YoLo

Privacy policy

Last updated: 25 October 2026

The short version: YoLo has no ads, no trackers, no analytics and no accounts. Your cards stay on your iPhone and in your own iCloud. The developer cannot see them.

Who is responsible

YoLo is made by Sasja Storms. You can reach me through the contact form.

What YoLo stores

  • Your cards: the store name, the barcode number and type, colour, and anything you add yourself such as photos, an expiry date and notes. They are stored on your iPhone.
  • iCloud: if iCloud is on for YoLo, your cards are copied to your private iCloud storage, so they come back on a new iPhone. This is provided by Apple and the developer has no access to it.
  • Family sharing: if you choose to share, Apple's iCloud sharing gives the people you invite access to the same cards. Only people you invite can see them, and you can stop sharing at any time.
  • Settings: small preferences such as sort order and whether the lock is on, on your iPhone.

What YoLo sends to the internet

  • Store logos: to show a store's logo, the app asks Google's favicon service for the icon of the store's website. Only the website address (for example example.com) is requested. No card data and no personal information is included, though as with any web request, the service can see your IP address.
  • Store suggestions: only when you tap Suggest this store, YoLo sends the store name, the website it guessed, the barcode type, your language and the app version to the developer's iCloud (CloudKit) database. Apple attaches an anonymous identifier that does not reveal your name or email. Your card number is never sent.

What YoLo does not do

  • No advertising, and no advertising identifiers.
  • No analytics, tracking or third-party SDKs.
  • No accounts, and no sign-up with an email address.
  • No selling or sharing of your data.

Camera, photos and Face ID

  • The camera scans barcodes and reads the card's text on your iPhone. The pictures are not uploaded.
  • Photos are only used when you pick or take one for a card or to import a barcode.
  • Face ID or your passcode is handled by iOS. YoLo never receives your face data or passcode.

Crash reports

If you have chosen in iOS to share analytics with developers, Apple may send me anonymous crash reports. I have no control over what Apple collects.

This website

  • No cookies of my own, no analytics and no tracking scripts.
  • The contact form loads an hCaptcha check from hCaptcha to block spam. It processes technical data such as your IP address to tell humans from bots, and it only loads on the contact page.
  • When you send a message, it is delivered by Web3Forms to the developer's inbox. It contains what you typed, including your email address if you filled it in, and nothing else. I use it only to answer you, and delete it when it is no longer needed.

Your rights

Since I don't keep an account or profile of you, there is little to look up. You can delete your cards in the app, delete the app, and clear what YoLo has in iCloud (Settings → your name → iCloud → Manage Account Storage → YoLo → Delete Data). If you sent me a message or a suggestion and want it removed, use the contact form. Under the GDPR you may also complain to your data protection authority, in the Netherlands the Autoriteit Persoonsgegevens.

Children

YoLo is a utility for storing loyalty cards and does not ask for personal information.

Changes

If this policy changes, the new version appears on this page with a new date.