Privacy Policy

• Account details: your mobile number (verified by OTP), first, middle and last name, email address and pincode.
• Profile details you choose to add: photo, gender, date of birth, blood group, marital status, alternate mobile and email, current and permanent address, height, weight and other physical details, health or disability notes, education, occupation and income range, languages, religion, food and lifestyle preferences, hobbies, vehicles, household appliances, emergency contact, and any other fields shown in the profile form. Every one of these is optional unless the app marks it as required.
• Identity documents: images of Aadhaar, PAN, Voter ID, passport or driving licence that you upload for verification.
• Family and friend connections: the people you connect with and the relationship you choose.
• Listings: product titles, descriptions, photos, prices, location and the ways buyers may contact you (WhatsApp, phone call or in-app message).
• Payment and payout details: when you buy a membership, payment is handled by Razorpay. We receive the order and payment status, not your card or UPI PIN. When you withdraw coins, we collect the UPI ID or the bank account holder name, account number and IFSC you enter.
• Referral code: the code you enter, or that is filled in from the invite link you installed the app from.
• Messages to us: reports about listings, support requests and account deletion requests.

• Contacts: only when you tap "Find from my contacts" and agree. The app reads the mobile numbers in your address book and sends them to our server to check which of them have a YasAPS account. Numbers are used only for that check and are not stored. The names saved in your phone never leave your device. Once you agree, the app remembers your choice on that phone and runs the check again when you open the Friends & Relatives screen. You can withdraw this at any time by turning off contacts access for YasAPS in your phone settings.
• Location: only when you tap "Use current location". Your coordinates are used to show nearby listings and the area name. You can enter a pincode instead.
• Camera and photos: only to take or pick the photos you upload. We do not access your gallery beyond the photos you select.
• Notifications: if you allow notifications, we store a push token for your device so we can tell you about connection requests, rewards, payments, withdrawals and listing reviews.

• App version, platform (Android or iOS), operating system version and device model, sent with each request so we can support older versions and fix problems.
• A one-way scrambled (hashed) form of your device identifier, recorded when you register. We use it only to stop the same phone claiming the signup referral bonus more than once. We never store the identifier itself.
• The Google Play install referrer, which tells the app which invite link it was installed from so your referral code can be filled in.
• The time you last used the app, and server logs including your IP address, kept for security and troubleshooting.
• On the website, limited technical data such as browser type, and cookies to remember your language.

• To create and secure your account, including sending login OTPs by SMS
• To show your listings to buyers and help buyers and sellers reach each other
• To connect you with family, friends and relatives who are on the Platform
• To verify identity documents and keep the Platform safe from fraud, fake accounts and abuse
• To run memberships, issue GST invoices, credit and debit Yas Coins, run the referral programme and process withdrawals
• To generate documents you ask for, such as your member ID card and the PDF of your referral network
• To send notifications about your account and activity
• To understand how the Platform is used and improve it
• To meet legal, tax and accounting obligations and respond to lawful requests

We do not sell your personal data, and we do not use it for advertising by third parties.

• Buyers viewing your listings see your name, your mobile number, your membership tier and the listing's pincode, so they can reach you.
• People you connect with, or who find you through their contacts, see your name, photo and APS ID.
• People above you in the referral network (up to 5 levels) see your name, the date you joined, your membership tier and how many people you referred. They never see your mobile number.
• Your member ID card shows your name, photo, APS ID, tier, joining date, mobile number, blood group and locality. It is created only when you download it, and you decide who to show it to.

We share data only with service providers who process it on our behalf, under contract, for the purposes above:

• Amazon Web Services (AWS): storage of photos, documents, invoices and generated PDFs
• Our cloud database provider: storage of account and Platform data
• Google Firebase Cloud Messaging: delivering push notifications
• MSG91: sending OTP text messages
• Razorpay: collecting membership payments and, where used, sending payouts
• Our bank: paying withdrawals by bank transfer
• Google Play: the install referrer for invite links

We may also disclose data to government authorities or courts when the law requires it, to protect the rights and safety of our users or the public, or to a successor if our business is merged or sold, with this Policy continuing to apply.

Data is sent over encrypted connections (HTTPS). Files such as identity documents and invoices are stored privately and opened only through short-lived signed links. Your login session is kept in your phone's secure storage. Access by our staff is limited by role. No system is completely secure, but we will notify you and the Data Protection Board of India of a personal data breach as the law requires.

• Account and profile data: for as long as your account is active.
• Contact numbers sent for matching: not kept after the check.
• Membership payments, GST invoices, coin transactions and withdrawals: for the period required by tax and accounting law (generally 8 years), even after your account is deleted. These records are unlinked from your name and number when the account is deleted.
• Login OTPs: a few minutes.
• Server logs: a limited period for security.

Under the Digital Personal Data Protection Act, 2023 you may:

• See and correct most of your data directly in the app under Profile, My details
• Ask us for a summary of the personal data we hold about you and who we shared it with
• Withdraw consent, for example by turning off contacts, location or notification access in your phone settings
• Delete your account and personal data at any time through yasaps.com/account/delete-account. Any Yas Coin balance is forfeited on deletion.
• Nominate another person to exercise these rights if you die or become unable to
• Raise a grievance with our Grievance Officer, and then with the Data Protection Board of India if you are not satisfied

The Platform is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

We may update this Policy as the Platform changes. We will change the effective date above and, for significant changes, tell you in the app. Continuing to use the Platform after that means you accept the updated Policy.

For questions, requests or complaints about your personal data, contact our Grievance Officer. We acknowledge complaints within 24 hours and resolve them within 15 days.

Grievance Officer, YAS Natural Production & Management Services Private Limited
C/o Sanjay Tamaskar, MIG-09, Near Raigarh Stadium, Chakradharnagar, Raigarh, Chhattisgarh, 496001
Email: suriyaaps7@gmail.com