Privacy Policy
Last updated 19 August 2026
This policy explains what information YayPal collects in our apps and games, why we collect it, and what you can do about it. We have tried to write it so it can actually be read.
1Who is responsible for your data
YayPal AB, company registration number 559040-8463, Bryggvägen 6B, 117 71 Stockholm, Sweden, is the data controller for the processing described here. You can reach us at support@yaypal.io.
2What this policy covers
All YayPal apps and games — currently Walkopoly, Yay Ride, Push Play and Fit For Flight — and our website. The apps differ: not all of them collect everything described below. Your phone always asks for permission before we use your location or notifications, and you can change your mind at any time in your device settings.
3What we process
| Data | Why | Legal basis |
|---|---|---|
| Account | Email address, encrypted password, display name and avatar — so you can sign in and keep your progress. If you play as a guest, a randomly generated identifier stored on your device instead. | Contract |
| Location | Your position while you play, in the games built around where you move. Routes you walk are saved. In modes such as “play from home”, location may also be collected while the app is in the background — but only if you turn it on yourself. | Contract |
| Game content | Progress, in-game currencies (such as “Yay” and “Active”) and balances, areas you have claimed, achievements, friends and leaderboards. | Contract |
| Messages to Pal | What you write to our AI assistant, in the apps that have it, together with where you are — so the answer is relevant. Please do not include sensitive personal information in your messages. | Contract |
| Push token | A code from Apple or Google that lets us send the notifications you asked for. | Consent |
| Technical operating data | IP address and timestamps in server logs, error reports and app version — for operations, troubleshooting and security. | Legitimate interest |
If an app contains purchases, payment is handled by the App Store or Google Play. We never receive your card or bank details.
4Advertising and tracking
- We never sell your data, and we do not track you across other companies’ apps or websites.
- Your location is never used for marketing, advertising or profiling, and is never shared with ad networks or data brokers.
- We do not collect more location data than the app needs to work.
- Yay Ride and Push Play show ads, including rewarded ads you can choose to watch in exchange for something in the game. They are delivered by our advertising partners, which may use your device’s advertising identifier to decide which ads you see. You control this in your phone settings: on iPhone under Allow Apps to Request to Track, on Android under the advertising ID settings. Walkopoly and Fit For Flight are ad-free.
5Who we share data with
We do not sell your data. We use suppliers who process it on our behalf, under data processing agreements:
| Supplier | What they do | Where |
|---|---|---|
| Supabase | Database for our newer apps | EU |
| Railway | Runs our servers | EU |
| Microsoft (PlayFab) | Game accounts, currencies and progress in several of our games | Outside the EU/EEA |
| Anthropic | Powers the Pal assistant and receives what you write to it | Outside the EU/EEA |
| Expo | Delivers push notifications to your device | Outside the EU/EEA |
| Walking-route service | Calculates walking routes for our servers | EU |
| Ad networks | Deliver the ads in Yay Ride and Push Play and receive your device’s advertising identifier | Outside the EU/EEA |
Apple and Google are independent controllers for their stores and payments. We also disclose data where the law requires it, or where it is needed to prevent cheating, abuse or harm.
6Transfers outside the EU/EEA
Some of the suppliers above process data outside the EU/EEA. Those transfers rely on the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. We limit what is sent: Pal receives your message and rough location context, not your full history.
7How long we keep it
- Account and game content — for as long as you have an account with us.
- When you delete your account — data is removed within 30 days. It may persist slightly longer in backups until those are overwritten.
- Server logs — up to 90 days, for operations and security.
- Purchase records — seven years, as required by Swedish accounting law.
8Deleting your account
In the app: open settings and choose Delete account. This deletes your account immediately, with no need to contact us.
On the web: use our account deletion page to request deletion without installing the app.
By email: write to support@yaypal.io from the address the account is registered to.
This removes your account, profile, game progress, saved routes, visited streets and push token. Some data may need to be kept for a short period for legal reasons — for example accounting records if you have made a purchase.
9Your rights
You have the right to know what data we hold about you, to have it corrected or erased, to object to or restrict processing, to receive your data in a machine-readable format, and to withdraw any consent you have given at any time. Contact support@yaypal.io — we reply within one month.
If you believe we handle your data incorrectly, you have the right to complain to the Swedish Authority for Privacy Protection (IMY), Box 8114, 104 20 Stockholm, imy@imy.se, imy.se.
10Children
Our apps are not directed at children under 13, and we do not knowingly collect their data. If we learn that an account belongs to a child under 13, we delete it. If you are under 18, ask an adult before using our apps.
11Security
All traffic between the app and our servers is encrypted. Passwords are stored hashed, access to our systems is limited to those who need it, and our suppliers meet industry standards for operations and security. No transmission over the internet is entirely without risk, but we work to protect what you entrust to us.
12Our website
Our website uses only the cookies required for it to work. We use no cookies for advertising or tracking.
13Changes
We update this policy as our apps change. The date at the top shows when it was last changed, and for material changes we will tell you in the app or by email before they take effect.