Privacy Policy

Last updated September 27, 2024

Bathrooms are a sensitive area. While we appreciate a well-maintained bathroom, we do not support companies prioritizing profit over your privacy. Frankly, we don’t care what brings you to the restroom. Our primary concern is that you respect the space and remember that someone is going to need that bathroom after you.

We don't know who are We are not tracking or sharing your personal data We don’t know what you’re doing...and we don’t want to.

We think bathrooms habits should stay anonymous. Don’t you? We don’t want to know your name. Use a username! What you do in the bathroom is your business. We get rid of all individual data. We only care about when the restroom needs to be cleaned again. If you have a weird restroom habit, it will stay your secret.

We are on a mission to provide easy access to clean, quality restroom, and the only data we care about is related to aggregate usage. For example, we want to know how many restrooms uses before a cleaning is required.

Overview

A Letter to Our Users,

Welcome to privacy at Yedi. To us, privacy means a using Yedi network restrooms without worrying about your privacy. We want to assure you that your data will not be misused, misappropriated, or bought and sold in ways you’re not aware of.

We care about your privacy and want to be upfront about how we treat your personal data: what we do collect, why we collect it, where it all goes, and for how long. So we wrote this privacy policy to explain it to you in the clearest, simplest way we know how.

In addition to this privacy policy, please read our Terms of Service which also applies to your use of the Yedi Platform and Yedi App. The Yedi Platform is our software platform offered to businesses (the “Yedi Platform”). It’s also where you can find any terms not directly defined in this policy.

One more reminder before you get started. We care about your privacy, but unfortunately, our restrooms are not always going to achieve perfect conditions. To ensure you are given the privacy you deserve, you should make sure you ensure the door is closed when you enter, and check that when you’ve locked the door, that the indicator is red.

We do offer tips to help you limit risk of problems occurring when you’re in the restroom. Check out the section “Using the Restroom the Right Way” below for more.

And as always, if you have any questions or suggestions, give us a shout at support@yedi.app. We’re all ears!

Important Definitions

We have a variety of terms that we use to help standardize and clarify our language around privacy, data, and restroom use. Below is a list of each term with a corresponding explanation:

Personal Data means any information that identifies or relates to a particular individual (often referred to as “personally identifiable information” or “PII”). Data that is completely anonymized and cannot be linked with an individual user is NOT considered Personal Data.

Retailers are a group of restroom service providers that help us deliver quality restroom experiences. This group may include:

Convenience stores, restaurants, cafes, or coffee shops

Any other brick & mortar shop that operates restrooms of small to medium size supporting one to three users

Cleaning Staff are the group of people responsible for on-the-ground cleaning and upkeep of Yedi Network restrooms. They receive user feedback if a problem is reported in a Yedi restroom.

What personal data do we collect?

Category of personal data Example When we collect this data Examples of why we collect this data

Anonymous Positional Data Relative position to key points. NOTE: this data is not stored after you leave the restroom When you are inside the bathroom

For safety, in case you fall or pass out

To inform if the restroom is occupied

Wait time estimation

Device Data Type of device and operating system used to access the Services Automatically, when you scan our QR code or use NFC to access our payment portal

To serve the correct portal and avoid 404 errors

To understand the range of devices our software should support

When you are using the Yedi App

Category of personal data Example When we collect this data Examples of why we collect this data

Profile or contact data Username, Email, Phone Number, Account Password Directly from you when you sign up for our account

So that you can login to your account

Device Data Type of device and operating system used to access the Services Automatically, when you use our mobile or desktop application

To understand the range of devices our software should support

To debug software issues specific to certain devices or operating systems

Product Usage Data How often you use various product features. Inferences drawn from your product usage data, for instance, “There is higher traffic in the afternoon!” Automatically, when you use our mobile or desktop application

To understand feature usage and improve our product

Product Usage Data never includes the images you upload

When you are using the Yedi Platform

Category of personal data Example When we collect this data Examples of why we collect this data

Profile or contact data Username, Email, Phone Number, Account Password Directly from you when you sign up for our account

So that you can login to your account

Device Data Type of device and operating system used to access the Services Automatically, when you use our mobile or desktop application

To understand the range of devices our software should support

To debug software issues specific to certain devices or operating systems

Product Usage Data How often you use various product features. Inferences drawn from your product usage data, for instance, “Cleanings take an average of 10 mins!” Automatically, when you use CleanFlow or CleanSuite

To understand feature usage and improve our product

Product Usage Data never includes the websites you visit, files you download, or content you create in the product

When you reach out directly or otherwise choose to give us information

For instance, when you submit a bug report or submit feedback for a restroom, we’ll collect the information you share with us to help solve your problem. Specifically, if you submit a restroom problem report we’ll automatically collect the IP address to ensure that submissions are not spam (multiple reports from the same device for the same problem).

Under what conditions would we share your personal data?

We never sell your data, and we’ll only share it in the following circumstances:

If needed to meet our legal requirements or safety measures, or to enforce legal rights. See “Why do we collect personal data?” below for more.

If there’s a change in company ownership such as a merger, acquisition, or bankruptcy, your data may be transferred to the new controlling party. Should one of these events occur, we will make reasonable efforts to notify you before your information becomes subject to different privacy and security policies and practices.

Why do we collect personal data?

In general, we collect personal data to provide and improve our product and Services. This includes data to make the Platform work (such as account information) or data to make the Platform better (such as Device or Product Usage Data). We also collect data to make sure we’re able to:

Protect against fraud, or implement additional security measures. Correspond with you if you reach out with a bug report, support request, or general inquiry. We may also send you updates, product information, or other marketing communications.

Meet legal requirements, safety measures, and enforce legal rights. We’re required to comply with any legal process, law, or regulation that requests we disclose personal information we’ve collected, so long as we consider the request reasonable and lawful. This includes:

Enforcing our agreement terms or resolving disputes.

Protecting your rights, property, or safety, or that of any party that interacts with our product.

How do we store and protect your data and privacy?

We do our best to protect the Personal Data we collect from any unauthorized parties accessing, using, or sharing it, but it’s important to remember that no method of transmitting data over the internet or storing data is 100% secure. We also ask you to help us out with protecting your privacy:

Make sure the door is closed behind you as you enter

Meet legal requirements, safety measures, and enforce legal rights. We’re required to comply with any legal process, law, or regulation that requests we disclose personal information we’ve collected, so long as we consider the request reasonable and lawful. This includes:

When you are exiting the bathroom, ensure the door closes behind

We will only hold on to Personal Data for as long as you have an account with us or as otherwise necessary to provide you with our Services. We’ll will hang on to it for longer if needed to meet our legal requirements discussed above, or if it’s anonymized so that it can’t be linked to a specific user.

If you are a resident of California, Nevada, or the EU, you may be afforded specific privacy rights and protections related to your personal data. Learn more in Appendix A.

Are there age limits to who can use the product?

We do not collect or solicit Personal Data about children under 16 years of age; if you are a child under the age of 16, please do not attempt to register for, or otherwise use the Yedi App or send us any Personal Data.

If we learn we have collected Personal Data from a child under 16 years of age, we will delete that information as quickly as possible. If you believe that a child under 16 years of age may have provided Personal Data to us, please contact us at support@yedi.app.

Yedi Restrooms are for everyone. However, we do not recommend children under the age of 16 sign up for the Yedi App and find and use restrooms without express permission from their parent or guardian.

Changes to our Privacy Policy

We may need to change this Privacy Policy from time to time. If we do, we’ll let you know by placing a notice on the Yedi App. We may also send you an email.

If you opted not to receive legal notice emails (— we get it), or you haven’t given us your email in the first place, the updated policy will still apply. We’ll do our best to get these updates in front of you, however, the ball’s ultimately in your court to read and understand them. If you continue to use the product we’ll assume the updates are okay with you. But please do let us know if you find a bug or something else that we may have missed.

We don't know who are	We are not tracking or sharing your personal data	We don’t know what you’re doing...and we don’t want to.
We think bathrooms habits should stay anonymous. Don’t you? We don’t want to know your name. Use a username!	What you do in the bathroom is your business. We get rid of all individual data. We only care about when the restroom needs to be cleaned again.	If you have a weird restroom habit, it will stay your secret.

Category of personal data	Example	When we collect this data	Examples of why we collect this data
Anonymous Positional Data	Relative position to key points. NOTE: this data is not stored after you leave the restroom	When you are inside the bathroom	For safety, in case you fall or pass out To inform if the restroom is occupied Wait time estimation
Device Data	Type of device and operating system used to access the Services	Automatically, when you scan our QR code or use NFC to access our payment portal	To serve the correct portal and avoid 404 errors To understand the range of devices our software should support

Category of personal data	Example	When we collect this data	Examples of why we collect this data
Profile or contact data	Username, Email, Phone Number, Account Password	Directly from you when you sign up for our account	So that you can login to your account
Device Data	Type of device and operating system used to access the Services	Automatically, when you use our mobile or desktop application	To understand the range of devices our software should support To debug software issues specific to certain devices or operating systems
Product Usage Data	How often you use various product features. Inferences drawn from your product usage data, for instance, “There is higher traffic in the afternoon!”	Automatically, when you use our mobile or desktop application	To understand feature usage and improve our product Product Usage Data never includes the images you upload

Category of personal data	Example	When we collect this data	Examples of why we collect this data
Profile or contact data	Username, Email, Phone Number, Account Password	Directly from you when you sign up for our account	So that you can login to your account
Device Data	Type of device and operating system used to access the Services	Automatically, when you use our mobile or desktop application	To understand the range of devices our software should support To debug software issues specific to certain devices or operating systems
Product Usage Data	How often you use various product features. Inferences drawn from your product usage data, for instance, “Cleanings take an average of 10 mins!”	Automatically, when you use CleanFlow or CleanSuite	To understand feature usage and improve our product Product Usage Data never includes the websites you visit, files you download, or content you create in the product

Appendix A: Privacy Rights by Region

Privacy Rights by Region If you are a resident of California, Nevada, or the EU, you may be afforded specific privacy rights and protections related to your personal data. Scroll down for more information.

European Union and United Kingdom Subject Rights If you are a resident of the European Union (“EU”), United Kingdom (“UK”), Lichtenstein, Norway or Iceland, you may have additional rights under the EU or UK General Data Protection Regulation (the “GDPR”) with respect to your Personal Data, as outlined below.
For this section, we use the terms “Personal Data” and “processing” as they are defined in the GDPR, but “Personal Data” generally means information that can be used to individually identify a person, and “processing” generally covers actions that can be performed in connection with data such as collection, use, storage and disclosure. Yedi will be the controller of your Personal Data processed in connection with the Services.

If there are any conflicts between this this section and any other provision of this Privacy Policy, the policy or portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following applies to you, at gdpr@yedi.app. Note that we may also process Personal Data of our customers’ end users or employees in connection with our provision of certain services to customers as processor of Personal Data. If we are the processor of your Personal Data (i.e., not the controller), please contact the controller party in the first instance to address your rights with respect to such data.

Personal Data We Collect The “Categories of Personal Data We Collect” section above details the Personal Data that we collect from you.
Personal Data Use and Processing Grounds We will only process your Personal Data if we have a lawful basis for doing so. Lawful bases for processing include consent, contractual necessity and our “legitimate interests” or the legitimate interest of others, as further described below.

Contractual Necessity: We process the following categories of Personal Data as a matter of “contractual necessity,” meaning that we need to process the data to perform under our Terms of Use with you, which enables us to provide you with the Services. When we process data due to contractual necessity, failure to provide such Personal Data will result in your inability to use some or all portions of the Services that require such data. The type of data this would include:
- B2B Services: Profile, Contact, Location Address, or Cleaning Data
- Consumer Services: Profile or Contact Data
Legitimate Interests: We process the following categories of Personal Data when we believe it furthers the legitimate interest of us or third parties:
- Profile or Contact Data (Name and Email)
- Device Data
- Product Usage Data (including inferences drawn from your product usage data)
- Other Identifying Information that You Voluntarily Choose to Provide
- We may also de-identify or anonymize Personal Data to further our legitimate interests.
- Geolocation Data (only via our app)

Examples of these legitimate interests include (as described in more detail above):

Providing and improving the Services.
Marketing the Services.
Correspoding with you.
Meeting legal requirements and enforcing legal terms.
Change in company ownership.

Consent: In some cases, we process Personal Data based on the consent you expressly grant to us at the time we collect such data. When we process Personal Data based on your consent, it will be expressly indicated to you at the point and time of collection.
Other Processing Grounds: From time to time we may also need to process Personal Data to comply with a legal obligation, if it is necessary to protect the vital interests of you or other data subjects, or if it is necessary for a task carried out in the public interest.
Sharing Personal Data The “How We Share Your Personal Data” section above details how we share your Personal Data with third parties.
Transfers of Personal Data The Services are hosted and operated in the United States (“U.S.”) through Yedi and its service providers, and if you do not reside in the U.S., laws in the U.S. may differ from the laws where you reside. By using the Services, you acknowledge that any Personal Data about you, regardless of whether provided by you or obtained from a third party, is being provided to Yedi in the U.S. and will be hosted on U.S. servers, and you acknowledge that Yedi may transfer, store and process your information to and in the U.S., and possibly other countries. You hereby acknowledge that such transfer of your data to the U.S. may occur pursuant to a data processing agreement incorporating standard data protection clauses promulgated by the European Commission, a copy of which can be obtained at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX:32021D0914&locale=en (as may be modified pursuant to applicable law), if Yedi is processing your personal data as a processor.
California Resident Rights If you are a California resident, you have the rights set forth in this section. Please see the “Exercising Your Rights” section below for instructions regarding how to exercise these rights. Please note that we may process Personal Data of our customers’ end users or employees in connection with our provision of certain services to our customers. If we are processing your Personal Data as a service provider, you should contact the entity that collected your Personal Data in the first instance to address your rights with respect to such data.

If there are any conflicts between this section and any other provision of this Privacy Policy and you are a California resident, the portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following rights apply to you, contact us at gdpr@yedi.app Access You have the right to request certain information about our collection and use of your Personal Data over the past 12 months. In response, we will provide you with the following information:

The categories of Personal Data that we have collected about you.
The categories of sources from which that Personal Data was collected.
The business or commercial purpose for collecting or selling your Personal Data.
The categories of third parties with whom we have shared your Personal Data.
The specific pieces of Personal Data that we have collected about you.

If we have disclosed your Personal Data to any third parties for a business purpose over the past 12 months, we will identify the categories of Personal Data shared with each category of third party recipient. If we have sold your Personal Data over the past 12 months, we will identify the categories of Personal Data sold to each category of third party recipient.
Deletion You have the right to request that we delete the Personal Data that we have collected about you. Under the CCPA, this right is subject to certain exceptions: for example, we may need to retain your Personal Data to provide you with the Services or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request.
Exercising Your Rights To exercise the rights described above, you or your Authorized Agent (defined below) must send us a request that (1) provides your name and email to allow us to verify that you are the person about whom we have collected Personal Data, and (2) describes your request in sufficient detail to allow us to understand, evaluate and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria. We will only use Personal Data provided in a Valid Request to verify your identity and complete your request. You do not need an account to submit a Valid Request.

We will work to respond to your Valid Request within 45 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.
You may submit a Valid Request using the following methods:

Email us at gdpr@yedi.app
Submit a request to:

Yedi Technologies, Inc.
329 11th St NE
Washington, District of Columbia, 20002

You may also authorize an agent (an “Authorized Agent”) to exercise your rights on your behalf. To do this, you must provide your Authorized Agent with written permission to exercise your rights on your behalf, and we may request a copy of this written permission from your Authorized Agent when they make a request on your behalf. Personal Data Sales Opt-Out and Opt-In We will not sell your Personal Data, and have not done so over the last 12 months. To our knowledge, we do not sell the Personal Data of minors under 16 years of age.
We Will Not Discriminate Against You for Exercising Your Rights Under the CCPA We will not discriminate against you for exercising your rights under the CCPA. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the CCPA. However, we may offer different tiers of our Services as allowed by applicable data privacy laws (including the CCPA) with varying prices, rates or levels of quality of the goods or services you receive related to the value of Personal Data that we receive from you.
Other State Law Privacy Rights California Resident Rights Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Data to third parties for such third parties’ direct marketing purposes; in order to submit such a request, email gdpr@yedi.app.
Nevada Resident Rights Residents of Nevada also have the distinct right to opt-out of the sale of certain Personal Data to third parties who intend to license or sell that Personal Data. Note, this is not applicable to our data collection purposes. Under no circumstances does Yedi sell personal data to third parties.