YET LEGAL UPDATE

Account safety

Notice date: October 7, 2026

When this update applies

This notice applies when the updated flow is activated. Its essential information and this link must be shown before you submit or correct an age/residence declaration or request or accept a guardian link. Publication alone does not activate the controls or mean that an older app supports them. An updated app may be needed to continue ordinary account use; help and account-deletion routes remain available.

For that flow, this addendum qualifies the September 29 statements that YET does not collect a date of birth or country of residence or verify parental authorisation, that new profiles are public by default, and the descriptions of eligibility, location and account-linked analytics. The protections below apply instead where those descriptions conflict. The October 5 username update and other content-review rules are unchanged. This notice does not waive mandatory notice or renewed agreement requirements, supply consent where it is required, or silently replace an accepted document.

Age and availability

You must be at least 14 to use YET, subject to any higher minimum age or other mandatory condition that applies to you. Below 14, ordinary account use is restricted. We use your declared age and ordinary residence, meaning the country where you normally live, to apply account rules. A store rating, App Store country or temporary travel is not proof of age or ordinary residence. Guardian permission cannot override a prohibition.

In this rollout, ordinary account use is unavailable to people ordinarily resident in Australia, Brazil or mainland China, including existing account holders. This restriction is not a request to choose a different country. Contact info@yet.social for a correction, review or help with deletion.

For now, people under 18 in India need reviewed guardian authorisation for core account use before ordinary access. This is a precautionary access condition while the applicable core-service authorisation requirements are resolved. It is not a statement that a 14-year floor establishes compliance in India or every other country. Other mandatory local requirements remain applicable; this update does not transfer YET's responsibilities to you.

Declarations and targeted checks

We ask for your date of birth and country where you normally live. Give accurate information; these details are private. An ordinary valid declaration meeting the access conditions, with no unresolved safety concern, can proceed without waiting for human approval. This is self-declaration, not verified proof of age, identity or parental authority. Rules automatically apply age/country restrictions and protective settings; you can ask a person to review a mistaken outcome.

Changing your birth date or residence requires targeted review, including edits that would change an age threshold, territory restriction or protection. An unresolved review, restriction or previous rejection is not bypassed simply by submitting again. You can also voluntarily request an age/residence review, for example to prepare for a guardian relationship. A voluntary check does not itself turn an otherwise eligible account into a restricted account.

Separately, YET's owner can open a targeted review after assessing a credible underage or other account-eligibility report. A report is not automatically proof of a violation and does not automatically approve or reject someone's age. This is a deliberate human action, not an automated age-inference or report-classification service. Protective restrictions can apply while a concern is reviewed. A pending review is not a finding of dishonesty.

Protections for under-18 accounts

These protections apply to all accounts declared or reviewed as under 18, not only those under 16. Their profiles are private, exposure through public discovery is restricted, and public event publication and public social activity are restricted. An unknown age is not treated as adulthood; accounts awaiting a required declaration or targeted check retain protective restrictions.

• Contact is limited to permitted contacts under the account's safety settings, with blocking and other access checks still applying. Where guardian approval is required, the teen cannot add contacts alone. Following a public account does not give it permission for reciprocal contact.
• Available public-event discovery is non-personalised. City-based browsing does not require sharing device location; personalised recommendations are off for protected accounts.
• Device-location access and live-location sharing are off for protected accounts. A guardian cannot enable either in this rollout.
• In the activated flow, you may deliberately enter a city or venue in a private event shared only with allowed contacts. A manually entered place is not device or live location and does not enable either. These controls are not a blanket ban on manually entered places; this limited option does not permit public sharing of a protected account's venue.
• Account-linked product analytics are off for protected accounts. Necessary authentication, security, safety-review and technical service records are separate; this is not a promise that no data is processed.

Reaching 18 does not automatically publish a previously private profile. An approved guardian relationship does not remove the under-18 privacy, device/live-location or analytics protections described here.

Optional verification and guardian authority

Verification is optional for an otherwise eligible account without a required check. It is necessary before a guardian relationship can grant authority: both accounts need reviewed declarations, the guardian must be an adult, and an authorised reviewer must check the guardian's current legal authority for that child. A guardian invitation or acceptance alone is not approval. Where guardian authorisation is an access condition, ordinary access waits for the required account and relationship reviews.

Contact us to arrange an available existing review method before providing evidence. Methods include original-document inspection for age, residence-record inspection and independent-authority attestation; guardian authority can be checked against an official relationship record, court order or independent-authority attestation. We do not promise that every method is available in every case. A short-lived case code binds the actual check to the account and current review; entering a code alone is not verification.

Do not email or upload identity documents. The review process retains no copies or recordings of inspected documents. The reviewer records the method, date, outcome and necessary case references only after a real check; an automatic admission or a completed form does not generate evidence of inspection. Guardian status does not automatically reveal private messages or override an age or territory restriction.

Data, purposes and access

Tommaso Savorana, based in Italy and operating YET, is the controller. We keep your declared birth date and residence, account identifiers, declaration revisions, eligibility and protection state, relevant concern/report references, guardian requests and responses, permitted-contact settings, review reasons and outcomes, and notice version and submission time. If a real check occurs, we also keep its limited verification receipt and reviewer reference. These are not public profile fields. Information can come from you, a proposed guardian, a report or an actual review, not only from your own declaration.

Necessary account-safety processing serves our legitimate interests in protecting users, applying eligibility rules and addressing mistakes or abuse, subject to necessity and your rights, particularly children's rights. A specific legal obligation, where applicable, is a separate basis, not a claim that every safety measure is required worldwide. These records are not used for advertising or AI age estimation. This notice does not create blanket permission for sensitive information or optional processing.

Access is limited to necessary service processing and authorised reviewers and support personnel. A proposed or approved guardian receives the information needed for the link and permitted safety settings, not general access to the account. We use the existing infrastructure and support providers described in the Privacy Policy; its recipients, international transfers and safeguards continue to apply. We explain relevant decision reasons without unnecessarily exposing a reporter or another person's private data.

A submitted notice version records the notice associated with the operation. It is not proof that you read this page, not new acceptance of the Terms, not consent to optional processing and not evidence of human approval. Self-declared and reviewed outcomes remain distinct.

How long records remain

Temporary case codes expire after 10 minutes; operation-retry records expire after 24 hours. Detailed verification receipts and decision/workflow audit records expire after 30 days from their creation. These periods cover those temporary records, not all account-safety records. Scheduled cleanup is not instant erasure; provider logs and backups have separate schedules described in the Privacy Policy.

We retain current eligibility and protection state, declarations, necessary guardian links and concise case reasons/status while needed to apply account rules and handle corrections. Expiry of a temporary receipt does not erase a restriction or make a guardian valid. Account-safety data is included in account deletion, subject to limited retention needed for an open case, a specific legal obligation or a justified claim. The purpose and necessary duration, rather than a blanket 30-day or content-moderation period, govern such records. Ask us for the period or criterion for a particular record. Existing privacy and deletion rights remain available.

Corrections, reports and appeals

Contact info@yet.social for a correction, to report an age concern or to request free human review of a restriction. Include your username and a short explanation, not identity-document copies. You may object to legitimate-interest processing or request access, correction or deletion under the Privacy Policy, and complain to the competent data-protection authority where applicable.

An appeal of a human account-safety decision requires a different authorised reviewer from the person responsible for the original decision. A reviewer cannot decide a case in which they are the subject or guardian. A restriction is not automatically removed while review is pending. Help, reporting, correction and account-deletion routes remain available during an age or territory restriction. Existing mandatory remedies and the Terms' review rights are not shortened by this notice or a receipt's expiry.

What this update does not activate

Usage-time controls remain off: this rollout provides no active 60-minute limit or guardian-adjustable daily usage budget. Those controls need a separate verified rollout before any active-limit claim. No new service provider, biometric collection, AI age estimation or advertising processing is introduced. Google Cloud Natural Language and Vision content screening remain disabled. Existing covered public-content review remains human review, subject to the separate October 5 username update.

The original accepted documents remain unchanged: September 29 Terms, September 29 Privacy Policy, September 29 Community Guidelines and September 29 Cookie Policy.