Privacy policy

1. Who is responsible for your data?

Data controller: YADONY SAS, a simplified joint-stock company registered in France under SIREN number 108 733 510.

Data Protection Officer (DPO): dpo@yadony.com. General contact: contact@yadony.com.

If you have a question about your data or wish to exercise your rights, contact us directly. We undertake to reply within a reasonable time.

2. Our core principle: as little data as possible

Yadony stores internally only the information needed for your user profile. All sensitive data (identity, authentication, official documents, images) is processed and stored directly by specialised partners. Yadony never sees your identity documents, your face, or your bank details.

What Yadony keeps directly

The only data stored in our own systems is your public profile information:

• First and last name: displaying your identity on your profile and in transactions
• E-mail address: identifying you and sending you transaction summaries
• Date of birth: verifying that you are an adult (18 minimum)
• City of residence: making it easier to match you with travellers near you

That is all. Yadony stores no other personal data internally. The rest is handled by our specialised partners, described below.

3. Our partners and the data they handle for us

We chose to entrust each type of sensitive data to the world specialist in that field. Here is exactly who handles what.

3.1 Google Firebase: authentication and account security

The entire authentication layer is handled by Google Firebase, one of the most secure infrastructures in the world. Firebase handles:

• Your mobile phone number
• Your SMS sign-in (one-time code)
• Your fingerprint and Face ID sign-in
• Your session security (suspicious sign-in detection, lockout after failed attempts)
• Your backup PIN code

Yadony never sees your full phone number or your biometric data. Firebase manages this information directly, in line with its own privacy policy and Google's security certifications (ISO 27001, SOC 2, GDPR). Google Firebase privacy policy: https://firebase.google.com/support/privacy

3.2 Didit: identity verification (KYC)

Identity verification, required to post a trip or a parcel request, is handled by Didit (Didit Identity Spain, S.L., Barcelona, Spain), which acts as Yadony's processor under the GDPR and hosts its data in the European Union. Didit handles:

• The photo of your identity document (national ID card or passport)
• The selfie and the liveness check
• The comparison between your face and your official document
• The approval or rejection of the verification

Yadony receives neither your identity documents nor images of your face. Didit sends us the verification result (Verified, Under review or Declined, with the reason for a decline) and, for a successful check, your name as it appears on the document. Didit keeps documents and biometric data according to the retention settings defined by Yadony and its own policy. Didit privacy policy: https://didit.me/terms/privacy-policy/

3.3 Stripe: payments and escrow

All payments, the escrow mechanism (money held until delivery) and payouts to travellers are handled exclusively by Stripe. Stripe handles:

• Your bank card details (Visa, Mastercard)
• Apple Pay and Google Pay payments
• Holding funds in escrow until delivery is confirmed
• Payouts to travellers after delivery
• Refunds in the event of cancellation or dispute

Yadony never stores your card number or any payment data. Stripe is PCI DSS Level 1 certified, the highest security certification for online payments. Stripe privacy policy: https://stripe.com/fr/privacy

3.4 pawaPay: Mobile Money (Wave, Orange Money and other operators)

When Mobile Money payment is offered (mainly for users and travellers based in Africa), payments, balance top-ups and payouts go through pawaPay, a payment aggregator that passes them on to your Mobile Money operator (for example Wave or Orange Money, depending on the country). For each transaction, pawaPay and your operator receive the Mobile Money number used, the operator name and the amount.

To pay out your earnings, Yadony keeps the Mobile Money number you register, encrypted in its database, along with the operator you chose.

3.5 Cloudflare: image storage

All parcel-related images (photos taken by the sender, handover and delivery photos taken by the traveller) are stored on Cloudflare infrastructure. Cloudflare handles:

• Secure storage of parcel photos
• Timestamped, geolocated handover and delivery photos
• Generation of temporary, secure access links: images are never permanently publicly accessible

Yadony does not host these images on its own servers. Cloudflare is one of the world leaders in web security and performance, certified ISO 27001 and SOC 2. Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/

3.6 PostHog: audience measurement

To understand how the app is used and improve it, we use PostHog. Under the consent rules described in article 4, PostHog receives:

• The screens viewed and the actions taken in the app (for example posting a listing or opening a conversation)
• Technical information about your device (model, operating system, app version)
• Session recordings, in which all text and all images are masked on your device before being sent

This data is linked to your account's technical identifier, never to your phone number, e-mail address or name.

3.7 Sentry: crash and error reports

When the app or our servers run into an error, a technical report is sent to Sentry so that we can fix it. This report contains the error description, the screen or action in progress and technical information about the device (model, operating system, app version). The app is configured not to send your personal data to Sentry by default.

When you report a problem from the app, your message and any screenshots you attach are also sent to Sentry.

3.8 Twilio: sending text messages

Twilio sends the text messages containing your one-time sign-in code, as well as some notification text messages. To do so, Twilio receives your phone number and the content of the message.

3.9 Resend: sending codes by e-mail

When you sign in or add an e-mail address to your account, the verification code is sent to you by e-mail through Resend. To do so, Resend receives your e-mail address and the content of the message.

3.10 Stream: audio calls

When the call feature is available, audio calls between users go through Stream. Stream receives your account's technical identifier, your display name and your profile photo, and carries the audio of the call.

3.11 Google Maps: maps and address search

The maps shown in the app and the address search (autocomplete) use Google Maps services. Google receives the addresses and places you search for, as well as the map areas displayed. Google privacy policy: https://policies.google.com/privacy

3.12 AI assistant and “Create with AI” forms

The app offers an AI assistant that answers your questions about how Yadony works, based on help articles written by Yadony, and a “Create with AI” button that prepares a trip or parcel request form from what you dictate or type. What is sent to the AI provider:

• The text of your question and of the current conversation (at most the last 12 exchanges)
• If your question is about one of your parcels: the facts needed to answer (trip cities and date, parcel step, status of the payment, of a cancellation or of a dispute), with no name, phone number, tracking number or code
• For “Create with AI”: the text you dictate or type (transcribed on your device) and the fields of the form in progress (cities, dates, weight, price, description)
• The app language

Yadony does not add your name, phone number, email address or account identifier.

Questions are processed by a third-party AI provider. At the time of writing: Anthropic, PBC (United States), through its commercial API (Claude model). This list is kept up to date on this page, including if another provider were to take over. As this provider is established outside the European Union, your questions are transferred outside the EU.

Before the first use, the app asks for your consent in a window that details these transfers. If you decline, nothing is sent; consent is asked again after you sign out.

Under its commercial terms, Anthropic does not use questions received through its API to train its models. We still ask you not to enter any personal data in the assistant: it does not need any to answer you.

Yadony does not keep the content of conversations: they stay on your device for the duration of the session and disappear when you close the app. Yadony only keeps usage counters, without the text (number of questions, answer found or not).

Exception: if you choose to "talk to a human", your last question and the exchange are copied into a Yadony support ticket, kept like other support requests.

You can hide the assistant bubble in Settings.

4. Data generated by your use of the service

Beyond profile data and the data handled by our partners, Yadony generates and keeps the following data, essential to running the service:

• History of listings and trips: managing traveller activity and producing tax exports for Yadony PRO. Retention: 5 years
• Transaction history (amounts, dates, statuses): financial traceability and statutory accounting obligations. Retention: 5 years (legal obligation)
• Parcel scans (timestamp and geolocation): parcel traceability at every step and evidence in disputes. Retention: 5 years
• Ratings and reviews received: building user reputation and guaranteeing quality. Retention: lifetime of the account
• Messages exchanged in the internal messaging system: enabling communication between senders and travellers. Retention: 2 years after the transaction
• Connection data (date, device, anonymised): account security and fraud detection. Retention: 13 months

App usage data (screens viewed, actions taken, session recordings) is measured with PostHog (see article 3.6). It is linked to your account's technical identifier, never to your phone number, e-mail address or name, and the text and images in session recordings are masked on your device. In the European Union, the European Economic Area, the United Kingdom and Switzerland (or if your country cannot be determined), this measurement is only turned on with your explicit consent, requested at your first sign-in. Elsewhere, it is on by default. In every case, you can turn it off at any time in the app: Profile tab, ☰ menu, Settings, Privacy, “Usage statistics”.

The GP Pro badge

If you request the GP Pro badge (article 8 of the Terms of Use), Yadony processes the following data, solely to review your request and display the badge:

• The travel frequency you state
• Your trading name, if you give one
• The supporting documents you choose to add (optional, 4 at most)
• The status of your request and the history of the team's decisions, with their reasons

To review the request, the team also relies on data Yadony already holds: the result of your identity verification, your published trips, your deliveries, your ratings, disputes, reports and the age of your account.

Supporting documents are never public. Only Yadony administrators can view them, through temporary links valid for 15 minutes. They are deleted as soon as the request is decided: acceptance, refusal, cancellation of the request or deletion of the account. A file uploaded but never attached to a request is deleted within 24 hours.

The decision and its reason are kept in the audit log. During the review, no information from your request is visible to other users. Once granted, the badge is visible to other users (article 7).

5. Summary: who stores what?

Here is a complete summary to give you a clear picture of how your data is protected.

• Name, e-mail, date of birth, city: Yadony (internal database). Yadony access: yes, profile data only
• Phone number, SMS authentication: Google Firebase. Yadony access: no, Firebase manages it directly
• Fingerprint, Face ID, PIN code: Google Firebase. Yadony access: no, biometric data stays on-device or with Firebase
• ID document photo, selfie, liveness: Didit. Yadony access: no, Yadony receives only the verification result and the verified name
• Card number, payment data: Stripe. Yadony access: no, never sent to Yadony
• Mobile Money number: pawaPay and your operator (Wave, Orange Money or another) for each transaction. Yadony keeps, encrypted, the number you register to receive your payouts
• App usage data: PostHog, linked to the account's technical identifier, under the consent rules of article 4
• Error reports and problem reports: Sentry
• Parcel and delivery photos: Cloudflare. Access only through secure temporary links
• GP Pro badge request (frequency, trading name, status, decisions and reasons): Yadony (internal database). Optional supporting documents: viewable only by Yadony administrators, through a 15-minute temporary link, and deleted as soon as the decision is made
• Transaction history, scans, ratings: Yadony (internal database). Access: yes, needed to run the service
• AI assistant and “Create with AI”: third-party AI provider (Anthropic, Claude model), after your consent in the app, with no name, phone number, email or identifier. Yadony does not keep the content of conversations, unless you choose to talk to a human (support ticket)
• Messages between users: Yadony (encrypted). Encrypted content, access restricted to disputes

6. The legal basis for each processing operation

Each processing operation rests on a specific legal basis:

• Profile data (name, e-mail, date of birth, city): performance of the contract (Terms of Use)
• Authentication via Google Firebase: performance of the contract
• Identity verification via Didit: legal obligation (anti-money-laundering and fraud prevention)
• Payment processing and escrow via Stripe: performance of the contract
• Image storage via Cloudflare: performance of the contract and legitimate interest (evidence in disputes)
• Transaction history: legal obligation (accounting and tax)
• Parcel scans and traceability: performance of the contract and legitimate interest
• Fraud detection and security: legitimate interest
• Ratings and reputation: legitimate interest
• Review of GP Pro badge requests, display of the badge and record of decisions: performance of the contract (Terms of Use, article 8) and legitimate interest (reliability of the profiles highlighted)
• Marketing communications: consent (revocable at any time)

7. Who do we share your data with?

Yadony never sells your data to third parties. The only data sharing that takes place is described in sections 3 and 4 above, with our technical partners contractually committed to protecting it.

Other sharing cases

Beyond those partners:

• Between users: your first name, profile photo, rating and badge are visible to other users as part of the normal service.
• With the authorities: where the law requires it (judicial requisition, tax obligation, anti-money-laundering), we must disclose certain data to the competent authorities.
• In a dispute: the relevant evidence (scans, link to the Cloudflare photos, messages) may be shared between the parties involved.
• Business transfer: in the event of a merger or acquisition, your data could be transferred to the acquirer. You would be informed beforehand.

8. International data transfers

Yadony operates on international corridors and relies on global partners. Here is how your data is protected in each region.

From Europe

The data Yadony keeps directly is hosted on servers located in the European Union. Our partners (Google Firebase, Stripe, Cloudflare) all have GDPR-compliant transfer mechanisms (standard contractual clauses, adequacy decisions or EU-US Data Privacy Framework certifications).

From the United States and Canada

For users based in the United States and Canada, we comply with applicable local laws, including the California Consumer Privacy Act (CCPA) for Californian users. Yadony does not sell your data. You can exercise your rights by contacting us at dpo@yadony.com.

From Africa

For users based in Côte d'Ivoire, Senegal, Mali, Cameroon and the other countries served, we comply with the applicable local personal-data protection laws. Parcel images and documents are always stored on Cloudflare (European servers), with temporary, secure access links.

9. How long do we keep your data?

Retention periods by type of data:

• Profile data (name, e-mail, date of birth, city): for as long as you use the service plus 3 years after your last sign-in, for account management
• Authentication data (Firebase): managed by Google Firebase under its own policy
• KYC data (Didit): kept by Didit according to the settings defined by Yadony and Didit's policy
• Payment data (Stripe): managed by Stripe under its own policy
• Parcel images (Cloudflare): 5 years, temporary links, evidence in disputes
• Transaction history: 5 years, accounting and tax obligation
• Scans and geolocation: 5 years, evidence in disputes
• Messages in the messaging system: 2 years after the transaction, dispute resolution
• Audience measurement data: 13 months, CNIL compliance
• Supporting documents for a GP Pro badge request: deleted as soon as the decision is made (acceptance, refusal, cancellation or deletion of the account). Files never attached to a request: deleted within 24 hours
• Decisions on the GP Pro badge and their reasons: kept in the audit log
• Deleted accounts: profile data anonymised upon final deletion, 30 days after the request, except financial history kept for 5 years

10. How we protect your data

Security by design

Yadony's main security mechanism is architectural: by keeping only the minimum of data internally and entrusting sensitive data to certified global specialists, we drastically reduce the exposure surface if something goes wrong.

• Google Firebase: certified ISO 27001, SOC 1, SOC 2, SOC 3, PCI DSS. Authentication data encrypted and isolated.
• Didit: ISO/IEC 27001 and SOC 2 certified, data hosted in the European Union. Identity documents encrypted, never passed on to Yadony.
• Cloudflare: certified ISO 27001, SOC 2. Images accessible only through secure temporary links.
• Yadony: profile data encrypted at rest and in transit (HTTPS/TLS). Internal access limited to the strict minimum.

Additional safeguards

Safeguards complete this architecture:

• Every sensitive action (payment release, dispute decision, account suspension) is recorded in a tamper-proof audit log.
• Biometric validation (fingerprint or Face ID via Firebase) is required to access the application and confirm any payment.
• The internal messaging system automatically filters attempts to share contact details to bypass the platform.
• In the event of a data breach, we notify the CNIL within 72 hours and the users concerned as soon as possible.

11. Your rights over your data

Your rights and how to exercise them:

• Right of access: obtain a copy of all the data Yadony holds about you, via Settings → My data or dpo@yadony.com
• Right of rectification: correct your profile data (name, e-mail, city), directly in your profile in the application
• Right to erasure: delete your account and profile data, in the app: Profile tab, ☰ menu, then “Delete my account”. Without the app: yadony.com/en/delete-account
• Right to portability: receive your data in JSON or CSV format, on request to dpo@yadony.com
• Right to object: object to processing based on legitimate interest, on request to dpo@yadony.com
• Withdrawal of consent: turn off marketing or analytics, via Settings → Privacy
• Rights over Firebase data: access, rectification, deletion of authentication data, through your Google account or dpo@yadony.com
• Rights over Stripe data: access to and deletion of payment and identity data, via stripe.com/fr or dpo@yadony.com

For data handled by our partners (Firebase, Stripe, Cloudflare), we help you exercise your rights with them. Contact us at dpo@yadony.com and we will make the connection.

If you are not satisfied with the answer: CNIL (www.cnil.fr) in France, ARTCI in Côte d'Ivoire, CDP in Senegal, the National Commission for the Protection of Personal Data in Cameroon.

12. Cookies and trackers

Yadony uses only the cookies strictly necessary to run the application (session persistence, security). Audience measurement in the app (PostHog) follows the consent rules described in article 4. You can turn it off from Settings → Privacy.

13. Notifications

Transactional notifications (mandatory): payment confirmation, delivery confirmed, dispute opened, security alerts. Sent through Firebase Cloud Messaging (in-app notifications) and by SMS through two different operators to guarantee continuity.

Marketing communications (optional): sent only with your consent. You can unsubscribe at any time from Settings → Notifications.

14. Children's data

Yadony is strictly reserved for adults (18 and over). We collect no data about minors. If you believe a minor has created an account, contact us at dpo@yadony.com. We will delete the account and all associated data as quickly as possible.

15. What happens when you delete your account

To delete your account from the app: Profile tab, ☰ menu, then “Delete my account”.

Deletion is not possible while a transaction is in progress. Once your request is recorded, deletion becomes final 30 days later: during that period, you can cancel it from the app.

When your account is finally deleted:

• Yadony profile data (first name, last name, e-mail, date of birth, city): anonymised.
• Firebase data (phone, authentication): deleted on request through Firebase.
• Didit data (ID document, selfie): deleted according to the retention settings Yadony has defined with Didit.
• Parcel images (Cloudflare): the links become inaccessible. Files are deleted under Cloudflare's policy.
• Messages in the messaging system: deleted.
• Recipient address book: cleared.
• Supporting documents for a GP Pro badge request: deleted.
• Transaction history: kept for 5 years (statutory accounting obligation). This data is anonymised as far as possible.
• If a dispute is in progress, the account is kept until the dispute is closed, then deleted.

16. Changes to this policy

We may change this policy at any time. Any significant change will be notified by e-mail or in-app notification at least 30 days before it takes effect. The update date is always shown at the top of the document.

17. Contacting us

For any question about this policy:

• DPO e-mail: dpo@yadony.com
• General e-mail: contact@yadony.com
• Postal address: 7 avenue Pablo Picasso, Appartement 375, 94120 Fontenay-sous-Bois, France

Legal information

• Company name: YADONY SAS, SIREN 108 733 510
• Publication director: Mr Dramane DIAKITE, President
• Technical partners: Google Firebase, Stripe, Didit, pawaPay (Mobile Money: Wave, Orange Money and other operators), Cloudflare, PostHog, Sentry, Twilio, Resend, Stream, Google Maps, Anthropic (AI assistant)
• French supervisory authority: CNIL (www.cnil.fr)