Privacy Policy

Last updated: June 6, 2026

Yonder ("we", "our", "us") is a mobile application that helps parents find age-appropriate activities and local events for their children. We take your privacy seriously.

Information We Collect

• Account information — email address and display name when you sign up.
• Child profiles — names and ages of your children, used to personalise activity suggestions. Depending on your chosen storage mode (see Child Data Storage below), this data is either stored on your device only or in your Yonder account. It is never shared with other users.
• Events — if you create an event, its title, description, location, date, and time are stored and may be visible to other users.
• Location — with your permission, we use your device location to show nearby events and calculate distances. We do not store your precise location on our servers.

How We Use Your Information

• To provide and personalise the app experience.
• To send transactional emails (account confirmation, password resets).
• To display nearby events based on your location.

Data Storage

Account data (email, display name) and events you create are stored securely using Supabase, which provides encrypted database storage and authentication. Passwords are hashed and never stored in plain text.

Child Data Storage

Yonder gives you full control over where your children's profiles are stored. You can change this setting at any time in Settings → Privacy → Child Data Storage.

• Cloud (synced) — Child profiles (names and ages only) are stored in your Yonder account on Supabase servers. This allows profiles to be available across multiple devices. Only you can access this data; it is protected by row-level security and is never visible to other users.
• On-device only — Child profiles are stored exclusively on your device using encrypted storage (iOS Keychain / Android Keystore via expo-secure-store). Nothing is sent to our servers. Profiles will not be available on other devices and will be lost if you uninstall the app or lose the device.

When you switch modes, Yonder will migrate your existing profiles to the new location and delete them from the previous one. No child data is kept in both places simultaneously.

AI Features

Some Premium features use artificial intelligence to generate activity ideas: activity enhancement, "Ask Yonder" suggestions, and supply-based suggestions. These features send data to Anthropic (the provider of the Claude AI model) for processing.

• What is sent — only what the feature needs: the text you type, the activity draft you ask to improve, or the names of supplies on your list — plus, optionally, a coarse age band (such as "4–5" or "6–8") so suggestions fit your children's ages.
• What is never sent — your children's names, exact ages, or profile details; your location; your account details. If you use on-device child data storage, no age information is sent at all unless you explicitly attach it to a request.
• Processing is transient — AI requests are processed to generate a response and are not used by Anthropic to train its models.
• What we store — we keep usage counts (how many AI requests you've made, for fair-use limits), not the content of your requests.
• You stay in control — AI suggestions are only ever shown to you; nothing is saved to your account unless you choose to save it.

Third-Party Services

• Supabase — authentication and database (account data, events, and optionally child profiles if cloud mode is selected).
• Resend — transactional email delivery.
• OpenStreetMap / Nominatim — location search and reverse geocoding.
• Anthropic (Claude) — AI processing for Premium suggestion features (see AI Features above). Does not train on your data.
• RevenueCat — subscription management and entitlement tracking.
• Apple App Store / Google Play — payment processing for subscriptions. We do not collect or store your payment details; all transactions are handled by Apple or Google.

Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Data is only shared with the service providers listed above as necessary to operate the app.

Your Rights

You can delete your account and all associated data at any time by contacting us at hello@yonderapp.org.

Children's Privacy

Yonder is intended for use by parents and guardians. We do not knowingly collect personal information directly from children. Child profile data (names and ages) is entered and managed solely by the parent account holder.

If you choose on-device storage, child data never leaves your device and is not processed by our servers at all. If you choose cloud storage, only numeric ages and first names are stored — no other identifying information about children is collected.

AI features never receive your children's names or exact ages — at most a coarse age band (such as "4–5"), and in on-device storage mode only if you explicitly attach it (see AI Features).

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this privacy policy, contact us at hello@yonderapp.org.