periodically. When we do, we will update the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.
11. Contact
For any privacy-related questions or requests:
Club YAP
Email: support.clubyap@gmail.com