Privacy Policy
This Privacy Policy explains what personal data Yamey collects when you use our app and website, why we collect it, who we share it with, how long we keep it and the choices and rights you have. It applies to everyone who uses Yamey, whether you use the Face Looks social feed, book services as a customer or offer services as a vendor. If you have questions, contact us at privacy@yamey.tech.
1. Who we are
Yamey ("we", "us") provides the Yamey app in India, Singapore, Malaysia, the Philippines and Indonesia. The Yamey company that provides the service in your country is responsible for your personal data (the "data controller" or "data fiduciary"). You can reach us, and our data protection officer or grievance officer, at privacy@yamey.tech.
2. The data we collect
2.1 Data you give us
Account details: email address, password (stored only in scrambled, hashed form), mobile phone number, country, preferred language, and the referral code you used, if any.
Profile: your full name or display name, profile photo and any other profile details you add.
Face Looks content: posts, photos, videos, captions, comments, likes, saves, shares, follows, blocks and reports.
Jobs: job descriptions, photos, the job address and map pin, preferred dates, quotes, price changes, job chat messages and photos, ratings and reviews, and statements and photos you add to a dispute.
Vendor details: your chosen service categories, base location and service radius.
Verification (vendors): a live selfie, government ID images and the details on them, proof of address, bank account details, background check information, skill certificates, and your tax identification number where the law requires it (for example PAN in India, NRIC/FIN or UEN in Singapore, TIN in Malaysia and the Philippines, NPWP in Indonesia, and any GST or tax registration number).
Support: messages you send us and our replies.
2.2 Data we collect automatically
Device and security data: an identifier for each device you sign in from (stored in scrambled form), sign-in times, your trusted devices, and the push notification token for your device.
Activity: a record that you used the app on a given day and your country (not what you did), which we use to count active users.
Location: if you allow it, your device location to help you set a job address or your service area. You can turn this off in your phone's settings and type an address instead.
Payments and money: records of your payments, refunds, subscriptions, wallet top-ups and balances, escrow, payouts, coins, referral rewards and tax invoices.
2.3 Data from others
Payment providers tell us whether a payment succeeded and give us a token and short label (such as the card type and last four digits) for saved payment methods. We do not see or store your full card number or security code.
Verification providers give us the results of selfie, document, bank account and background checks.
Other users may give us data about you, for example when they rate you, report content or raise a dispute.
3. How we use your data
To provide Yamey: create and run your account, show your posts and feed, match jobs with nearby vendors, enable job chat, process payments, hold and release escrow, and handle subscriptions, the wallet, coins and referral rewards.
To keep accounts secure: verify your phone number, send one-time codes on new devices and detect suspicious sign-ins.
To verify vendors: confirm identity, address, bank account and background, award verification badges and confirm the country your vendor account is tied to.
To keep Yamey safe and fair: prevent fraud and abuse (including referral fraud), moderate content, and review reports. Job chat messages are automatically checked for phone numbers, email addresses, links and mentions of paying outside Yamey; matches are flagged for our team to review. Messages are not blocked or changed.
To resolve disputes between customers and vendors.
To communicate with you: send notifications about your account, jobs, payments, referrals and messages by push, email and SMS. You can choose which notifications you receive in Settings, except security codes and legal notices.
To meet legal obligations: issue tax invoices, deduct and report taxes, keep financial records, and respond to lawful requests from authorities.
To improve Yamey: understand how the app is used, using aggregated figures where possible, and fix problems.
We use your data only where the law allows it, for example because you have given consent, because it is needed to provide the service you asked for, because the law requires it, or for other legitimate uses permitted by the law of your country. Where we rely on consent, you can withdraw it at any time, but this will not affect what we did before, and we may not be able to provide some services without it.
We do not sell your personal data.
4. Who can see your data
Other users: all Face Looks accounts are public. Your name, profile photo, follower counts, posts and comments can be seen by other users, and posts can be shared by link outside Yamey. Your email address and phone number are not shown on your profile.
Customers and vendors on a job: before accepting a job, vendors see only its area and distance. The vendor who accepts or wins a job sees the job address and details. Both sides see each other's names, ratings and job chat. Vendors' verification badges are shown to customers; their documents are not.
Our team: authorised staff can access data they need for their role, for example to review verification documents, moderate content or decide disputes. Access is limited by role and recorded in audit logs.
Service providers who work for us under contract and only on our instructions: cloud hosting and storage, push notifications, maps and address search, SMS and email delivery, payment processing, identity verification and background checks.
Authorities: tax authorities, regulators, courts or police where the law requires it or to protect the rights and safety of users or others.
A new owner: if Yamey's business is sold or reorganised, your data may pass to the new owner, who must protect it in line with this policy.
5. Where your data is stored
Our main systems are hosted in Singapore. If you live outside Singapore, your data is transferred to and stored in Singapore, and some of our service providers may process it in other countries. When we transfer data across borders, we take steps required by the law of your country to make sure it remains protected, such as contractual safeguards with our service providers.
6. How we protect your data
We use measures such as encryption of data in transit, hashed passwords, role-based access for staff, audit logs, and private storage for verification documents and dispute evidence, which can be viewed only by authorised staff through short-lived links. No system is completely secure, so please keep your password safe. If a data breach affects you, we will notify you and the relevant authorities as the law requires.
7. How long we keep your data
We keep your account data for as long as your account is open.
When your account is deleted, we erase your personal details as described in section 8.
We keep payment, invoice, tax and transaction records for as long as tax and financial laws require, and records needed for disputes, fraud prevention or legal claims for as long as they are needed for that purpose.
Backups are kept for up to 30 days and then overwritten.
8. Deleting your account
You can delete your account in Settings, or by writing to privacy@yamey.tech. Before deletion can start, any subscription must have ended, open jobs must be finished and your wallet must be empty. After you ask, your account enters a 30-day grace period: you are signed out everywhere and can sign in only to cancel the deletion. We email you when deletion starts and if it is cancelled.
After 30 days we erase your name, email address, phone number, password, profile and photo, devices, notifications, saved payment methods, verification documents and check results, follows, blocks, saved posts and service area. Your own posts are deleted and the addresses on your jobs are cleared. Some records are kept without your name because other users or the law need them: your comments on other people's posts (shown as "Deleted user"), jobs, ratings, disputes, chat messages, payment and tax records, referral records and audit logs.
9. Your rights
Depending on the law of your country, you may have the right to:
know what personal data we hold about you and get a copy of it;
correct or update inaccurate or incomplete data (you can edit much of it in the app);
have your data erased, subject to the records we must keep;
withdraw consent you have given;
object to or limit certain uses of your data;
nominate someone to exercise your rights if you die or become unable to (India); and
complain to us, and to the data protection authority in your country.
To use any of these rights, email privacy@yamey.tech from your registered email address. We may need to confirm your identity before acting. We will respond within the time the law of your country requires.
10. Country-specific information
India
We process your digital personal data in line with the Digital Personal Data Protection Act, 2023 and its rules. You can contact our Grievance Officer at privacy@yamey.tech about any concern with how we handle your data. If you are not satisfied with our response, you may complain to the Data Protection Board of India. You may ask to read this policy in English or in any language listed in the Eighth Schedule to the Constitution of India where we make it available.
Singapore
We handle your personal data in line with the Personal Data Protection Act 2012. You can contact our Data Protection Officer at privacy@yamey.tech. You may also contact the Personal Data Protection Commission.
Malaysia
We handle your personal data in line with the Personal Data Protection Act 2010. You may request access to and correction of your personal data, and limit its processing, by contacting our Data Protection Officer at privacy@yamey.tech. Some information, such as the details needed to verify a vendor or process a payment, is required to provide the service; if you do not provide it, we may not be able to provide that part of Yamey. You may also contact the Personal Data Protection Commissioner.
The Philippines
We handle your personal data in line with the Data Privacy Act of 2012 and its implementing rules. You can contact our Data Protection Officer at privacy@yamey.tech. You may also file a complaint with the National Privacy Commission.
Indonesia
We handle your personal data in line with Law No. 27 of 2022 on Personal Data Protection. You may exercise your rights as a data subject by contacting us at privacy@yamey.tech.
11. Children
Yamey is only for people aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, please tell us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. Each version shows the date it takes effect. If we make significant changes, we will tell you in the app or by email before they take effect.
13. Contact us
Privacy questions and requests: privacy@yamey.tech. Other questions: support@yamey.tech.