Privacy Policy

Effective 2026-09-14 · Service operator: YallaGo

1. Data we collect

Account and profile

We process account identifiers, authentication records, display name, profile details, preferences, blocked users, and account-deletion requests.

Social and activity content

We process posts, reels, comments, messages, reports, reviews, saved activities, trips, activity attendance, and support requests that you create or receive through the service.

Device and technical data

We process device type, operating system, app version, language, time zone, push token where you opt in, security logs, IP-derived security signals, and service diagnostics.

Permission-based data

Location is requested only when you choose nearby discovery. Photos are requested only when you choose media or a receipt. You may deny these permissions and continue using the features that do not need them.

Commerce data

If bookings, cashback, payouts, or payment features are enabled, we process the transaction, refund, receipt, tax, fraud-prevention, and payout data needed to provide those services. We do not store raw payment-card details.

2. Why we use data

We use data to authenticate accounts; provide discovery, social, trip, chat, booking and support functions; prevent fraud and abuse; protect users; meet legal obligations; improve reliability; and communicate service updates. We obtain consent where required and otherwise rely on the lawful bases that apply to the relevant processing.

3. Sharing and processors

Current processor disclosure: DigitalOcean provides application hosting. Cloudflare provides DNS, content delivery, security, and object storage services. Expo may process delivery data for push notifications when notifications are enabled. We use our own application services for messaging. Any new identity or payment provider will be listed in this policy before it is activated.

We share only the data necessary with service providers that help operate the service, activity partners where a user books or attends, professional advisers, competent authorities where legally required, and a successor in a lawful corporate transaction. We do not sell personal data.

4. Retention

We retain account and content data while the account is active and delete or de-identify it after a verified deletion request, normally within 30 days unless retention is necessary for a lawful reason. Security, abuse, and fraud-prevention records may be retained for up to 90 days where appropriate. Payments, cashback, and payouts are not enabled in the current release. If these services are later enabled, we may retain the minimum payment, tax, fraud-prevention, and safety records required by applicable law and will update this policy before activation.

5. Your choices and rights

You can edit profile information, control permissions in your device settings, block or report users, and start account deletion in Settings. Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing by contacting ttt2mmm@gmail.com.

6. International transfers and security

Data may be processed in countries where our providers operate. We use appropriate safeguards required by applicable law. We use access controls, encryption in transit, least-privilege access, and monitoring, but no system is risk-free.

7. Children

YallaGo - يلا نخرج is not directed to children. You must be at least 18 years old to create an account unless a lawful, verified parent/guardian-consent flow is made available in your country.

8. Contact and changes

Privacy questions: ttt2mmm@gmail.com. We will post material changes here before they take effect.