Privacy Policy
This is a translation for convenience. The German version at yeara.co/datenschutz is authoritative.
We treat your data the way we build our product: sparingly and openly. This policy informs you, in accordance with the Swiss Federal Act on Data Protection (FADP), about which personal data we process.
Controller
Pingvite AG, Strehlgasse 2, 8001 Zürich, Switzerland (UID CHE-184.686.389) – operator of yeara.co
Email: hello@yeara.co
What data we process
When you order: name, shipping and billing address, email address, phone number (for questions about delivery) and payment information. Payment is processed by Stripe Payments Europe, Ltd. (Ireland); credit card and TWINT data are processed exclusively by Stripe and never reach us. Further information: stripe.com/privacy.
When you visit the website: our website is hosted by Vercel Inc. (USA). When you access it, technically necessary data (e.g. IP address, browser type) is processed in server logs. For our own visitor statistics we use Vercel Analytics in its cookieless variant: Vercel Analytics sets no cookies, does not track you across devices and shares nothing with advertising networks. For our advertising we additionally use the Meta Pixel (see below). So that you see the same offer on your next visit, your browser keeps a cookie (yeara_angebot) for up to 90 days that records which version of our offer you saw. It contains no information about you. You can block or delete this cookie in your browser; the site works without it.
When you email us: we use your details only to answer your request.
Meta Pixel
For our ads on Facebook and Instagram, we use the Meta Pixel from Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland) on yeara.co. It lets us measure how well our ads work: whether someone visits our website after an ad, clicks “Order” and places an order. For this, Meta uses cookies and similar technologies to collect information on yeara.co and on other websites. Meta uses it to measure and target ads, including showing ours to people who might be interested in them.
Meta receives your IP address, information about your browser and device, the pages you visit, your click on “Order” and your purchase (egg and amount). For this, the pixel sets the cookies _fbp and _fbc. If you are logged in to Facebook or Instagram, Meta can link this information to your account and, under its own privacy policy, also use it for its own purposes: facebook.com/privacy/policy. Meta may also disclose the data to the USA; Meta Platforms, Inc. is certified for this under the Swiss-U.S. Data Privacy Framework.
Via our server: our server also reports directly to Meta (Conversions API) when you view the home page, click “Order”, go to payment and place an order, so that these reports still arrive when an ad blocker stops the pixel in your browser. Each time, Meta receives your IP address, information about your browser and device (user agent), the page address, the egg and the amount, plus the identifiers from the _fbp and _fbc cookies if your browser has them.
When you buy, Meta additionally receives an order identifier and your email address, phone number, first and last name, city, postcode and country, as a hash value (SHA-256). This is not anonymization: Meta computes the same hash values from the details in your Facebook or Instagram account and can thereby link the purchase to you, even if you are not currently logged in. Meta may also use these details for its own purposes (see above). The IP address and browser information come from the moment you go to payment: since Stripe does not pass them on to us, we store them together with the cookie identifiers at Vercel (data center in Frankfurt) at that moment, for at most seven days, and delete them as soon as the purchase has been reported.
Opting out: you can refuse the Meta Pixel at any time: with the button below, in your browser by deleting or blocking cookies or blocking tracking scripts, and in your ad settings on Facebook and Instagram. There you decide whether Meta may use information from other websites for ads: facebook.com/adpreferences. The button also stops all reports from our server for this browser; blocking cookies or tracking scripts only stops the pixel.
Yeara App
Account: to sign you in to the app, we process your email address; your account receives an internal identifier. Account and data are stored with Supabase (Supabase Inc., data center in Zürich, Switzerland); the sign-in code is sent by Resend (Resend Inc., data center in Ireland, EU) on our behalf.
Locking: how Yeara keeps the chosen apps closed depends on the operating system. On iPhone through Apple’s Screen Time interface (Family Controls), which can also block websites. On Android through two permissions you grant yourself and can revoke at any time: usage access, so Yeara notices which app comes to the foreground, and display over other apps, so Yeara can draw the curtain over it.
That check runs exclusively on your phone and only while a lock is running. It is stored nowhere and never leaves your device. Which apps you chose also stays on the phone. We see neither your selection nor which apps you use.
What we store: the names of your modes and how many apps they contain, the chip identifier of your egg, the start and end of your lock sessions, the number of your emergency unlocks, and your device model, operating system version and language and appearance setting. This keeps your egg linked to your account, and the app keeps working on a new phone.
Deletion: under Settings › Account › Delete account you remove your account and all associated data immediately and permanently.
No tracking in the app: no advertising, no analytics services, no sharing for advertising or analytics purposes. Who we share data with to operate the app is set out under “Sharing”.
Purpose and legal basis
We process this data to fulfill your order and to operate the Yeara app (performance of contract), to operate and secure the website, to measure and target our ads on Facebook and Instagram, and to comply with legal obligations (e.g. accounting).
Sharing
We do not sell data. We share it with the service providers we need for operation: Stripe (payment, Ireland), Vercel (hosting, USA), Supabase (account and app data, Zürich) and Resend (sign-in codes, Ireland), as well as shipping providers for delivery. To measure and target our ads, we also share it with Meta (Ireland and USA, see “Meta Pixel”). EU countries are recognized under Swiss data protection law as providing adequate protection. For the USA we additionally safeguard protection, in particular through standard contractual clauses or, where certified, the Swiss-U.S. Data Privacy Framework.
Retention
We retain personal data only as long as necessary for the purposes stated or as long as statutory retention obligations apply (generally 10 years for business records). We keep your account data in the Yeara app for as long as your account exists; if you delete it, the data is removed immediately and permanently.
Your rights
You have the right to access, rectify, delete and port your data, and the right to object to processing. To do so, write to us at hello@yeara.co.
Last updated: October 2026