Yonder Privacy Policy
Yonder recommends movies and shows for you, and for you and the people you watch with. This policy explains what Yonder collects, why, and the choices you have. Yonder is in testing, and this policy will be updated before it is publicly available.
What Yonder collects
- Your first name, as you enter it, so each profile on a phone can be told apart.
- Your answers and ratings: how you answered each question card (including "haven't seen it") and every rating you give.
- Your streaming services: the services you pick, so recommendations can show where to watch.
- How you use the app: which titles were recommended to you, which you rated, saved to your watchlist, marked not interested, or scrolled past, which screen each action happened on, and when.
- Technical details: the app version, and a random identifier created for your phone. This identifier is not linked to your Apple ID, phone number or any other app.
Yonder does not collect your email address, phone number, contacts, location, photos, or advertising identifiers.
How it is collected
Everything above is stored on your phone. While Share my results with Yonder is on (it is on unless you turn it off in Profile), the app also sends a copy to Yonder from time to time: when you finish the questions, when you leave the app after making changes, and when you open it (no more than once a day). Copies are stored in Apple's iCloud service on Yonder's behalf, and only Yonder can read them.
You can also send your results yourself with Manually email results to Yonder in Profile.
If your iPhone is signed in to iCloud, the profiles on it are also backed up to your own private iCloud storage, so they come back on a new phone. Only you can read that backup; Yonder cannot.
If you share your profile link or QR code with someone (for example, to see recommendations together), they can see your first name and your ratings, and they keep seeing your new ratings as you add them. To make that work, a copy of your first name and ratings is kept in Apple's iCloud under a random code that only your link contains. Anyone who has your link can see it, so only share it with people you choose. When someone adds you from your link, Yonder adds them to your phone too. Adding someone from their link works the same way: a copy of your profile is made so they can see you too.
If you set someone up on your phone and send them an invite link, the same kind of copy is made of their profile (their first name and the answers given on your phone) so they can open it on their own iPhone, and a copy of your own profile is made so you stay connected. Anyone with that link can see it, so send it only to that person.
If you share a title with a connection, Yonder leaves a note for their phone in Apple's iCloud with the title, your rating of it if you gave one, and your first name. Your first name is shown in the notification they get ("Zach shared a title with you"); the title and rating are scrambled so only their phone can read them. The note can only be found with their link, and your phone deletes it after 60 days. Sharing with someone set up on your own phone stays on your phone.
Removing a connection in Users removes it on both phones: Yonder leaves a note for the other person's phone, and their copy of your profile is removed the next time they open Yonder. Links shared before then stop working (the copies behind them are emptied), and your remaining connections are moved to new links automatically. Notes your phone left at a link that has stopped working are deleted. Removing someone you set up on your phone empties their copy too. Your private iCloud backup keeps a removed profile marked as removed, so it can be recovered if removed by mistake.
How Yonder uses it
- To make and improve recommendations, for you and for everyone who uses Yonder.
- To measure how accurate recommendations are and to find and fix problems.
Yonder does not sell your information, does not show ads, and does not use your information to track you across other companies' apps or websites. It is not shared with anyone else, except Apple, which stores it.
Your choices
- Turn sharing off at any time in Profile. Nothing more is sent automatically after that. What you've already sent is kept unless you ask for it to be deleted.
- Delete your data: email the address below with your first name and roughly when you used Yonder, and Yonder will delete what it has received from you. Removing a profile from the app deletes it from your phone.
How long it is kept
Yonder keeps shared results to keep improving recommendations, unless you ask for them to be deleted. First names are removed from shared results within one year after the testing period ends.
Children
Yonder is not directed at children under 13 and does not knowingly collect information from them.
Changes
If this policy changes, the new version will appear in the app with a new effective date.
Contact
Questions or deletion requests: yondersupport@icloud.com