Privacy policy
This policy explains what yuppop (yuppop.com) collects when you use the site, why, and who else handles it.
Data controller: kamimi, an individual who operates yuppop ("we"). Privacy questions and requests: kammy0625@gmail.com.
What we collect
- Account: your email address, and either a securely hashed password or the ID of the Google account you sign in with.
- Purchases: what you bought, the amount, the credits added and the payment status. Card details are processed by Waffo Pancake, our payment partner; we never see or store them.
- Videos you make: when each video was requested, the quality you chose, its status, and a temporary link to the finished file.
- Technical data: your IP address and basic request logs, used to keep the service secure (for example, limiting repeated sign-in attempts).
Your photos
We do not store your photos. When you make a video, the photo is held in our server's memory for a few minutes so our video-generation provider can fetch it, then discarded. The provider keeps a copy only while your video is being made, and we delete that copy as soon as the video is finished or fails. The provider may keep limited technical logs under its own policy.
Only upload photos of yourself or of people who have agreed to it.
Your finished videos
The provider makes your video available to us through a link that expires after about 24 hours. Your browser downloads it from us and saves it in your browser's storage ("My Videos"). We do not keep a copy. Clearing your browser's site data deletes those videos, so download the ones you want to keep.
Who processes data for us
- Waffo Pancake (Waffo.com Limited) — checkout and payments, as our reseller and Merchant of Record.
- Google — sign-in with Google, if you choose it.
- API易 (apiyi.com) and its icover.ai asset library, with ByteDance's Volcano Engine (Seedance model) — making your video from your photo. Processing takes place on servers outside the EU.
- Resend — sending account emails such as password-reset links.
- Cloudflare — delivering the site securely.
- Our servers and database are hosted in the European Union.
We do not sell your personal information or use it for advertising. We may disclose data where required by law, court order or a lawful request from a regulator.
International transfers
Our servers are in the EU, but some providers above process data elsewhere: your photo is processed by our video provider on servers outside the EU to make your video, and Google, Resend and Cloudflare may process data in the United States. Where a provider offers Standard Contractual Clauses or a similar safeguard we rely on it; otherwise the transfer is necessary to provide the service you ask for. If you do not want your photo processed outside the EU, do not use the video feature.
How we protect data
All traffic uses HTTPS. Passwords are stored only as secure hashes, sign-in attempts are rate-limited, and access to our servers and database is limited to us. If a security incident affects your personal data, we will notify you and the relevant authorities within 72 hours of discovering it, where the law requires.
Cookies
We use one essential cookie to keep you signed in (plus a short-lived one during Google sign-in). We use no analytics or advertising cookies.
How long we keep data
- Photos: not stored; deleted from our provider as soon as your video is finished or fails, usually within minutes.
- Video links: expire after about 24 hours.
- Account and video records: kept while your account exists and deleted within 30 days after you ask us to delete your account.
- Purchase records: kept for up to 7 years, as accounting and tax rules require.
- Server logs: kept for a limited time for security, then overwritten.
Your rights
You can ask us to access, correct, export or delete your data, or to delete your account, by emailing kammy0625@gmail.com. We reply within 30 days. If you are in California you have the right to know, delete and correct your personal information and not to be discriminated against for using these rights; we do not sell or share it for advertising. If you are in the EU or UK you also have the right to object to or restrict processing and to complain to your local data protection authority.
Age
The service is for people aged 18 or older. We do not knowingly collect data from anyone under 18; if you believe a minor has used the service, email us and we will delete their data.
Changes
If we change this policy we will update the date above. Material changes will be announced on the site.