Privacy policy

Last updated 3 November 2026

Who we are

Yoday (yoday.co) is run by Steven Hylands (trading as Yoday), Northern Ireland. We’re the controller of your personal data under UK GDPR. Questions: privacy@yoday.co.

What we keep, and why

  • Your email address

    To sign you in and send Your week, Your weekend and alerts you’ve switched on

    Basis: Contract

  • Home area, how you get about, how far is fine, when you go out, budget

    To pick what’s on that you can get to

    Basis: Contract

  • Your answers (Going, Interested, Not for me and why), follows, what you tap, open or click

    To learn your taste and show it on Taste, where you can change or undo it

    Basis: Contract

  • Who you’ve ticked that some events are made for (kids’ ages, LGBTQ+, Students, Over 50s, Women, Men), if you tick any

    So events made for one group only reach your picks if you’ve said they’re for you. Never shown to anyone, and you can untick any on Taste

    Basis: Contract; for LGBTQ+, your explicit consent, given by ticking it

  • Your name, handle and who you follow, if you add them

    Friends going, and who sees your plans (you choose in Settings)

    Basis: Contract

  • How the site is used, without cookies

    To fix what’s broken and see what works

    Basis: Legitimate interests

We never sell your personal data, and nothing a host pays for uses it. We may use or share figures across many people (say, how many in Belfast are into comedy) that can’t identify anyone, and never from your calendar.

Your calendar

If you add your plans to your calendar, we only write to it: it fetches a private link of what you’re going to. If you connect Google Calendar, we see only when you’re busy, never what it is, and use that only to rank picks for you and show clashes. We keep your busy times for the next six weeks; Disconnect deletes them and tells Google.

Google user data

Yoday’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We don’t use it for ads, don’t sell it, don’t use it to train AI models, and no person reads it.

Who processes it for us

Supabase (database, Ireland), Vercel (hosting, Dublin), Resend (email), PostHog (EU) and DataFast (analytics, cookieless), and Google if you connect your calendar. Videos and music you play come from YouTube (privacy-enhanced mode) and Spotify.

How long

As long as you have an account. Delete your account in Settings and your answers, taste, follows, friends and calendar links go at once; copies in backups expire within 30 days.

Your rights

You can see, correct, download or delete your data, object to how we use it, or withdraw consent, by emailing privacy@yoday.co. You can complain to the ICO.

Age

Yoday is for people 18 and over.

Changes

We’ll say on this page, with the date, and email you about anything that matters.