Privacy Policy

yooh is an iPhone app for meeting real people nearby. You can also join its waitlist on our website with your email. yooh used to work by text, and texting is now winding down. We collect what we need for each: your email for the waitlist; if you use the app, your phone number, birthday, profile, photo and selfie, and the messages you send friends there; and, if you used yooh by text, your phone number and the profile you set up. We don't sell your data. We never show your phone number to other users. You can delete your account in the app, or ask us to delete it or take you off the waitlist, at any time.

yooh is run by Wemu Inc. In this policy, “we”, “us” and “our” mean Wemu Inc.

• App waitlist. Your email, your city if you pick one, the invite code if you came from a friend's link, and when you joined. Your IP address is used briefly, in memory, to block spam, and is never stored.
• Phone number. Needed to sign you in to the app with a code we text you, and, if you used yooh by text, to send and receive texts. Never shown to other users.
• The app. If you use it: your date of birth, your answers to its questions, your photo and selfie, a record of each time you sign in, the messages you send your friends there, and who invited you, if a friend did. The section below, “The yooh app”, says exactly what and for how long.
• Profile fields. First name, age, gender, city/suburb, a short bio, a photo, and what you're into. If you added them, your email, Instagram or LinkedIn, which are kept with your profile and not shown to people you're introduced to.
• Preferences. What you're looking for, ages, distance, date styles. Used only to suggest intros.
• Verification selfie. Used only to check it's really you, against your profile photo. Never shown to other users.
• Text message history. We keep records of the texts you sent us and the texts we sent you, to operate the service and meet regulatory obligations. The record of a sign-in code text has the code blanked out.
• Past payment data. yooh no longer takes payments. For purchases made before 7 October 2026, card details went directly to Stripe. We never saw them. We keep only the Stripe customer ID and the transaction outcome.

This is what the app keeps, and why.

• Your number. You sign in with your mobile number (from Australia, the Philippines or the US) and a 6-digit code we text to it. Before sign-up opened to everyone, we kept a list of the numbers we'd invited, with a short note for the yooh team. We don't use it any more.
• Sign-in codes. A code works once, for 10 minutes. We never store the code itself, only a scrambled version (a keyed hash) to check it against, and our record of the text has the code blanked out. To stop floods of codes, we keep a scrambled version of your IP address with each code, and count the codes sent from it in the last hour. Codes and the scrambled IP addresses kept with them are deleted a day after they're sent.
• Staying signed in. One cookie, yooh_session, keeps you signed in. It holds a random key and lasts until about 90 days after you last used the app. We store only a scrambled version of the key, with when you signed in and last used the app, and your device's browser description (its “user agent”: the kind of device, its system version and the browser). Signing out ends the session; we keep its record until you delete your account. We don't use cookies for advertising or tracking.
• Your birthday. We ask for your date of birth to check you're 18 or over and to show your age. Other members see your age, never your birthday. Once saved it can't be changed in the app; email [email protected] if it's wrong.
• Your answers. Your first name, city, suburb, gender, what you're here for (dates, new friends, hangs), who you'd like to date (only if you pick dates), 3 to 5 interests, and a line about you if you write one. They're saved as you go, so you can pick up where you left off. Your gender and who you'd like to date are used only to suggest intros and groups (a group for dates is put together so everyone in it has people they'd like to date) and aren't shown on your profile. We look up your suburb with OpenStreetMap Nominatim to find people and spots near you.
• Your photo. Before we store it, we save it again as a new image, at most 1600 pixels on its long side. That leaves behind its location and every other piece of hidden data the original file carried. It's kept at a long, random web address: we only show it where your profile is shown, but anyone who has that address can open it. When you replace your photo, the old one is deleted, and our servers stop showing it within an hour.
• Your selfie. Saved the same way, so it carries no location either. It's private: only you, signed in, and the yooh team can open it. A person on the yooh team compares it with your photo, usually within a few hours. It's never shown to other members, and no outside service checks it. We keep your selfies until you delete your account.
• Who sees your profile. When we suggest you to someone as an intro, or introduce you to them, they see your first name, age, suburb and city, interests, your line, what you're here for and your photo, with a Verified badge once your selfie is checked. When you join a hang, the others in it see your first name, photo and Verified badge; when you host one, people nearby who can join it see your first name and what you called it, if you named it yourself. When we put you in a group (a group of 4 or a big group), the others offered a place in it see your first name, photo, age, the interests you share and your Verified badge, and whether you've said you're in. We never tell anyone you passed: your place just goes to someone else. In a group for dates, the people in it can tell from who's in it what kind of people it was put together for. Votes on a group's spot and time are anonymous: the group sees only how many votes each one has, never who voted for what. What friends see is under “Friends and chat” below. Never your phone number, birthday, selfie, gender or who you'd like to date.
• Friends and chat. After you meet someone through yooh, you can each tap Keep in touch. If you both do, you become friends in the app: you each see the other's first name, photo and Verified badge, and where and when you met, and you can send each other text messages. If only one of you taps it, nothing happens and nobody's told.
• No-shows at hangs. After a hang, people who were there can privately mark anyone who didn't come. When 2 or more of them, and more than half, mark the same person, that person has 7 days off joining or hosting hangs (if they said they were there, we look at it ourselves first). We never say who marked you, and we keep the marks with the hang's record.
• Your messages. We keep the messages you and a friend send each other so you can both read them. Only the two of you can read your chat. The yooh team reads it only if one of you reports the other from it: a copy of the reported person's recent messages there (or of the message reported, with a few either side of it) is then kept with the report. When a friend sends you a message, we tell you they did, never what they wrote. If either of you removes the other as a friend, blocks or reports them, or we suspend either account, the chat ends for both of you, and we delete its messages 30 days later. If either of you deletes your account, your chat and its messages are deleted straight away.
• Invites. Your invite link has a code that's yours, and anyone who opens it sees your first name. If they then make a new yooh account, we note that you invited them: you see their first name, when they joined, and when they first met someone (that's when you each get an extra intro). We keep who invited whom with our intro records. Opening an invite link keeps its code in a cookie, yooh_ref, for up to a week, so we can tell who invited you; it's cleared once you sign in. You can also type a friend's code when you sign up. If either of you blocks or reports the other, they show to you only as “Someone” who joined, with nothing else about them.
• Pausing. You can pause your profile in Me. While it's paused, we don't suggest you to anyone or put you in a group, and you can't ask for intros or groups, or join or host hangs. Plans you've already made, a group you were already offered a place in (or are in), your friends and your chats carry on. You can unpause any time.
• Notifications. We tell you in the app about your intros, groups, plans, hangs, friends and messages, and with push notifications if you allow them on your phone. You can turn push notifications off in Me; you'll still see everything in the app.
• Push tokens. To send push notifications we keep a push token for each phone you're signed in on, at most 5, and delete a phone's token when it signs out. Pushes go through Apple's push service (APNs) and can show first names, like who you're meeting.
• Server logs. Our servers log each request to the app (the page, whether it worked and how long it took) and any errors (the page, your device's browser description and sometimes your account ID, with cookies, sign-in keys and IP addresses taken out). They never hold your messages. DigitalOcean keeps only the most recent logs, for a short time, so we can fix problems; we don't copy them anywhere else.
• App use. While the app is open it checks in with our servers every 15 seconds or so. From that we keep, for each day, how long you used the app, how many separate times, and when you last used it that day. Never which screens you open or what you do there. We look at it only in totals across members, to see how yooh is doing, and keep it until you delete your account.
• Deleting your account. In the app, go to Me, then Delete account. It asks twice, then happens straight away: your profile, answers, birthday, photos, selfies, friends and chats (with their messages), app use, sign-in sessions and any code still open are erased, you're signed out everywhere, and your number is released. Our record of each code text, with the code blanked out, stays with our text message logs. We also keep a scrambled version of your number (a keyed hash, never the number itself) and nothing else with it, so that a new account on the same number can't earn invite intros again. Your number stays on the invite list until we take it off; email [email protected] and we will. What we keep after a deletion is under “How long we keep it”.

• Email you once, when the app is out, if you joined the waitlist. No confirmation email and no newsletter. We haven't chosen an email provider yet; we'll name it here before that email goes out.
• Sign-in codes are texted to anyone who signs in to the app. Other texts are replies to people who text us (to unsubscribe, ask for help or raise a safety concern, and, if you don't use the app, a note that texting is winding down), and, for people who used yooh by text, texts about intros and meetups they already have (the spot, the time, reminders). We don't sign anyone up by text any more.
• Sign you in to the app and keep you signed in.
• Introduce you to people and group meetups nearby.
• Manage your free intros and handle refunds on past purchases.
• Detect abuse, spam, and fraud.
• Keep people safe, including acting on reports.
• Share information with police or emergency services when the law requires it, or when we believe it's needed to protect someone's life, health or safety.
• Count sign-ups, intros and meetups, in totals only, to see how yooh is doing.
• Count how often and how long you use the app each day (a daily total, never which screens you open), to see how yooh is doing.

• We don't sell your data.
• We don't show your phone number or your waitlist email to other users.
• We don't use your profile for advertising on other platforms.

If you used yooh by text, your first name, age, suburb/city, bio, traits, date styles and photo are shown to people we suggest to you as intros, so you can each decide, with a Verified badge once your selfie check is done. If you join a group meetup, the other members see your first name. Your phone number is never shared with other users, not your match, not anyone, at any stage. Your waitlist email is seen only by the yooh team.

In the app, the people we suggest you to or introduce you to see your profile, the others in a hang you join see your first name and photo, people nearby see your first name on a hang you host (and what you called it, if you named it yourself), and your friends see your first name, photo and where you met; “The yooh app” says exactly what each of them sees. In a group we put you in, the others see your first name, photo, age, the interests you share and your Verified badge, and only how many votes each spot and time has, never who voted for what. The yooh team can see your account, to run yooh and keep people safe. The yooh team doesn't read your chats; it sees what was said only when one of you reports the other from a chat, through the copy kept with that report.

• DigitalOcean: application and database hosting (Sydney region), and our server logs.
• Kudosity (formerly Burst SMS): text message delivery, including app sign-in codes.
• Apple: delivers push notifications to your iPhone, through its push service (APNs).
• Anthropic: helps with wording, for yooh by text only. It read free-form replies while yooh worked by text, polishes the wording of some texts we send about intros, suggests a rewrite of your bio when you ask for one on the sign-up page we texted you, and helped rank and explain the people we suggested by text (from first names, bios, interests and suburbs, never your number). The app sends it nothing about you. Requests are sent over their API for processing; we don't store anything with them beyond the request.
• Voyage AI: may turn the line about you (never your name or number) into numbers we compare to suggest people with things in common. When we don't use it, that's done on our own servers.
• OpenStreetMap Nominatim: turns the suburb and city on your profile into rough map coordinates, to find intros and spots nearby.
• Stripe: processed past payments; records kept for refunds and tax.
• We haven't chosen an email provider yet. We'll add it here before we email the waitlist.

Each of them uses your data only to do this work for us, and protects it at least as well as this policy does.

Our database is hosted with DigitalOcean in their Sydney (syd1) region. Backups are stored in the same region.

Under the Australian Privacy Act and the Australian Privacy Principles you can:

• Ask for a copy of the data we hold about you.
• Correct anything that's wrong.
• Delete your account, or come off the waitlist: email [email protected] (with the mobile number your account uses, or the email you joined the waitlist with) and we'll do it within 30 days. Deleting your account erases your profile, preferences, photos and verification selfies, cancels your open intros and meetup seats, and releases your number. It can't be undone. In the app you can also delete your account yourself, straight away, from Me.
• Unsubscribe from texts at any time, by replying as our texts describe. That stops the texts; it doesn't delete anything.
• Complain to us, and if unhappy, to the Office of the Australian Information Commissioner.

• Waitlist entries: until you ask us to remove yours, or we close the waitlist.
• Your account: until you delete it in the app or ask us to. When it's deleted, your profile, photos, selfies, preferences, birthday and sign-in sessions are erased straight away. Copies in our database backups are overwritten as those backups roll over.
• App sign-in codes, and the scrambled IP addresses kept with them: a day.
• Chat messages: while your chat is open. They're deleted 30 days after it ends, or straight away if either of you deletes your account. When someone is reported from a chat, the copy of their messages kept with the report (or of the message reported and a few around it) stays with the report, as a safety record.
• The scrambled version of a deleted account's phone number (a keyed hash, not the number): kept, with nothing else, so a new account on that number can't earn invite intros again.
• The app's invite list: until we take your number off it.
• Text message logs (with your number, and the record of each sign-in code text with the code blanked out), payment and intro records, and safety records (reports and blocks) are kept after deletion, without your profile, for up to 7 years, to meet legal and tax obligations and keep others safe.

We use HTTPS for all traffic, encrypted at rest for our database, and access controls on our admin tooling. App sign-in codes, the key in your sign-in cookie and IP addresses are only ever stored scrambled. No system is perfect. If you spot a vulnerability, please email [email protected].

For any privacy question, email [email protected]. Our Terms of Service explain how yooh works.