YURUP

Privacy Policy

Last updated: July 13, 2026

YurUp (“YurUp”, “we”, “us”) is a mobile app that helps households coordinate chores, shared expenses, chat, and related features. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

This policy is written to match how the YurUp app works today. Have it reviewed by qualified legal counsel for your jurisdiction before wide production use.

Who this applies to

This policy applies when you download, access, or use the YurUp mobile app and related services (including household invite links at yurup.app). It does not cover third-party websites or services we do not control.

Age requirement: You must be at least 16 years old to create an account. We collect your date of birth at signup (and during profile setup for some social sign-in users) to enforce this limit.

Information we collect

Account and profile information

Email address — for account creation, sign-in, email verification, and password reset.
Display name — shown to members of your household.
Date of birth — required in YYYY-MM-DD format to verify you are at least 16.
Optional nickname — if you set one in Settings.
Authentication identifiers — from Firebase Authentication when you use email/password, Google Sign-In, or Sign in with Apple.
Optional multi-factor authentication (MFA) — if enabled for your account, Firebase Auth may use SMS (phone number) and/or TOTP authenticator apps to verify sign-in. Phone numbers used for MFA are handled by Firebase Auth; they are not a primary signup field.
Profile preferences — such as avatar color, onboarding/tour completion flags, registration status, vacation mode, and similar app settings.
Household membership — which household(s) you belong to and your role (for example member or admin).

If you use Sign in with Apple, Apple may share your name and email (including Apple’s private relay email) on first sign-in, subject to Apple’s policies. Google Sign-In may share your Google account name and email subject to Google’s policies.

Household and user-generated content

When you use YurUp, you and your household members create content that we store in Google Firebase (Firestore) so the app can sync it across devices. This includes:

Household details — household name, join codes / invite metadata, member and admin lists, subscription tier, and usage counters.
Chores — titles, assignments, due dates, completion/skip/swap history, rotation data, and related activity.
Chore activity logs — household activity messages (for example completions).
Member chore streaks — streak statistics tied to household members.
Expenses and splits — amounts, descriptions, who paid, how costs are split, optional line items, and receipt-derived notes.
Chat messages — text in household threads (and any legacy chat records), reactions, read receipts, replies, and related metadata.
Polls — questions, options, votes, and voter identifiers as stored by the feature.
Order Squads — group order details, items, prices, and custom splits.
Chore Court — dispute titles, descriptions, parties, votes, case logs, and related penalty references.
Penalties — penalty library entries and case-linked penalties used by Chore Court.
Tidy AI conversations and reports — your prompts to the in-app assistant, conversation history, and generated household summaries you save.
In-app notifications — notification inbox items delivered to your account.
Feature usage / quotas — per-user and household monthly usage records used to enforce plan limits.

Content you add in a shared household is visible to other members of that household according to the app’s features and permissions.

Device, permissions, and technical data

Push notification token (FCM) — stored on your user profile so we can deliver chore reminders, chat alerts, and other notifications you enable.
Device notification settings — so we can respect permission state and deliver local or remote notifications via Firebase Cloud Messaging and on-device notification tooling (Notifee).
Local app storage — cached household and app state on your device for faster loading.

Depending on features you use, the app may request device permissions:

Camera and photo library — to capture or select receipt images (and related documents) for expense tracking. Receipt images are processed to extract transaction details (see AI processing below). In the current app version, receipt images are not uploaded to Firebase Storage.
Microphone and speech recognition — reserved for voice input to the Tidy assistant. Voice input is currently disabled in the shipped feature flags; these permissions may still appear in the app store listing or OS prompts if present in the build, and may become active in a future release.
Notifications — to send push and local reminders (including optional birthday milestone alerts to household members, which use a member’s first name rather than their full date of birth in the notification text).

Subscription and payment information

Paid subscriptions are processed by the Apple App Store or Google Play. We do not receive or store your full payment card number.
We use RevenueCat to read subscription status (product / entitlement identifiers, expiration, restore state) and link it to your Firebase user ID and household.
We store subscription tier and usage counters on your household (and related per-user quota records) to enforce plan limits.

Support communications

If you contact us (for example through the support email shown in Subscription Hub / paywall flows, or the contact listed in your App Store / Play Store listing), we receive the information you choose to send — such as your email address, household name, and message content — so we can respond.

Information we do not collect

Based on the current app, we do not collect precise GPS / device location, your device contacts / address book, advertising identifiers for cross-app tracking, government ID numbers, or full payment card numbers. We do not sell your personal information. Product analytics / crash-reporting SDKs are not wired in current production paths. Giphy is configured in the project but not used in the current client runtime.

AI processing (Tidy and receipt scanning)

YurUp includes an AI assistant (“Tidy”) and receipt scanning that send certain data to Groq (api.groq.com), a third-party AI provider, to generate responses or parse receipts.

Depending on how you use these features, data sent to Groq may include:

Your text prompts and conversation history with Tidy.
Your display name and household name.
Household context needed to answer your request — such as member names, open/recent chores, unsettled or settled expenses, and open Chore Court cases.
Receipt images (as encoded image data) and/or text extracted from receipts, which may include merchant name, address, transaction date, line items, tax, tip, and limited payment details (for example card type and last four digits if visible on the receipt).

We do not intentionally send passwords, FCM tokens, or dates of birth in the Tidy household snapshot sent to Groq.

Groq processes this data under its own terms and privacy policy. We use Groq’s output to show suggestions, parse expenses, or generate reports inside the app. Do not include sensitive information in prompts unless you are comfortable with it being processed by our AI provider.

How we use information

We use the information described above to:

Create and manage your account and authenticate you (including optional MFA).
Provide household features (chores, expenses, chat, polls, Order Squads, Chore Court, invites, and subscriptions).
Sync data across your devices and household members.
Send notifications and reminders you enable.
Enforce subscription entitlements and usage limits.
Operate AI features (Tidy, receipt scanning) and save reports you choose to keep.
Respond to support requests and protect the security and integrity of the service.
Comply with applicable law.

How we share information

We share information only as needed to run the app:

Household members — content you add to a shared household is visible to other members of that household.
Google Firebase — Authentication, Firestore, Cloud Messaging, and Cloud Functions that power the app.
Apple and Google — when you use Sign in with Apple, Google Sign-In, MFA SMS (if used), or purchase a subscription through their stores.
RevenueCat — subscription status linked to your Firebase user ID.
Groq — AI processing for Tidy and receipt scanning, as described above.
Legal and safety — if required by law, to protect rights and safety, or to respond to valid legal process.

We do not sell your personal information. We do not share your information with advertisers for cross-context behavioral advertising.

Data retention

Account and household data is generally kept while your account and households exist.
Chore activity logs may be automatically deleted after approximately three months.
Household invite links expire after a limited period (typically 30 days unless configured otherwise).
Subscription usage / quota counters reset on a monthly cycle.
We may retain certain records as required for legal, security, fraud prevention, or billing dispute purposes.

Account deletion

You can delete your account from the app (Settings → Delete Account). When you delete your account:

Your Firebase Authentication account and users/{your-id} profile are deleted.
If you are the only member of a household, that household may be deleted.
If others remain in the household, you are removed from the member list; some content you created may remain visible to the household.
Certain records tied to you may be deleted where the current deletion flow supports it — for example some legacy chat messages you sent, chores assigned to you, expenses you paid, or court cases where you were the defendant.

Some data may not be fully removed by account deletion today — including newer chat threads, polls, Order Squads, chore logs, penalties, household invites, Tidy conversation history and reports, member chore streaks, notification inbox items, per-user quota records, and some shared household content. RevenueCat / App Store / Play Store billing records remain with those providers. We are working to expand deletion coverage over time. Contact support if you need help with a deletion request.

Deleting your YurUp account does not cancel an App Store or Google Play subscription; manage billing in your device’s store account settings.

Your choices and rights

Profile — you can update your name, nickname, and birthday in Settings (subject to age rules).
Notifications — you can disable push notifications in your device settings; the app remains usable if you deny notification permission.
Permissions — you can deny camera, photo, or microphone access; features that need those permissions will not work.
Household membership — you can leave a household or ask a household admin to remove you.
Access, correction, deletion — depending on where you live, you may have rights to access, correct, or delete personal information. Contact us using the details below.

If you are in the EEA, UK, or California, additional rights may apply (such as portability or objection to certain processing). We will honor applicable legal requests consistent with our obligations.

Security

We use industry-standard measures through Firebase and secure transport (HTTPS) to protect data in transit and at rest. No method of transmission or storage is 100% secure; use a strong password, protect your device, and enable MFA if available for your account.

International transfers

Our service providers (including Google / Firebase, RevenueCat, Apple/Google stores, and Groq) may process data in the United States and other countries. By using YurUp, you understand your information may be transferred to jurisdictions with different data-protection laws.

Children

YurUp is not directed to children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has created an account, contact us and we will take steps to delete it.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy at this URL and update the “Last updated” date. Continued use of the app after changes means you accept the updated policy where permitted by law.

Contact us

For privacy questions or requests, use the support contact shown in the app (Subscription Hub / paywall) or your App Store / Play Store listing.