Privacy

yoop.si is operated by CyberFruit Lab - FZCO, a free zone company in Dubai, United Arab Emirates. We are the controller of your personal data. For anything on this page — a question, a copy of your data, or deleting it — write to hello@yoop.si.

Your app’s link and your email, your answers about the app (its monthly revenue and ad budget, in ranges, and when you’d like to start), the plan you picked if you came from a price, and where you came from: the campaign tags on the link you followed (like utm_source), the address of the page that sent you, without its query, and the kind of app you were looking at on our page.

To see whether your app qualifies for a free reel, to make it and send it to you, and to talk with you about it and about working together. To see, in totals, which of our videos, emails and pages bring people. We never add you to a newsletter and never sell or share your email for anyone else’s marketing.

Page views and the steps towards the form — a click on a button, the first keystroke in the form, the form sent, a reel played with sound — counted by the site itself, on Cloudflare. A visit is tied together by a random number that is never stored in your browser and is gone when you leave the page. The site sets no cookies: no analytics cookies, no third-party trackers, no ad pixels.

Sometimes we make a free reel for an app before anyone asks, from its public App Store page, and write to the people behind it at a work address they publish — on the App Store or their own website. We keep the app’s name and link, that address, and what we sent.

The reel sits on a private page, yoop.si/for/…, that only the link opens and search engines are asked to skip. We count how many times the page is opened, and when it was first and last opened, so a follow-up knows whether you looked. We don’t record who opened it or from where. If you book from that page, we keep your email and the plan you picked. Write “stop” to any of our emails and we won’t write again.

When you work with us, we use your app’s screenshots, its App Store or Google Play page (name, description, icon, ratings and reviews — all public), and whatever you send us: a brief, brand files, notes. We keep them while we work together and for as long as we keep your videos.

We make the videos on our own computers, and make pictures, clips, voices and music for them with AI services, named under “Who else handles it”. Each gets only what one step needs — a prompt, a screenshot, a line to read. Please don’t send screenshots that show real people’s data; use a demo account.

When you hire us for a plan, we invoice your company: we keep its name, address and tax details as they go on the invoice, the invoices, and whether they were paid. You pay by bank transfer or by card; a card goes to the payment provider named on the invoice and never reaches us. Invoices and payment records are kept as long as the law asks.

To have us post for you, you connect your Instagram, YouTube or TikTok account. You sign in on the platform’s own page; we never see your password. For each account we keep the platform’s id for it, its handle, the permissions you granted, and the tokens that let us post — encrypted on our server.

We post only the videos we made for you, as our Terms describe, with their captions, marked as made with AI. After a post goes up, we read its views, likes, comments, shares and saves — counts, never the comments themselves — for 14 days, to report to you how it did. We don’t read your followers, your messages, or anything you posted without us. The video file is deleted from our server once it is posted. We never use what we get from these platforms for advertising, never sell it, and never hand it to anyone else.

We use Instagram’s own login for professional accounts. We ask to see your account’s id and username, and to publish Reels; if you allow it, also to read your Reels’ insights (views, likes, comments, shares, saves and average watch time). Instagram fetches each video from a private link that stops working after two hours. Reels are shared to your feed. To delete what we hold, see Deleting your data.

yoop uses YouTube API Services. By connecting a channel, you agree to be bound by the YouTube Terms of Service, and our use of YouTube data follows them. Google’s handling of your data is covered by the Google Privacy Policy.

We ask Google to let us upload videos and to read your channel: its id and name, to show which channel is connected, and the view, like and comment counts of the videos yoop posted. Videos go up as public Shorts, not made for kids, marked as altered or synthetic. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

You can revoke yoop’s access at any time on Google’s security settings page. Ask us to disconnect the channel, and we revoke it too and delete its tokens at once.

We use TikTok’s Login Kit and Content Posting API. We ask for your basic profile — TikTok’s id for you, your username and display name — and to publish videos; we keep the id and username. Before each post we ask TikTok which audiences your account allows, and post to the widest one it allows — or to only you, while TikTok hasn’t yet approved our app. Your comment, duet and stitch settings are kept as they are. Ask us to disconnect the account, and we revoke our access at TikTok and delete the tokens; you can also remove yoop in TikTok’s settings, under Security and permissions.

To stop us posting to an account, tell us: we disconnect it, its tokens are deleted at once, and for YouTube and TikTok our access is revoked at the platform. You can also remove yoop on the platform itself — for Instagram, in Settings, under Apps and websites.

To delete everything we hold about you — connected accounts, posts and their counts, the materials you sent us, and anything you sent through the form — write to hello@yoop.si from the email you use with yoop, with “Delete my data” in the subject. We delete it within 30 days and write back when it’s done. Data we got from a platform is deleted within 30 days of you disconnecting it or revoking our access.

What stays: invoices and payment records the law asks us to keep. Videos already published stay on your accounts — delete them there.

Only the companies that run the service for us, each for that and nothing else:

• Cloudflare, which hosts the site and keeps what you send through the form;
• Resend or Postmark, which deliver our email;
• the payment provider named on your invoice, if you pay by card;
• Instagram (Meta), YouTube (Google) and TikTok, when you connect an account and we post;
• for the videos we make for you: OpenAI, Anthropic, Google (Gemini), xAI (Grok), BytePlus, fal, OpenRouter, ElevenLabs and Cartesia.

We are in the United Arab Emirates. Cloudflare and the companies above handle data in other countries too, mostly the United States (BytePlus: Singapore). Where the law of the EU, UK or Switzerland applies, we rely on the European Commission’s standard contractual clauses and their UK and Swiss equivalents, or on a provider’s EU–US Data Privacy Framework certification. Ask, and we send you a copy of the safeguards.

The form, and what we sent if we wrote first: while we’re talking with you about the work, and up to 24 months after we last heard from you.

If you work with us: your materials, the videos we make and your posts’ counts, while we work together and up to 24 months after. Connected accounts: until you disconnect them or we stop working together. Videos waiting to be posted: until they’re posted or cancelled. Invoices: as long as the law asks. Ask, and we delete everything sooner.

Everything travels over HTTPS. The tokens for your connected accounts are encrypted (AES-256-GCM), and only the people who run yoop can reach the database. No system is perfectly safe; if something goes wrong that affects you, we tell you.

yoop is for businesses and adults. It is not for anyone under 18, and we don’t knowingly collect data from children. If we learn we have, we delete it.

You can ask what we hold about you and for a copy of it, have it corrected or deleted, ask us to limit how we use it, or object to it — write to hello@yoop.si and we answer within 30 days. You can also complain to your local data protection authority.

In the EU and UK, we rely on: the contract with you (making and posting your videos, invoices); your request (what you asked us for through the form); our legitimate interest in following up on it, in writing to apps we made a reel for, in counting visits in totals and in keeping the service safe; and the law, for invoices. Connecting an account is your choice, and disconnecting it withdraws it.

In California and other US states: you can know, correct and delete what we hold. We don’t sell your personal information, don’t share it for targeted ads, and treat you the same if you use these rights.

When this page changes, the date at the top does too. If a change matters to how we use your data, our clients get an email before it applies.

CyberFruit Lab - FZCO, Dubai, United Arab Emirates — hello@yoop.si.