Privacy Policy
Your location. Your rules. YouAt is built around one principle: nobody sees your location except the people you choose. Here's exactly what that means.
1. What we collect
The minimum needed to run YouAt: your phone number (for login), your name and profile emoji, and — only while you're actively sharing — your device's GPS coordinates, approximate battery level, and the times these were last updated. No contacts, no messages outside the app, no browsing history, no health data. No precise data while sharing is paused (Ghost Mode).
2. Why we collect it
Your location is shared only with the people you've explicitly added to your groups. That is the entire product. Aggregated, non-identifying data (crash counts, session lengths) is used to fix bugs and improve the app.
3. How long we keep it
- Free plan: current location only — no history
- Family plan: last 7 days
- Family Plus / Lifetime: last 30 days
Older data auto-deletes. Account deletion removes all data (location history, group memberships, chat messages, alerts) permanently within minutes.
4. Who we share it with
Only members of the groups you have joined can see your live location. We do not sell your data. We do not share your location with advertisers, insurers, employers, or any third party.
5. SMS consent (A2P / Twilio-required)
By entering your phone number on the YouAt sign-in screen and tapping "Continue", you consent to receive a one-time SMS verification code from YouAt. Message and data rates may apply. Reply STOP at any time to opt out. Reply HELP for help. We do not send marketing messages. Verification codes are transactional and required to secure your account. Full opt-in flow and sample message: /api/sms-consent.
6. Children under 13 (COPPA)
YouAt is not intended for children under 13 to sign up on their own. A parent or legal guardian must create the account and consent to location sharing on their child's behalf. Parents can request data export or deletion of a child's account by emailing privacy@youat.app.
7. Your rights
You can (a) pause sharing at any time from Settings (Ghost Mode), (b) leave any group at any time, (c) permanently delete your account and all data from Settings → Delete Account, (d) request a copy of your data by emailing privacy@youat.app.
8. Security
Data transmitted over TLS. Location data stored on encrypted database volumes. Short-lived authentication tokens (7 days). No passwords stored — authentication via one-time codes only.
9. Business & contact
YouAt is operated by YouAt LLC. Email privacy@youat.app. Response within 5 business days.