Yttrio Privacy Notice

Effective 22 October 2026. Version 2026-10-22.1. Controlled test release.

1. Responsible operator and contact

Vasilii Shaposhnikov, registered as SHAPOSHNIKOV, VASILII, CUIT 27-96396761-1, operates Yttrio from Argentina and is responsible for Yttrio's processing. Postal contact: Avenida Santa Fe 1834, Ciudad de Buenos Aires, C1123AAN, Argentina. Privacy requests and complaints: legal@yttrio.app. Product support: support@yttrio.app; public support telephone +54 9 11 3035-8778. The competent authority, any required representative and additional local information depend on the country in which the relevant service is made available.

2. Information and sources

Depending on the feature, we process account identifiers and authentication state; name, email, phone and chosen contact details; country, language, service profile and entered addresses; event descriptions, selected contacts, dates, places, roles and participation; positive rating decisions; payment instructions, amounts and internal payment or refund records; store purchase, subscription and token records; support content and attachments; verification results and limited identity attributes; device, network, notification, security and diagnostic information; and privacy choices and request evidence.

Information comes from you, relevant participants, selected device features, sign-in and purchase providers, identity verification and the operation of the service. Entered addresses and profile statements are not independently certified merely by being stored. Phone and email verification indicate control of a contact method at the relevant time, not the accuracy of all account information. Pseudonymous technical information may remain personal data.

We use only contacts selected for a requested invitation, rather than treating a contact permission as authority to upload and use an entire address book. Location you enter is distinct from device location. Optional precise-location features require the applicable choice and device permission. IP-based approximate location can exist without device-location permission.

3. Purposes and grounds

We process information to provide requested scheduling and participation, authenticate and protect accounts, apply access and visibility rules, verify digital purchases, maintain account credits, deliver requested communications, support corrections and disputes, maintain eligible reputation, prevent abuse and fulfil applicable legal duties and data-rights requests.

A privacy acknowledgement is not blanket consent. Contract necessity applies only to data genuinely necessary for the requested service. A legal obligation applies only where an applicable rule requires the processing. Security or integrity processing relies on a ground permitted in the relevant country; a general statement of legitimate interests does not replace that assessment. Processing requiring consent, including optional marketing and product analytics, has a separate choice and withdrawal route. Identifying biometrics require the additional sensitive-data basis or condition applicable to that country. Unnecessary information is not made necessary merely by asking users to accept this Notice.

4. Identity verification

Didit processes the identity document, face comparison, liveness checks and verification-session video used for the configured identity check. Yttrio associates the session with the account and may supply relevant contact details and information needed for reverification. Our verification integration retains a limited result and associated identity, age, document-validity, warning and session-reference information, rather than a stored copy of the document images, facial video or facial template. A submitted support attachment is a separate data flow; do not send identity images through ordinary support or email unless a secure procedure specifically requires them.

Yttrio processes the verification response to decide access, handle inconsistent or duplicate identity information, review errors and manage expiry or reverification. The result does not guarantee conduct, qualifications or bank-account ownership. Contact legal@yttrio.app or support to challenge a result or request correction, restriction or deletion. Verification may need to be repeated when information changes, expires or requires review; it is not necessarily a once-in-a-lifetime check.

Didit acts on our instructions for the relevant verification and may have a separate role for its own security and fraud purposes under its terms. Read Didit's verification notice before starting: https://didit.me/terms/verification-privacy-notice/. Its terms describe its own roles and rights routes: https://didit.me/terms/business/.

5. Recipients and their roles

Google/Firebase supplies authentication, infrastructure, storage, notifications and relevant security or diagnostic services. The information handled and its role depend on the particular service; authentication is not independent certification of every profile statement. See https://firebase.google.com/support/privacy.

Apple and Google Play process their own checkout, account, fraud and billing information and return purchase information needed to manage subscriptions and credits. Yttrio does not receive full payment-card numbers from their checkout. In manual P2P, participants exchange authorized recipient instructions and instruct their own bank or wallet; those financial providers execute the transfer under their own terms. This release has no public Mercado Pago checkout or Web sale of subscriptions or tokens.

Map and route providers can receive the query, selected coordinates and technical information needed for a requested map feature. They may also process information for their own service purposes under their terms. OpenStreetMap-derived services and Google map services are not assumed to have identical roles.

Requested AI drafting may send selected text, relevant service-profile labels, language and time-zone context to OpenAI; review of a submitted service title may also use that provider. The draft/title feature does not request facial media or identity-document images. Include only information you are entitled to share, and review the output. We provide the applicable pre-transfer notice and permission choice where required.

Mail-delivery suppliers handle the destination and content needed for requested messages; recipient mail systems control delivery and their own copies. Choosing an external sharing app sends the content you select to that app under its terms. Authorized participants, support personnel and legally entitled authorities receive information only for the relevant purpose. Not every recipient acts only as Yttrio's instructed processor. We remain responsible for our own lawful disclosure, provider instructions and handling of rights requests.

6. Visibility and security

Publication, invitation, role and participation settings determine who can view event and contact information. Public listings and permitted shared-link fields can be seen outside your account. Other users may retain information they lawfully receive. Private support evidence and internal costs do not become public merely because an event is published.

We use access restrictions, secure communications and proportionate operational controls. No system guarantees absolute security. Protect your account and report suspected misuse.

7. Retention and deletion

Retention follows the record's actual purpose and applicable law. Active account and private content, closed shared events, short operational records, security evidence, support cases and financial or legal evidence have different rules. We retain only the minimum data needed for a specific remaining obligation, dispute or other lawful ground, with restricted access where appropriate. We do not retain a whole account merely because a limited financial record must remain.

Verification media held by Didit, retained result attributes, supplier copies and recovery copies have separate deletion processes. Contact us for the applicable retention and any remaining restriction in your case.

Request receipt and restriction of new activity are not completed deletion. We distinguish removal from active use, outstanding provider or recovery copies, lawful retained records and verified completion. A pseudonymous identifier is not automatically anonymous or erased. Restored data must remain subject to the applicable deletion restriction. We communicate any legally permitted exception or extension rather than treating a supplier's delay as an automatic extension.

8. Rights and complaints

Subject to applicable law, you may seek access, a copy, correction, deletion, portability, restriction, objection or withdrawal of consent and complain to the competent authority. Use account privacy settings or legal@yttrio.app. If you cannot access the account, use support@yttrio.app and follow the secure ownership check. Do not email passwords, one-time codes, full payment credentials or identity-document images.

Account deletion is available through https://yttrio.app/account-deletion without reinstalling the app. That page includes the web-account route and a support fallback. Existing necessary support, settlement, refund or dispute actions may continue while new protected activity is restricted. We explain the applicable request deadline, any lawful limitation and completion separately.

Removing the app does not delete the account or cancel a store renewal. Manage subscriptions through https://apps.apple.com/account/subscriptions or https://play.google.com/store/account/subscriptions. You do not have to cancel renewal or wait for subscription expiry before requesting account deletion. Mandatory refund rights remain available.

9. International processing

Yttrio is operated from Argentina. Relevant providers can process data in other countries, including the United States or European countries depending on the service and account. The receiving legal entity, locations and required safeguards depend on the actual processing and the applicable country requirements. Ask legal@yttrio.app for the recipients, destinations and transfer arrangements applicable to your information and information about available safeguards. A provider's general policy, an operating region or consent to these Terms alone does not establish a lawful transfer mechanism.

10. Children and changes

The marketplace, payment, identity-verification and participation features are intended for adults meeting the applicable eligibility requirements. We do not offer a child marketplace mode. A declaration is not a universal verified-age check. Contact us if a child has supplied information inappropriately.

Material changes receive a new version and any required notice, acknowledgement or consent. Optional choices remain separate. Previous accepted versions and limited necessary evidence are preserved under their applicable retention rules.