Yora

← Back to home

Privacy Policy

Effective date: 8 July 2026
Operator: Yora Technology Ltd.
Contact: support@yora.app

1. Who we are

This Privacy Policy explains how Yora Technology Ltd. (“we”, “us”), the operator of the Yora mobile application (“Yora”, the “App”), collects and uses your personal data. We are the data controller for the personal data described here.

  • Full company name: Yora Technology Ltd.
  • UIC/EIK: [Insert EIK]
  • Registered seat and address of management: [Insert registered address], Republic of Bulgaria
  • Contact e-mail: support@yora.app
  • Data Protection Officer: [not applicable — insert DPO name and contact if one is appointed]

If you have questions, contact us at support@yora.app.

2. Data we collect

We collect:

  • Account data — your email address and the identifier from your sign-in provider (Google, Apple or email).
  • Profile data — your display name, optional bio, profile photo and any social links you add.
  • Location data — your device’s approximate/precise location, used to show you and other users who is nearby.
  • Activity data — virtual gifts you send and receive, your coin balance, online status and last-active time.
  • Technical data — basic device and diagnostic information provided by our infrastructure provider to keep the App secure and working.

3. How and why we use your data

We use your data to:

  • Provide the App — create your account, show profiles, and enable gifts (legal basis: performance of our contract with you).
  • Show nearby people — process your location (legal basis: your consent, which you can withdraw at any time via device settings).
  • Keep the service safe — prevent abuse, fraud and misuse (legal basis: our legitimate interests).
  • Comply with the law — meet legal obligations that apply to us (legal basis: legal obligation).

4. Who we share data with

We share data with:

  • Other users — your public profile, approximate proximity and the gifts you send are visible to other users. Your exact location is not shown to them.
  • Service providers — we use Google Firebase (Authentication, Firestore, Storage and Cloud Functions) to host and run the App. They process data on our behalf under their data-processing terms.
  • Authorities — where required by law or to protect rights, safety and security.

We do not sell your personal data.

5. International transfers

Our infrastructure provider (Google Firebase) may process and store data on servers located in the United States. Where data is transferred outside the European Economic Area, it is protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. How long we keep data

We keep your personal data while your account is active. When you delete your account, your profile and avatar are permanently deleted and your Firebase Auth user is removed. Gift-transaction records are retained because they belong to other users’ history, but your name and photo are removed from them so they no longer identify you.

7. Your rights

Under the EU General Data Protection Regulation (GDPR) you have the right to access, rectify, erase, restrict and object to the processing of your data, and the right to data portability and to withdraw consent. You can exercise most of these rights directly in the App, including deleting your account — see Section 8 below for how to delete your account and data both inside and outside the App. For other requests, contact us at support@yora.app.

8. How to delete your account and your data

You can delete your Yora account and the associated personal data in either of the following ways:

  • In the App — sign in, then go to Settings › Privacy › Delete Account. Your account and profile data are deleted immediately.
  • Without the App — submit a request through our support form at https://yora-bg.com/support/, selecting “Account deletion request” as the subject and stating the email address or sign-in method linked to your account. We will verify the request and delete your account and data within 30 days.

Deleting your account permanently removes your profile, photo, and other personal data described in Section 2. As explained in Section 6, gift-transaction records may be retained because they also form part of other users’ history, but your name and photo are removed from them so that they no longer identify you.

9. Security

We use appropriate technical and organisational measures to protect your data, including authenticated access and server-side rules that restrict who can read or change data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children

Yora is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a minor has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you within the App. The “Effective date” above shows when the current version took effect.

12. Contact and complaints

For any privacy question or request, contact us at support@yora.app. If you are in Bulgaria, you also have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP), the Bulgarian supervisory authority (https://www.cpdp.bg). If you reside in another EU/EEA country, you may instead lodge a complaint with the supervisory authority of your own country of residence.