Privacy Policy

Last updated: February 11, 2026

Overview

Yello is a calling app designed for children, and we take privacy — especially children's privacy — very seriously. We collect only the minimum data needed to make the app work, and we never sell or share personal information.

Information We Collect

Yello collects and stores the following data to provide its core functionality:

• Anonymous authentication — Yello uses Firebase Authentication to create an anonymous account for each device. No personal information (name, email, phone number) is collected during this process. The anonymous account is used solely to associate your contact list with your device.
• Contact list — The contacts you add to Yello (names and phone numbers of approved callers) are stored in Google Cloud Firestore, linked to your anonymous account. This data is used to enable calling functionality and is not shared with any third party.
• VoIP push tokens — Yello registers for VoIP push notifications through Apple Push Notification service (APNs) so that incoming calls can ring your device. The push token is stored in Firestore and is used solely for delivering call notifications.
• Call history — A log of calls (contact name, time, and duration) is stored locally on the device for parents to review. Call history is not transmitted to external servers.

Microphone Access

Yello requires access to your device's microphone to make and receive voice calls. The microphone is only active during an active call and is not used for any other purpose. Audio is transmitted directly between callers using peer-to-peer WebRTC connections and is not recorded or stored.

Data Storage and Security

Data stored in Firebase and Firestore is protected by Google Cloud's security infrastructure, including encryption in transit and at rest. On-device data is protected by your device's built-in security features (passcode, Face ID, Touch ID).

Third-Party Services

Yello uses the following third-party services:

• Firebase Authentication — For anonymous device authentication (Google)
• Cloud Firestore — For storing contact lists and push tokens (Google)
• Apple Push Notification service (APNs) — For delivering incoming call notifications

No analytics, advertising, or tracking frameworks are included in the app.

Advertising and Tracking

Yello does not contain any advertising. We do not use any analytics or tracking SDKs. We do not collect device identifiers for advertising purposes. We do not share any data with advertisers or data brokers.

Children's Privacy (COPPA)

Yello is designed to be used by children under parental supervision. We comply with the Children's Online Privacy Protection Act (COPPA):

• We do not collect personal information from children. Authentication is fully anonymous.
• Contact information is entered and managed by parents, not children.
• All app settings are protected behind a parent-controlled PIN.
• We do not include behavioral advertising or interest-based targeting.
• We do not require children to provide more information than is reasonably necessary.

Data Deletion

You can delete your data at any time:

• Individual contacts — Remove contacts from within the app's settings.
• All data — Uninstalling the app removes all locally stored data. To request deletion of cloud-stored data (contact list and push token), email support@yellophone.app.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.

Contact

If you have questions about this privacy policy or your data, contact us at support@yellophone.app.