Data Policy

Last updated: 27 October 2026

This Data Policy describes, in practical terms, the categories of data Yolly ("Yolly", "we", "us", or "our") stores, where that data lives, who processes it, and how long we keep it. It complements our Privacy Policy, which explains the broader principles behind how we handle your information. Where the two documents overlap, the Privacy Policy governs.

1. Categories of Data We Store

Identity & account data — email, name, username/handle, hashed password, sign-in provider (password, Google, or KingsChat), email-verification status, and account timestamps.
Profile data — display name, bio, avatar, and cover image.
Content data — videos, clips, live streams, comments and replies, live chat messages, event RSVPs, reports, and support requests.
Engagement data — views, likes, bookmarks, shares, follows, and the interests you select.
Transaction data — stars purchases, boosts, gifts, and the associated provider reference, amount, and currency. We do not store card or wallet credentials.
Yolly Shop order data — the products you claim, the stars spent (price and platform fee) and their approximate naira value, the order and delivery status, and the delivery name, phone number, address, and state you provide.
Technical data — IP-derived approximate location, device/user-agent, app version, and (on mobile) push notification tokens.
Activity signals — while the website, creator studio, or app is open, a signal about once a minute carrying a random browser or app-installation identifier, your platform and app version, and your account if you are signed in. Used only to count, in aggregate, who is online and how many visits each platform gets.

2. Where Your Data Lives

Primary database — your account, profile, content metadata, social graph, transaction records, and Yolly Shop orders (including delivery details) are stored in our managed MySQL database.
Cache & counters — high-frequency values such as view and like counts, and short-lived dedupe and rate-limit windows, are held in Redis. Redis is the live source for some counters and is periodically reconciled to the database. Activity signals live here too, briefly; only hourly visit totals per platform, with no identifiers, are copied to the database.
Media & CDN — uploaded images and video assets are stored and delivered through Bunny (storage and CDN).
Live chat & presence — live stream chat and reactions are stored in Google Firebase (Firestore).
On your device — your authentication tokens, theme preference, and web watch history are kept in your browser's local storage and are never uploaded for the watch-history feature. The random identifier used for activity signals is also kept in your browser (website and creator studio) or on your device (mobile app).
Wallet & stars ledger — your stars balance and transaction ledger, including stars spent on and refunded from Yolly Shop claims, are maintained by our separate Watch & Earn service.

3. Processors & Sub-Services

We rely on a small set of trusted processors to operate the Platform. Each receives only the data needed for its function and processes it on our instructions:

Payments — Stripe, Paystack, and Espees/CimPay.
Media hosting & delivery — Bunny storage and CDN.
Live video — Agora real-time streaming.
Messaging & live chat — Google Firebase (push notifications and Firestore).
Sign-in — Google and KingsChat identity providers.
Email — our transactional email provider, used for verification codes, password resets, and Yolly Shop claim, shipping, and refund emails.
Delivery partners — the courier or delivery service we use for a Yolly Shop order receives only the recipient name, phone number, and address needed for that delivery.

4. Retention Periods

Account & profile — kept while your account is active.
Content & engagement — kept while published; removed or anonymised when you delete content or your account.
Transactions — retained as required for accounting, tax, and fraud-prevention purposes, even after account deletion, in anonymised or aggregated form where possible.
Yolly Shop orders & delivery details — kept while the order is being fulfilled and afterwards as part of the order record, for questions, returns, refunds, and accounting. They are not removed automatically when you delete your account; contact us if you would like the delivery details removed from a completed order.
Verification & reset codes — short-lived; they expire automatically (typically within minutes) and are consumed on use.
Cached values — transient; expire on their own schedule and are rebuildable from the primary database.
Activity signals — "online now" records about ten minutes, visit-in-progress records thirty minutes, raw visit counters three days; the IP-based abuse limit a few minutes. Hourly visit totals per platform, which hold no identifiers, are kept.
Local-device data — persists until you clear it from your browser or device.

5. Account Deletion

When you delete your account, we soft-delete it: we anonymise the personal details on your profile (such as email, phone, avatar, cover, and bio), scramble your username, remove your authored videos from public view, and revoke your active sessions. Some records tied to past activity or transactions may persist in anonymised or aggregated form where we have a legal or operational need. Yolly Shop order records, including delivery details, are kept as described in section 4. Data held by our payment processors is subject to their own retention policies.

6. International Processing

The processors above may store and process data in countries other than your own. Where required, we take steps to ensure your data receives an adequate level of protection wherever it is handled.

7. Your Controls

View and edit your profile data from your channel settings.
Add or edit your Yolly Shop delivery details from My claims until your order ships.
Clear your locally-stored watch history from the History page.
Reset the activity identifier by clearing your browser's storage for our sites or reinstalling the app.
Disable push notifications from your device settings.
Request account deletion in-app.
Contact us to exercise regional rights to access, correct, port, or restrict your data.

8. Contact Us

For questions about the data we hold, email privacy@yolly.com, or use the Support option inside the app.

← Back to Yolly