Privacy Policy
Last updated: 26 October 2026
This policy explains what information Yello Messenger ("Yello", "we", "us") collects when you use our apps and websites, why we collect it, and the choices you have. It applies to the Yello web app at app.yellomessenger.com, this website, and the Yello apps for Windows and Android.
1. Who we are
Yello Messenger is operated by Project Yello. For anything about your privacy or your data, contact us at privacy@yellomessenger.com.
2. What we collect
Information you give us
- Account details. Guests choose a nickname and colour. If you create a Yello ID, we also store your email address and a securely hashed password (we never see your password).
- Profile. Anything you add to your profile: avatar picture, status message, bio and an optional location. You can hide your location at any time.
- Messages and content. Messages you send in rooms and private chats, and the photos, voice notes, GIFs and links you share, plus reactions, edits and replies.
- Buddies and settings. Your buddy list, blocked users, favourite rooms, rooms you create and your app preferences.
- Reports. When you report a person or message, we keep the report and what it refers to.
Information collected automatically
- Online status. Whether you are online, away, busy or invisible, and which room you are in, so your buddies can see it (invisible hides it).
- IP address, approximate country and device. When you sign in, we record your IP address, the country it belongs to and your browser or device type. We use this to keep accounts secure and to stop spam and abuse.
- Sign-in records. Dates and times of sign-ins and basic security logs.
Voice and video calls
Calls connect directly between the people in the call wherever possible. We do not record calls and do not store call audio or video. We only handle the short technical signals needed to start and end a call.
What we don't collect
We don't access your contacts, read files on your device, track your precise location, or sell your information. Yello has no advertising and no ad trackers.
3. How we use your information
- To run Yello: deliver your messages, show your profile and status, connect calls, and sync your account across devices.
- To keep Yello safe: investigate reports, remove content that breaks our Terms, block spam and automated abuse, and restrict or remove accounts that misuse the service.
- To send you account emails, such as confirming your email address or resetting your password. We don't send marketing emails without your permission.
- To understand overall use (for example, how many people are online) and improve the service.
- To meet legal obligations and respond to lawful requests from authorities.
4. Who can see what
| Information | Who can see it |
|---|---|
| Room messages, nickname, avatar, status | Everyone in the room or on Yello |
| Private messages | You and the person you are chatting with |
| Email address, IP address, country, device | Not shown to other users |
Moderation. To keep the community safe, Yello's administrators and moderators can review messages, including private messages, and account details such as IP address and country, when investigating reports, abuse, spam or legal requests. Private messages are protected in transit and on our servers but are not end-to-end encrypted.
5. Service providers we use
We use trusted providers to run Yello. They process data only on our instructions.
| Provider | What for |
|---|---|
| Supabase | Database, sign-in and file storage for accounts, messages, photos and voice notes |
| Cloudflare | Hosting of our websites and web app, security and email routing |
| GIPHY | GIF search. Your search words are sent to GIPHY when you search for a GIF |
| country.is | Looking up the country of an IP address at sign-in |
| YouTube | Playing YouTube links shared in chat (only when you press play) |
| Email provider | Sending account emails such as password resets |
Your information may be processed in countries other than your own. We don't sell or rent your personal information. We share it with authorities only when required by law or to protect someone's safety.
6. How long we keep it
- Messages, photos and voice notes are kept while your account exists, unless they are deleted by you, removed by moderation, or cleared by our automatic clean-up of old room messages.
- Guest accounts may be removed after a period of inactivity, together with their data.
- When an account is deleted, its profile, messages, photos and voice notes are deleted. Security logs and reports may be kept for a limited time where needed to prevent abuse or meet legal obligations.
7. Your choices and rights
- Edit your profile, hide your location, go invisible, block people and delete your own messages at any time in the app.
- Ask for a copy of your data, a correction, or deletion of your account by emailing privacy@yellomessenger.com from the email on your Yello ID. We reply within 30 days.
- Depending on where you live (for example the EU, UK or India), you may have further rights, including objecting to processing or complaining to your data protection authority.
- You can turn off notifications, camera and microphone access in your device settings.
8. Children
Yello is not meant for children. You must be at least 13 years old to use Yello, or older where the law in your country requires (for example 16 in parts of the EU, or 18 in India without a parent's consent). If you believe a child is using Yello, contact us and we will remove the account.
9. Security
We use encrypted connections (HTTPS), hashed passwords, access controls on every database table, and optional two-step sign-in for staff accounts. No service is perfectly secure, so please use a strong password and keep it private.
10. Changes to this policy
We may update this policy as Yello changes. We'll change the date at the top, and for important changes we'll let you know in the app.
11. Contact
Project Yello: Yello Messenger
Privacy: privacy@yellomessenger.com
Support: support@yellomessenger.com
Grievance Officer: see our Support page