Yoke Privacy Policy
Effective: 9 October 2026 · Version 2026-10-09
Summary
- We collect only what we need to run Yoke: your account, rooms, credits, and safety reports.
- Your live video and voice go through Agora in real time. Yoke does not record or store them.
- No advertising SDKs, no analytics trackers, and we never sell your data.
- Yoke uses YouTube API Services. The Google Privacy Policy applies to YouTube.
- You have rights under the Data Privacy Act of 2012. Contact our Data Protection Officer at info@queaytech.com, or delete your account any time at /account/delete.
1. Who is responsible for your data
QUEAY INFORMATION TECHNOLOGY SERVICES ("we", "us") operates Yoke and is the personal information controller for your data under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
QUEAY INFORMATION TECHNOLOGY SERVICES
2F BF Building, Alternate Road, Legazpi City, Albay, Philippines 4500
Email: info@queaytech.com
Data Protection Officer: [DATA PROTECTION OFFICER NAME], info@queaytech.com (subject: "Privacy").
This policy applies to Yoke on the web, iOS and Android. It should be read with our Terms of Service, Credits, Payments & Refunds, Community Guidelines and Cookie Notice.
2. What we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account data | Display name, email address, sign-in provider and provider account ID (Google, Apple, Facebook or email code), birth year, profile photo URL if your sign-in provider gives one, date you accepted the Terms | You and your sign-in provider |
| Room data | Room titles, invite codes, who is in which room, minutes connected, who holds the mic, song queue (YouTube video IDs, titles, channel names, thumbnails), Ambag pot contributions | You and other room members |
| Credits and payment records | Credit balance and history, top-up amounts, payment method type (for example GCash or card), transaction IDs from PayMongo, Apple or Google, refund and chargeback status. We never receive or store full card numbers or wallet passwords. | You, PayMongo, Apple, Google |
| Safety data | Reports you make or that are made about you, blocks, feedback and child safety messages, enforcement history | You and other users |
| Technical data | IP address (for security and rate limiting), device type and operating system, app version, session token, error logs | Your device |
| Live audio and video | Your camera and microphone stream during a room call. Transmitted live through Agora only. Not recorded or stored by Yoke. | Your device, with your permission |
We do not collect your precise location, contacts, photos library, or any data for advertising. We do not use analytics trackers or advertising SDKs.
3. How we use your data and our legal basis
| Purpose | Data used | Basis under the Data Privacy Act |
|---|---|---|
| Create and run your account, sign you in | Account, technical | Performance of our contract with you |
| Run rooms, sync songs, connect live calls | Account, room, live audio/video | Performance of contract |
| Sell credits, charge rooms per minute, return Ambag pot credits, handle refunds | Credits and payment records | Performance of contract; legal obligation (tax and accounting) |
| Check you are 18+ | Birth year | Performance of contract; legitimate interest in protecting minors; legal obligation (RA 11930) |
| Keep users safe, review reports, enforce rules, prevent fraud and abuse | Safety, account, room, technical | Legitimate interests; legal obligation |
| Send sign-in codes and important service messages | Performance of contract | |
| Respond to legal requests, protect rights | As needed | Legal obligation; establishment or defence of legal claims |
We do not use your data for advertising, profiling, or automated decisions that have legal effects on you. Our name filter automatically blocks some display names and room titles; you can ask us to review a decision.
4. Who we share data with
We do not sell or rent your personal data. We share only what each service needs to work for you:
| Recipient | Why | Data |
|---|---|---|
| People in your room | So you can sing together | Display name, live audio/video, songs you queue, Ambag contributions |
| Agora (Agora Lab, Inc. and affiliates) | Live video and voice infrastructure; streams are processed in Agora's global network | Numeric user ID, room channel name, live audio/video, connection data such as IP address |
| Google / YouTube | Song search (YouTube Data API), song playback (embedded player), Google sign-in | Search text (sent from our server, not linked to you), the video you play (from your device), Google sign-in token |
| PayMongo | Web payments (GCash, Maya, QR Ph, cards, online banking) | Amount, order reference, the payment details you enter on PayMongo's checkout |
| Apple | In-app purchases and Sign in with Apple | Transaction IDs, sign-in token |
| Google Play | In-app purchases | Purchase tokens |
| Meta Platforms (Facebook) | Facebook sign-in | Access token you approve |
| Hostinger | Hosting our servers and database | All data we store |
| Email provider ([EMAIL PROVIDER NAME]) | Sending sign-in codes and service emails | Email address, message content |
| Authorities | When required by law or to protect someone from serious harm, including reports of child sexual abuse or exploitation | As required |
We require our service providers to protect your data with safeguards at least as strong as this policy and the law require, and to use it only to provide their service to us.
5. International transfers
Some of our providers process data outside the Philippines (for example Agora's global network, Apple, Google, Meta, PayMongo's providers, Hostinger and our email provider). When we transfer data abroad, we remain responsible for it under Section 21 of the Data Privacy Act and use contracts and the providers' security commitments to protect it.
6. YouTube API Services
Yoke uses YouTube API Services. By using Yoke you agree to the YouTube Terms of Service. Google's privacy practices are described in the Google Privacy Policy (also at http://www.google.com/policies/privacy).
- What we access: public YouTube search results only (video ID, title, channel name, thumbnail). We search on your behalf when you type a song name.
- We do not use YouTube sign-in (OAuth). Yoke never accesses your YouTube or Google account data, playlists, subscriptions or watch history, so there is no YouTube authorisation to revoke. If you ever connected Yoke to your Google account through Google sign-in, you can review or remove that access at Google security settings.
- What we store: search results are cached on our server for at most 24 hours, then deleted or refreshed. Songs added to a room queue (video ID, title, channel, thumbnail) are stored with the room's history.
- How we use it: only to show search results and play songs in your room. We share queue items with people in your room. We do not sell it or use it for ads.
- Third-party content and ads: songs play in YouTube's own embedded player in privacy-enhanced mode (youtube-nocookie.com). YouTube may show its own ads in the player and may set cookies or use local storage on your device when a video plays. See our Cookie Notice.
- Deletion: if you ask us to delete YouTube API data related to you (such as your room queues), we will delete it within 7 days. Deleting your account does this automatically.
- Free songs: we never charge for searching or playing songs. Credits pay only for the live video call.
7. Cookies and device storage
On the web, Yoke sets one session cookie (yoke_session) to keep you signed in. The mobile apps store your session token securely on your device. We use no advertising or analytics cookies. The YouTube player may set its own cookies or local storage when a video plays. Details: Cookie Notice.
8. How long we keep data
| Data | How long |
|---|---|
| Account data | Until you delete your account, then deleted immediately |
| Room data and song queues | Until you delete your account (your name and queue entries are removed or anonymised) |
| YouTube search cache | At most 24 hours |
| Live audio and video | Not stored by Yoke |
| Financial and transaction records (top-ups, refunds, credit ledger) | Kept in anonymised form for up to 10 years as required by Philippine tax and accounting rules [CONFIRM RETENTION PERIOD] |
| Safety reports and enforcement records | As long as needed to protect users, prevent banned users from returning, and meet legal obligations; reports involving child safety are preserved as required by RA 11930 and law enforcement requests |
| Sign-in codes | 10 minutes |
| Security logs (IP address) | [CONFIRM LOG RETENTION, e.g. 90 days] |
| Backups | Overwritten on a rolling basis within [CONFIRM BACKUP RETENTION, e.g. 30 days] |
9. How we protect your data
- All connections use HTTPS/TLS. Live calls use Agora's encrypted transport with short-lived access tokens.
- Web sessions use an HttpOnly cookie; app tokens are stored in secure device storage.
- Sign-in tokens from Google, Apple and Facebook are verified on our server. Email sign-in codes expire after 10 minutes and are rate-limited.
- Payment details are handled by PayMongo, Apple and Google, never by Yoke.
- Access to personal data is limited to authorised staff who need it.
- If a personal data breach occurs that is likely to cause you serious harm, we will notify you and the National Privacy Commission as the law requires.
10. Your rights
Under the Data Privacy Act of 2012 you have the right to:
- Be informed about how your data is processed (this policy).
- Access your personal data.
- Object to processing, including where we rely on legitimate interests.
- Erasure or blocking of your data. You can delete your account at any time: Delete your account.
- Rectification of inaccurate data. You can change your display name in the app.
- Data portability: get a copy of your data in a common electronic format.
- Damages if you suffer harm from inaccurate, unlawfully obtained or unauthorised use of your data.
- File a complaint with the National Privacy Commission.
To use these rights, email info@queaytech.com from your account email with the subject "Privacy request". We will reply within [CONFIRM RESPONSE PERIOD, e.g. 15 working days] and may ask you to confirm your identity.
11. Complaints to the National Privacy Commission
Please contact us first so we can try to fix the problem. You may also file a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.
12. Children
Yoke is for adults 18 and older only. We do not knowingly collect data from anyone under 18. If we learn that an account belongs to someone under 18, we close it and delete its data, except what we must keep to meet child protection obligations. See our Child Safety Standards.
13. Changes to this policy
We will post updates here with a new date. If a change is material, we will tell you in the app or by email before it takes effect and, where required, ask for your agreement again.
14. Contact
Questions or complaints about privacy: [DATA PROTECTION OFFICER NAME], Data Protection Officer, QUEAY INFORMATION TECHNOLOGY SERVICES, 2F BF Building, Alternate Road, Legazpi City, Albay, Philippines 4500, info@queaytech.com.