The EU Data Protection Regulation (GDPR) sets a new standard for how companies use and protect EU citizens' data.  It goes into effect May 25, 2018. 

At Yapp, we have always valued the privacy of our customers and end users.  We have always worked hard to store your data in a secure manner, collect only what you would expect to run and improve the service, and be transparent about the use of your data on our platform. 

This new regulation sets an even higher bar for data protection and privacy, and in the past months we have worked hard to prepare for GDPR. Below you'll find some more information on GDPR and Yapp's compliance with the new law.

The EU General Data Protection Regulation (“GDPR”) is a comprehensive data protection law that came into effect on May 25, 2018.  The law strengthens the protection of “personal data” and the rights of the individual. It's a single set of rules which governs the processing and monitoring of EU data.

If you are a Yapp user from the EU and/or are an app creator with users in the EU, then GDPR applies to you.  As an EU citizen, under GDPR you have extended rights as it pertains to the portability and deletion of your personal and app usage data.  As an app creator, you have that same responsibility towards users of your app which Yapp will help you fulfill.
​

Our team worked hard to ensure we complied with GDPR. Here are some things we did to ensure we set up ourselves and our users to meet GDPR obligations:

Yapp already allowed data portability for its customers.  You can export your content from the app, data about who downloaded your app (if you chose to collect it), and your app analytics (if you chose to collect it).

We also implemented a process to delete user data upon request. 

We updated our Terms of Service to better align with our current service offerings, to ensure that we continue to be transparent about our practices, and to better balance each party's responsibilities to each other.  
​
We clarified the language in our Privacy Policy to better articulate the ways we collect, use, process and share personal information. For EU users, we updated our Privacy Policy to reflect additional rights you may have under the GDPR.  

Strong data protection commitments are a key part of GDPR’s requirements. Our Data Processing Agreement shares our privacy commitments and sets out the terms for Yapp and our customers to meet GDPR requirements.  If you need a signed version of the DPA, please email us at privacy@yapp.us

The EU-US Privacy Shield is a framework negotiated and agreed by the European Commission and U.S. Department of Commerce as a lawful way of transferring personal data. 

To comply with EU data protection laws around international data transfer, we have filed our certification under the E.U.-U.S. Privacy Shield and the Swiss-U.S. Privacy Shield framework. 

We’re reviewing all our vendors, finding out about their GDPR plans and arranging similar GDPR-ready data processing agreements with them. 

Security is a priority for us. You can read our security white paper here 

Feel free to reach out to us via chat or you can email privacy@yapp.us with GDPR related questions.