Privacy Policy
Last updated: April 2, 2026
Yabuu ("we", "our", or "the app") is a mobile application that lets airplane passengers chat, play games, and share flight experiences using direct Bluetooth connections — no internet required. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
By using Yabuu you agree to the practices described in this policy. If you do not agree, please do not use the app.
1. Information We Collect
1.1 Information you provide
Yabuu does not require you to create an account, provide your name, email address, phone number, or any other personally identifying information to use the app.
In-app chat messages and game data are transmitted peer-to-peer over Bluetooth between nearby devices only. Messages are never sent to our servers and are automatically deleted when the session ends.
1.2 Anonymous usage statistics
We collect minimal, non-identifiable analytics to improve the app. This includes:
- ▸App session duration and approximate participant count (no names or IDs)
- ▸Which games were played and how many times
- ▸Device type (e.g. iPhone, iPad) and operating system version
- ▸Flight number (only if you enter one, to look up your route)
This data cannot be used to identify you personally. It is transmitted securely to our servers at the end of a session.
1.3 Flight route lookups
When you type a flight number, the app queries our server (yabuu.app/api/flights/route) to retrieve the departure and arrival airports. We do not log your IP address alongside the flight number. The queried flight number may be cached in our database for up to 90 days to reduce external API calls and serve other users on the same route faster.
1.4 Bluetooth
Yabuu uses your device's Bluetooth to discover and communicate with nearby devices. We do not collect, store, or transmit Bluetooth device identifiers (MAC addresses or UUIDs) to our servers. Bluetooth is used exclusively for local, device-to-device communication within range.
1.5 Location
The app uses your device's GPS only to show your position on the in-flight map. GPS data is processed entirely on your device and is never sent to our servers. We do not track or store your location.
2. How We Use Your Information
- ▸To display your real-time position on the flight map (on-device only)
- ▸To look up departure and arrival airports for your flight number
- ▸To understand how the app is used and improve features
- ▸To monitor app stability and fix crashes
We do not sell, rent, or trade your information to third parties. We do not use your data for advertising.
3. Data Storage and Security
Anonymous session statistics are stored in a secure database hosted on Supabase (EU region). Data is transmitted over HTTPS/TLS. We retain anonymous statistics for up to 24 months for trend analysis, after which it is automatically deleted.
Flight route cache entries expire automatically after 90 days. Negative cache entries (flights not found) expire after 6 hours.
Since we collect no personal data, there is no personal data to breach. In the unlikely event of a security incident affecting aggregate statistics, we will notify users via the App Store release notes within 72 hours.
4. Third-Party Services
Yabuu uses the following third-party services on the server side only:
Used to look up flight routes (departure and arrival airports). Queries are made server-side; your IP is not forwarded to AirLabs. See their privacy policy at airlabs.co.
Database and backend infrastructure (EU). Stores anonymous session statistics and flight route cache. See supabase.com/privacy.
Hosting for our web server and API. Vercel may log request metadata (IP, path, timestamp) for up to 24 hours for security purposes. See vercel.com/legal/privacy-policy.
No third-party SDKs are embedded in the mobile app for analytics or advertising.
5. Children's Privacy
Yabuu is rated 4+ on the App Store. The app does not knowingly collect any information from children under the age of 13. Because we collect no personal data at all, the app is safe for all ages.
6. Your Rights
Because Yabuu does not collect personal data, most data-subject rights (access, rectification, erasure) do not apply in practice — there is simply no personal data associated with you to act upon.
If you have questions about your data or wish to request deletion of any information that may be associated with a specific session, please contact us at privacy@yabuu.app.
If you are located in the European Economic Area (EEA), you have the right to lodge a complaint with your local data protection authority.
7. International Transfers
Our servers are located in the EU. If you access Yabuu from outside the EU, your anonymous session data may be transferred to and stored in the EU. By using the app, you consent to this transfer.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, provide notice via App Store release notes. Continued use of the app after changes constitutes your acceptance of the revised policy.
9. Contact Us
If you have any questions or concerns about this Privacy Policy, please reach out: