Privacy Policy · Yupiplan
Last updated: November 2, 2026
This policy describes how data is processed in the mobile application "Yupiplan" for iOS and Android (identifier com.opharana.yupiplan) and on the pages of this website that are opened from its links, such as a plan's poster (collectively hereinafter referred to as "Yupiplan"). The data controller is OPHARANA LLC, with its registered office at 99 Wall Street, Suite 1432, 10005, New York (United States) and contact email address hello@opharana.com.
Key points
- No mandatory registration. An anonymous account is created, which is merely a random identifier. Signing in with Apple or Google is optional.
- The person who organizes sees your response. Other guests can see your name only if the organizer makes the list visible.
- The message you write when responding is read only by the person who organizes.
- We do not ask for an email address or phone number, and we do not send you emails.
- Plans are automatically deleted one year after their date.
- We do not sell your data.
- You can delete your data from the app, in You → "Delete my data" (Section 8).
1. Data we process
1.1. Account
When you open the app for the first time, or when you open a plan’s poster on this website, an anonymous account is created in our database provider, Supabase: a random identifier and session data. On the web, that session is saved in your browser’s local storage so you can return to change your response. In the app, if you wish, you can sign in with Apple or with Google to keep your plans when changing phones; in that case, we process the email (or the private relay email provided by Apple) and the identifier supplied by that provider. Supabase also records the IP address and technical data of connections to protect the service.
1.2. Plans
The person organizing a plan writes the title, date and time, time zone, location, and a note, chooses the ink and style of the poster, how many companions each guest can bring, whether the guest list is visible, and the name they sign with. They can also list items to bring, specifying how many people can sign up for each item. Anyone who has the plan link can see the poster, the number of responses, and what is left to be brought.
1.3. Guest responses
- Name and response (“attending,” “maybe,” or “unable”), number of companions, and the items you sign up for. Those viewing it are the organizer and, if they make the list visible, other guests who open the link.
- Optional message: only seen by the organizer and you.
- On the web, your name is remembered in your browser’s local storage so you do not have to type it for the next plan. It does not leave your device except when you send a response.
Type only a name or a nickname that people use to recognize you; your full name is not required.
1.4. Recommending the app
To apply the free month of Plus for referrals (details in the Terms), we save which account invited you the first time you responded to a plan, whether the reward condition has been met, how many months you have earned, and how long you have Plus for free. We do not save anyone’s contact information.
1.5. Advertising (Google AdMob)
The app displays ads through Google AdMob. Google may process the device’s ad identifier (IDFA on iOS, AAID on Android), device data, approximate location derived from the IP address, interactions with the ads, and diagnostic data, according to Google’s privacy policy. With the app in Spanish, ads from TuIAgencia, the holder’s agency, are also displayed; these do not use the ad identifier nor do they profile you. The poster page on this website does not display ads.
1.6. Purchases (Yupiplan Plus)
All purchases are processed entirely by Apple or Google. We do not receive or store your card data, bank account information, or billing details. To validate the purchase and allow restore purchases, we use RevenueCat, which receives an anonymous identifier and the store receipt.
1.7. Protection against abuse
To stop those trying random codes or making too many requests, we record for one day how many calls each anonymous account makes. These logs are automatically deleted.
1.8. Messages and reports
If you write to us at hello@opharana.com or report content, we process your email, the reported content, and what you tell us, solely to address your inquiry.
2. Purposes and legal bases (GDPR)
| Purpose | Legal basis (art. 6 GDPR) |
|---|---|
| Create your anonymous account, maintain your session, and, if you request it, link it with Apple or Google | Performance of a contract (6.1.b) |
| Create and share plans, collect responses and the list of who is bringing what | Performance of a contract (6.1.b) |
| Apply the invitation promotion and purchases | Performance of a contract (6.1.b) |
| Protect the service against abuse and moderate reported content | Legitimate interest (6.1.f) and legal obligation (6.1.c) |
| Personalized advertising in the app | Consent (6.1.a), via the Google form (UMP) and, on iOS, the tracking permission (ATT) |
| Non-personalized advertising in the app | Legitimate interest (6.1.f) or limited consent, depending on your choice |
| Address your inquiries and the exercise of your rights | Legal obligation (6.1.c) or legitimate interest (6.1.f) |
3. Advertising and your consent
- EEA, United Kingdom, and Switzerland: before loading any Google ads, the app displays the Google consent form (User Messaging Platform). You can accept personalized advertising or reject it; in that case, non-personalized ads are shown.
- iOS: furthermore, the system shows the Apple tracking notice (App Tracking Transparency). If you do not authorize it, the IDFA is not used.
- Changing your mind: within the app, in You → “Ad privacy”; on iOS, Settings → Privacy & Security → Tracking; on Android, Settings → Google → Ads.
- No ads: with Yupiplan Plus the app does not load any advertising.
The Spanish version of this document prevails.
4. Data recipients
| Provider | Function | More information |
|---|---|---|
| Apple / Google Play | App distribution, optional sign-in, and purchase processing | apple.com/legal/privacy · policies.google.com/privacy |
| Google (AdMob / UMP) | In-app advertising and consent management | policies.google.com/privacy |
| Supabase | Accounts and database for plans and responses, on European Union servers (Ireland) | supabase.com/privacy |
| RevenueCat | Purchase validation and restoration | revenuecat.com/privacy |
| Expo | App updates: receives the IP address and an installation identifier | expo.dev/privacy |
| Vercel | Hosting for this website | vercel.com/legal/privacy-policy |
We do not sell your data or share it with any third parties other than those indicated. The controller is established in the United States and some providers may process data outside the European Economic Area; such transfers are covered by the European Commission's Standard Contractual Clauses and/or adequacy decisions (such as the EU-U.S. Data Privacy Framework).
5. Retention
Each plan, along with its responses, messages, and the list of who is bringing what, is automatically deleted one year after its date; the organizer can delete it sooner from the app. Your account and name are kept as long as you use Yupiplan. Abuse protection logs are deleted daily. Emails you send us are kept for the duration of the request handling and, afterwards, for the time necessary to prove that we addressed it. Data processed by Google and RevenueCat is kept according to each provider's timeframes.
6. User content and moderation
Plan titles, locations, and notes, item names, and guest names and messages are written by users. Links and invisible characters are not allowed. You can report content by writing to hello@opharana.com with the link to the plan; we review it as soon as possible and remove anything that violates the Terms. The organizer can remove any response from their plan.
7. Security
Communications with the indicated services are encrypted (TLS). The database cannot be read directly: the app and website only use functions that check your session on every call and return only what you are authorized to see for each plan. Plan codes are random and the server throttles anyone attempting to guess them.
8. How to delete your data
From the app: open You (the square with your initial, top right) and tap "Delete my data"; we will ask for confirmation. Upon confirmation, immediately and permanently:
- the plans you organize are deleted, along with all their responses and the list of who is bringing what;
- your responses to others' plans and the things you signed up for are deleted;
- your user account is deleted, along with your name and promotion data (months of Plus earned by inviting are lost);
- the data the app stores on your phone is also deleted.
If you responded from the web: your response is linked to that browser's anonymous account. You can ask the organizer to remove it from the app or email us at hello@opharana.com with the plan link and the name you used to respond, and we will delete it. Clearing site data in your browser deletes the remembered name and session, but not the response already sent.
Plus purchased in the store is not lost: you can recover it with "Restore purchases". RevenueCat keeps the receipt with the anonymous identifier; if you want us to delete it, email us at hello@opharana.com. Deleting your data does not cancel a subscription: this is managed from your Apple or Google account (details in the Terms).
9. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing, portability, and withdrawal of consent by writing to hello@opharana.com. We will respond within one month. To locate your data, we will ask for the plan link and your name on it. You may also lodge a complaint with the supervisory authority; in Spain, the Spanish Data Protection Agency (aepd.es).
10. Minors
Yupiplan is not directed to minors under 14 years of age and we do not knowingly collect data from minors. We do not verify age. If you are a parent or guardian and believe a minor is using the app, you can prevent it using the device's parental controls or by writing to hello@opharana.com.
11. Changes to this policy
If we modify this policy, we will publish the new version at this same URL (https://yupiplan.com/en/privacidad) and update the date. Substantial changes will be noted in the app. This policy is published in several languages; in case of discrepancy, the Spanish version prevails.
12. Contact
OPHARANA LLC
99 Wall Street, Suite 1432, 10005, New York, United States
hello@opharana.com