Privacy Policy

Effective October 18, 2026

Yokal LLC, a Pennsylvania limited liability company (“yokal,” “we,” “us”), runs the yokal app, the yokal business dashboard, the town portal, and yokal.io. This policy explains what we collect, why, who sees it, how long we keep it, and the choices you have.

The short version

• We don’t sell your information, show ads, or use tracking or analytics tools in the app, the dashboards, or on yokal.io.
• The business you order from sees what it needs to fill your order: the name you give, what you ordered, your notes, and your delivery or shipping address. Not your email address.
• Towns never see you or any single business. Town staff only see totals that combine at least five businesses.
• We never see your card number. You pay the business directly through Stripe.
• You can delete your account at any time in the app.

What we collect when you shop on yokal

• Your account. Your email address (you sign in with a code we email you), your first name, and, if you add them, your last name and home town. You can browse as a guest without an account.
• Your orders. The business, what you ordered and the choices you picked, special instructions, the name you give for the order, your note to the business, any tip or promo code, and whether it’s for pickup, delivery, or shipping. For delivery or shipping, the street address, city, state, ZIP code, and delivery instructions.
• Payments. You enter your card or use Apple Pay in Stripe’s secure payment form, and the payment goes straight to the business. We receive only a payment reference, never your card number.
• Saved addresses and favorites, if you choose to save them, including a map point for an address you picked from suggestions.
• Feedback you leave on an order: thumbs up or down, the reasons you pick, your note, and whether the business may reply to you.
• Searches. When you’re signed in, we record what you search for, the town you’re browsing, and the hour, but not who searched. Your recent searches are also kept on your phone so you can repeat them.
• Reports. If you report a business, the reason you pick and anything you write.
• Asking for yokal in your area. If you ask for yokal from the app, your ZIP code and town, with your name and email address so we can reply.
• Your location, only if you allow it. “Near me” uses your phone’s approximate location while the app is open to show shops that can serve you. It stays on your phone, where your phone’s own map service may turn it into a town name. We use it only at that moment to work out which shops are nearby, and we don’t save it.
• Notifications. If you turn on notifications, we keep your device’s notification token so we can tell you about your orders, and your choice of which notifications you get.

What we collect when you run a business on yokal

• Your account and storefront. Your name and email address, and your business’s name, category, description, address, phone number, website, photos, menu or products, prices, opening hours, how you sell, delivery and shipping settings, and sales tax rate.
• Address checks. To confirm your business is real and in a yokal town, we check your address with Google. We keep the standardized address, its map point, and the result, for example whether it’s a business or home address or a PO box.
• Payouts. You set up payouts directly with Stripe, and Stripe collects your identity and bank details under its own privacy policy. We send Stripe your email address and business name to start, and we keep your Stripe account ID, whether payments are turned on, and the legal name, business name, city, state, ZIP code, and business type Stripe verified, to confirm your business is in town.
• Staff logins. The names you give your staff and their login IDs. Passwords are shown to you once and never stored by us.
• Your sales and orders through yokal, your requests to change your business name or address, and records of when you turned the AI advisor on or off.

What we collect when you work for a town or county

Your name, work email address, and the town or county you work for; the reports you save and the report emails you sign up for; and a count of the Insights questions you and your town ask each month. Other staff in your town can see your name and email address.

What we collect on yokal.io

• What you send us. If you use our Book a demo form, we collect your name, email address, whether you’re town staff, a business owner, a resident, or other, your town or business, your state, your job title (town staff only), and anything you write in the message box. If you email us, we receive your email address and whatever you include.
• The town check. On our For businesses page you can enter a ZIP code to see whether yokal is in your area. We use the ZIP code to answer and don’t keep it. If yokal isn’t there yet and you ask us to let you know, we collect your ZIP code, business name, name, email address, and, if you add them, your town, state, and a message.
• What our website host records. Like almost every website, our host keeps standard server logs: your IP address, browser type, the page you asked for, and the time. We use these only to keep our sites running and secure.

Cookies and storage on your device

yokal.io uses no cookies. The business dashboard and town portal use only the cookies they need to work: one that keeps you signed in, and a few that remember your choices (your appearance setting, the town a county staff member is viewing, and how you like your sales laid out). They also remember your place in the portal tour and your ticket-printing setting in your browser. The app keeps your sign-in in your phone’s secure storage, and keeps your bag (for up to 24 hours), the businesses you’ve hidden, and your preferences on your phone only. We don’t use advertising or analytics cookies anywhere.

How we use information

• To run yokal: create your account, send sign-in codes, take orders to the business, apply deals (including “once per customer” limits), send order updates, and show you nearby shops.
• To review every business before it’s listed, check that it’s real and in a yokal town, and review changes to a business’s name or address.
• To give towns privacy-protected totals about local spending (see below).
• To support you, keep yokal secure, prevent fraud and abuse, and meet our legal obligations. To limit abuse, we count how often each account checks out, looks up addresses, and searches; the counts hold nothing about what you did and are deleted after two days.
• To look into reports about a business. Reports go only to yokal’s team, and the business isn’t told who sent one.
• To send the emails you need: sign-in codes, order receipts, decisions about your business, and reports you signed up for. We don’t send marketing email unless you ask for it.

Who sees your information

• The business you order from, and its staff on the order screen, see the name you give for the order, what you ordered, your instructions and note, any tip, and your delivery or shipping address. New-order alerts show your name and the order total. If you leave feedback, they see your first name and note, and can reply only if you allowed it. Businesses don’t see your email address. Each business is independent and is responsible for how it uses your order details.
• Towns and counties see only totals that protect everyone: every figure combines at least five businesses, no single business can make up more than 60% of it, small categories are merged, and figures cover only finished weeks. These totals include how many shoppers live in town or visit, which towns visitors come from, and how many are new or returning, but only as counts that pass the same rules. Search terms appear only when they were searched several times. Towns never see your name, email address, orders, or any single business’s sales.
• Everyone can see a business’s public storefront: its name, description, address, phone number, hours, photos, and menu.
• yokal’s team, signed in with two-step verification, can see what’s needed to support you: account details such as email, name, town, sign-up date, and how many orders you’ve placed, and business details including each business’s own sales. Every action our team takes is logged. We never share a business’s sales with a town.

Companies that help us run yokal

We share information with these companies only so they can provide their service to us:

• Supabase hosts our database, sign-in, and photo storage, in the United States.
• Vercel hosts yokal.io, the business dashboard, and the town portal.
• Stripe processes payments and runs each business’s payout account. You give your payment details to Stripe directly.
• Google checks business addresses, suggests addresses as you type, and, for businesses that deliver within a set distance, checks how far a delivery address is.
• Anthropic provides the AI behind three optional features, described below.
• Resend sends our emails: sign-in codes, order receipts, business decisions, town reports, and website form messages.
• Expo delivers app notifications, such as order updates.
• Google Workspace hosts our email.

When you tap Directions or open an address in maps, your phone opens Apple Maps or Google Maps with that address. We may also share information if the law requires it, to protect anyone’s safety or our legal rights, or as part of a merger, sale, or reorganization of our business (you’d be told, and this policy would still apply).

We don’t sell your information. We don’t sell personal information, share it for targeted advertising, or let anyone else use it for their own marketing.

AI features

Three optional features use Claude, an AI made by Anthropic. We don’t save the questions or answers; we keep only how many questions were asked and what they cost.

• The sales advisor for businesses stays off until the owner turns it on. It sends Anthropic the business’s sales totals, menu, prices, hours, anonymous town search terms, and the owner’s questions. It never sends customer names, email addresses, phone numbers, addresses, or order notes.
• Menu import sends the menu pages a business uploads, only after the owner agrees. We don’t keep the files.
• Insights for town staff sends the staff member’s question and the protected town totals used to answer it. No individual business’s or person’s data is included.

How long we keep it

• Your account, saved addresses, and favorites: until you delete them or your account.
• Delivery and shipping street addresses on orders are erased 14 days after the order is completed or cancelled, or 14 days after a checkout that was never paid, or 30 days after an order the business never finished. The ZIP code and state stay with the order.
• Orders stay in the business’s sales records, because businesses need them for taxes and refunds. If you delete your account, we also remove the name you gave, your notes and special instructions, and any address from your past orders, and the note on any feedback you left. The business keeps what was ordered and the amounts.
• Searches are kept without any link to you.
• Reports about a business are kept as long as we need them to keep yokal safe. If you delete your account, they’re no longer linked to you.
• Business checks, change requests, and our team’s activity records are kept as long as we need them to keep yokal safe, settle disputes, and meet legal obligations.
• If a business owner deletes their account, we remove the storefront, menu, photos, and staff logins. Past orders stay in our records without a link to the business, and the business’s Stripe account stays the business’s.
• Website requests (demo and town check) are deleted within 24 months of our last contact with you unless we’ve started working together. Our hosts keep server logs for a short time under their own retention settings.

Your choices and rights

• Delete your account in the app: Profile, then Delete account. Business owners can do the same from their Storefront tab. You can also ask us to delete it.
• Choose your notifications in the app: Profile, then Notifications.
• Turn off location, notifications, camera, or photo access at any time in your phone’s settings. Business owners can turn off the AI advisor at any time.
• Ask us to show you, correct, or delete the information we have about you, or to stop contacting you: email privacy@yokal.io.

Some states, including California and New Jersey, give their residents specific privacy rights; we honor these requests from everyone, wherever you live. We’ll respond within 45 days. If we turn down a request, you can ask us to reconsider by replying to our answer. You can also have an authorized agent make a request for you; we may need to confirm it’s really you.

Do Not Track and Global Privacy Control. We don’t track you across websites or apps or sell your information, so these signals don’t change anything on yokal. If our practices ever change, we’ll treat a Global Privacy Control signal as a request to opt out.

How we protect it

Everything travels encrypted (HTTPS). Our database limits what each person can see to what they need, our team signs in with two-step verification, staff passwords are never stored, and card details never reach yokal. No system is perfectly secure, but we work to protect what you share.

Children

yokal isn’t meant for children under 13, and we don’t knowingly collect their information. If you think a child has given us information, email us and we’ll delete it.

Changes to this policy

If we change this policy, we’ll post the new version here with a new effective date. If a change is significant, we’ll tell you in the app or on the home page before it takes effect.

Contact us

Yokal LLC, 1026 Washington Street, Huntingdon, PA 16652. Email privacy@yokal.io.