1 Information We Collect
We collect the information needed to operate a safe, location-based marketplace:
1.1 Account & Profile
- Name, email address, and phone number.
- University or college affiliation (.edu verification for Providers).
- Profile photo, bio, and service categories.
- Identity verification information for Providers (processed through our verification provider).
1.2 Location Data
- Precise and/or approximate device location, used to show nearby jobs, Providers, and Customers and to power matching and distance features.
1.3 Activity & Content
- Job posts, listings, bookings, in-app messages, reviews, ratings, reports, and blocks.
1.4 Payment Information
- Payments are processed by Stripe. Stripe collects and processes your card or bank details; YUPA does not store full payment card numbers. We receive limited transaction data (such as amount, status, and payout records).
1.5 Technical Data
- IP address, device identifiers, operating system, app version, and usage logs.
2 Luki & YUPA AI
Luki is YUPA's AI assistant for students — its own app, and YUPA AI inside the YUPA app. To find what fits you, it uses the following. Every personalization question is optional.
What Luki collects
- Your account: your name, email address (checked with a 6-digit code), and the school and major you give us.
- Where to look: the area you set. If you choose “Use current location”, your phone's location is read when you search, to find things near you; if you type a place instead, we save that place.
- Your answers: what you tell Luki in its setup questions — for example how you live, what you pay for each month, the names of your internet provider, phone carrier and bank (never account numbers), your car's make, model and year, how often you eat out, whether you work and whether you filed taxes, home city and travel, your goal and its date, and people you buy gifts for with their birthday (the month and day only, never a year).
- Your chats: the messages you send Luki and its replies. Your chat history is kept on your phone. Each message is sent to our servers to be answered, and we keep a short list of things Luki has learned about you so it doesn't ask again.
- Your list: what you save, claim or pass on, and the totals that track your goal.
- A résumé, only if you upload one — read to match you with jobs.
- Notifications: if you turn them on, your device's push token and time zone, so reminders arrive at a sensible hour.
- Campus answers, if you answer campus questions: they are added, anonymously and counted, to what students at your school say (identified only by your school's email domain), and never shown with your name.
- A phone number, only if you link one to text Luki: used to receive and answer your texts. Reply STOP to stop.
Who helps us answer
- OpenAI writes Luki's answers and runs its web searches. We send it your message and what it needs to answer it — your relevant answers, the area, and the recent conversation. Under OpenAI's API policies, data sent through its API is not used to train its models.
- Google (Firebase and Google Cloud) runs our accounts, database, servers and notifications; Google Maps turns a typed place into a location.
- Stripe handles subscription payments on the web. If you subscribe through the App Store, Apple handles it.
- Resend sends the email with your verification code.
What Luki doesn't do
- It never reads your calendar, contacts or photos. “Add to calendar” opens Apple's or Google's own new-event screen, and nothing is saved until you save it there.
- It doesn't sell your information, show third-party ads, or track you across other companies' apps and websites.
To delete everything, use Delete account in Luki (Section 7).
3 Location Data
- YUPA is a location-based platform. With your permission, we use your device's location to surface nearby jobs and Providers, calculate distances, and improve matching.
- You can enable or disable location access in your device settings. Some core features may not function without it.
- We do not sell your location data.
4 Payments & Stripe
- All in-app transactions are handled by Stripe, our third-party payment processor.
- Your payment details are provided directly to Stripe and processed under Stripe's Privacy Policy.
- YUPA receives transaction metadata to operate the marketplace, calculate our commission and service fees, process payouts to Providers, and handle cancellations and refunds.
5 How We Use Information
- Create and secure your account and verify student eligibility (.edu) and Provider identity.
- Match Customers and Providers based on location and show nearby opportunities.
- Process payments, commissions, service fees, payouts, cancellations, and refunds through Stripe.
- Power safety and trust features: reviews, ratings, rankings, reporting, blocking, and chat.
- Send service updates, notifications, and important account or community announcements.
- Detect, prevent, and respond to fraud, abuse, and policy violations.
- Improve features, usability, performance, and security.
7 Data Retention & Account Deletion
How long we keep your data
- We retain your account and profile information for as long as your account remains active.
- If an account becomes inactive, we may retain its data for up to 24 months before deleting it.
- Transaction and payout records are kept for up to 7 years where required by accounting, tax, and legal obligations.
- Messages, listings, ratings, and reports may be retained for moderation, safety, and compliance while your account is active.
How to delete your account and data
You can permanently delete your account — and the personal data associated with it — at any time, directly in the app. In the YUPA app:
- Open the app and go to your Profile.
- Tap the settings icon in the top-right corner of the screen.
- Tap Account Actions.
- Tap Delete Account and confirm.
In Luki: open the side menu, tap your name at the bottom, then Delete account, and confirm with your password. This deletes your account, your Luki profile and answers, your saved list, any résumé you uploaded, any linked phone number, and the chats on that phone. It does not cancel a paid subscription — cancel it first (see the Terms, Section 8).
Deleting your account removes your profile and personal information from the Platform, and this action cannot be undone. A limited set of records (for example, transaction logs required for tax, accounting, fraud-prevention, or legal compliance) may be retained for the periods listed above and are then permanently deleted. You can also request deletion by emailing yupacustomer@gmail.com, and we will process your request.
8 Your Rights
Depending on your jurisdiction, you may have the right to:
- Access or request a copy of your personal data.
- Correct or update inaccurate information.
- Request deletion of your account and personal data.
- Opt out of marketing communications and manage cookie or location preferences.
To make a request, contact yupacustomer@gmail.com. We may need to verify your identity.
9 Children's Privacy
YUPA is intended for users 18 years or older. We do not knowingly collect information from minors, and accounts found to belong to under-18 users will be removed.
10 Security
- Encryption (SSL/TLS) for data in transit.
- Secure cloud storage and access controls.
- Access limited to authorized personnel.
No system is 100% secure, and you use the Platform at your own risk.
11 International Users
YUPA operates in the United States and processes data here. If you access the Platform from outside the U.S., your information will be transferred to and processed in the U.S.
13 Changes to This Policy
We may update this Privacy Policy periodically. Significant changes will be communicated by email or in-app notice. Continued use of YUPA after changes take effect constitutes acceptance.
14 Contact
- YUPA, INC.
- Email: yupacustomer@gmail.com
- Location: Delaware, United States
We're here to help
Questions about your data or this policy?
Email: yupacustomer@gmail.com
YUPA, INC. · Delaware, United States