Privacy policy

Ythra — Privacy policy Version: 2026-10-12. 1. Controller YTHRA LLC, United States. 30 N Gould St, Ste R, Sheridan, Wyoming 82801. D-U-N-S: 147564924. Contact soporte@ythra.app for privacy requests, access, correction and deletion. Do not attach a full identity document to your initial email. 2. Data and purposes We use account email and authentication identifiers to provide access; profile name, username, image, biography, region, sports and category to display your profile; birth date and derived age to check the minimum age of 18; social relationships, invitations, attendance, bookings, results and ratings to provide community and activity functions; messages and uploaded media to provide communication; notification tokens and technical diagnostics to deliver alerts and investigate incidents. Optional height, weight and other sports details may appear in your community profile. Exact birth date, account email and verification documents are not public profile fields. Identity and qualification documents are processed when you request verification. Legacy parental-account data may remain pending review; it does not permit minors to join. Optional usage analytics is off by default and is controlled separately in Settings. Declining does not limit essential functions. 3. Location and route recording Map and nearby searches use location for the requested feature. You can deny system permission. Starting or resuming a route displays a separate notice before requesting permission or recording. Active recording collects precise GPS position, time, altitude and accuracy to calculate route statistics, including in the background or with the screen locked. Routes are stored on the device and sent to our servers when synchronized. New synchronized routes are private until you change visibility or share them. Pause or finish to stop recording. Operating-system restrictions, permission withdrawal and process termination may interrupt it. Shared copies hide points near the original start and end. The rest of a route may still expose places you frequent. Recipients may keep copies; this is not a guarantee of anonymity. 4. Device permissions Camera, files, photos and microphone support the upload or message you choose. Notifications deliver messages, invitations and activity alerts. Manage permissions in system settings. Revocation does not delete previously uploaded data. 5. Visibility Community profile fields can be read by authenticated users. Content, activities and routes follow their audience settings. Hosts and coaches access the information needed for their activities. Chats are intended for authorized participants. Verification documents are reviewed through authorized administrative access, not published as profile images. Authorized staff and infrastructure providers may process information to operate the service, resolve incidents, moderate reports and meet legal duties. 6. Providers and AI Ythra Firestore is configured in the European eur3 multi-region; the main file-storage bucket is in us-central1, United States. The reviewed server functions use us-central1. This does not mean that authentication, maps, notifications, email or AI process data exclusively in these regions. Google/Firebase provides authentication, databases, file storage, server execution, notifications and optional analytics. Google Maps supports maps and places. Workspace sends transactional account emails. If you use the AI assistant, your query and a limited part of its conversation history are processed by Google Vertex AI/Gemini. This does not send every private chat to AI. Bodygram processing is currently disabled. Services can process information outside your country, including the United States. We do not promise exclusive European residency. Ask support about the providers and safeguards applicable to your data. Relevant changes will be communicated. 7. Basis and choice We process necessary information to operate your account and requested services, and where applicable for security, abuse prevention and legal duties. Separate consent is requested for optional purposes and can be withdrawn. Contractual acceptance does not authorize all processing or device permissions. Applicable privacy rights depend on your jurisdiction. 8. Retention and deletion Account information and content are retained while your account is active or needed for the requested function. Request deletion in Settings or at https://ythra.app/delete-account without reinstalling the app. Access deletion is scheduled after 24 hours and can be cancelled in Settings before execution. For associated records outside the profile, ask soporte@ythra.app from your account email for a data-cleanup review. Complete cleanup of historical data is not yet automated for every category in this version. Uninstalling is not an account-deletion request. Deleting a conversation for yourself does not erase copies held by other participants. Information needed for a report, transaction or legal obligation is assessed separately. We do not promise immediate removal from provider backups or indefinite retention of every record. 9. Security and rights We use authentication, access controls and encrypted transport. Chats are currently not end-to-end encrypted. Encrypted local drafts do not make server messages inaccessible to infrastructure. Keep your credentials safe and report suspected incidents. Contact support to exercise access, correction, deletion and other applicable rights, including restriction, objection or portability. Proportionate identity checks may be required. You may contact the relevant authority. Ythra is for adults aged 18 or older. Report minors' accounts to support for review; historical accounts are not automatically deleted by this policy. Material changes will be communicated; new consent will be requested where needed.