Yulo Privacy Policy

1. Important self-custody and blockchain notice

Yulo is designed as a self-custodial wallet. Your private key and recovery phrase are generated or imported and stored in encrypted form on your device. Yulo does not receive or store your private key or recovery phrase and cannot restore access to your wallet if you lose them. You authorize transactions on your device; signed transaction information may be transmitted to infrastructure used to submit the transaction to the Base network.

Public blockchain records are public, permanent, and outside Yulo’s control. Wallet addresses, token transfers, transaction hashes, timestamps, amounts, smart-contract interactions, and related blockchain data may remain publicly available even after you delete your Yulo account. Yulo cannot alter or erase blockchain records.

2. Information we collect

Information you provide

• Account and profile information, including username, display name, email address or other identifiers, biography, profile image, public wallet address, preferences, and support communications.
• Business information, including business name, category, description, address, approved coordinates, operating hours, listing settings, catalog items, prices, images, and social links.
• Transaction-related records used for app functionality, including public addresses, transaction hashes, amounts, status, notes, requests, and counterparties. We do not receive your private key or recovery phrase.
• Content you submit, including profile or catalog images, payment notes, favorites, contacts created in Yulo, feedback, and support requests.

Information collected automatically

• Device and technical data, such as device model, operating system and app version, language, IP address, timestamps, push token, and limited identifiers needed for security, sessions, limits, and service operation.
• Usage and diagnostics, such as feature interactions, app performance, crash reports, error logs, and request metadata. We configure logs not to intentionally contain private keys or recovery phrases.
• Approximate or precise location only when you grant permission or submit a business location, for nearby discovery, maps, and distance features.
• Camera input only when you grant permission and activate QR scanning or image capture. Yulo does not continuously access your camera.

Information from other sources

• Public blockchain data from nodes, indexers, explorers, or infrastructure providers.
• App-store and subscription information such as purchase status, product identifier, and receipt identifiers. Yulo does not receive your full payment-card number from Apple or Google.
• If optional ramp, identity-verification, bank-linking, or card services are offered, the independent provider may return eligibility, verification status, masked account information, transaction status, or provider identifiers. The provider—not Yulo—collects sensitive identity and bank credentials in its hosted experience unless we expressly tell you otherwise.

3. How we use information

• Provide, maintain, secure, troubleshoot, and improve Yulo’s wallet, payment, kiosk, discovery, business, notification, and subscription features.
• Create and display profiles, public business listings, transaction status, requests, receipts, catalogs, analytics, and preferences.
• Authenticate users, enforce limits, and prevent spam, abuse, fraud, sanctions evasion, and security incidents.
• Process support requests and communicate operational, security, policy, and service notices.
• Measure reliability and usage. Where required, we request consent before optional analytics, advertising, or location processing.

4. When we disclose information

We may disclose information as reasonably necessary to service providers supporting hosting, storage, databases, content delivery, blockchain connectivity, maps, push notifications, crash diagnostics, support, security, and billing; independent financial-service providers you choose; other users or the public when you make information public or transact on-chain; authorities or advisers where legally necessary; and a successor in a merger, financing, reorganization, or sale.

Yulo does not sell personal information for money. As of the effective date, Yulo does not use personal information for cross-context behavioral advertising. If this changes, we will update this Policy and provide legally required choices.

5. Third-party services

Yulo may rely on providers such as Microsoft Azure, Google Firebase, Sentry, Mapbox, Cloudflare, Apple, Google, blockchain infrastructure providers, and—when enabled—Bridge, Plaid, or other financial-service providers. Providers and features may change. Each independent provider processes information under its own terms and privacy notice.

6. Data retention

We retain information for the time reasonably necessary to provide Yulo, maintain security and transaction records, comply with law, resolve disputes, and enforce agreements. Account data is generally retained while active and then deleted or deidentified within a reasonable period after a valid request, except where retention is required or permitted for security, fraud prevention, legal compliance, backup integrity, or disputes. Public blockchain data cannot be deleted by Yulo.

7. Security and your responsibilities

We use safeguards designed to protect information, including encryption in transit and access controls, but no system is completely secure. You are responsible for protecting your device, passcode, recovery phrase, private key, and credentials; confirming addresses and transaction details; and avoiding phishing, malware, and scams. Yulo support will never ask for your recovery phrase or private key.

8. Your choices and rights

• Review or update available profile and business information in the app.
• Control camera, location, and notification permissions in device settings.
• Request access, correction, deletion, portability, restriction, or objection where applicable by emailing support@yulopay.com.
• Request account deletion by following the instructions at yulopay.com/account-deletion. Deletion does not erase blockchain records or data controlled by independent third parties.
• Opt out of nonessential communications using the method provided.

9. U.S. state and international privacy rights

Depending on where you live, you may have rights regarding access, correction, deletion, portability, restriction, objection, consent withdrawal, appeal, and disclosures about data practices. We will not discriminate against you for exercising applicable rights. California residents may request information about categories collected, sources, purposes, recipients, and retention. Users in the EEA, United Kingdom, or similar jurisdictions may contact us regarding legal bases and transfer safeguards.

10. Children

Yulo is not directed to children under 18, and we do not knowingly collect personal information from children. Contact us if you believe a child has provided information.

11. International use and transfers

Yulo is operated from the United States. Information may be processed in the United States and other countries where providers operate. We use legally recognized safeguards where required.

12. Changes to this Policy

We may update this Policy to reflect changes in Yulo, law, or our practices. We will post the revised Policy with a new effective date and provide additional notice when legally required.

13. Contact us

Privacy questions or requests may be sent to support@yulopay.com. Operator: Elevated Technical Solutions, LLC. Website: yulopay.com.