Data Privacy & Collection

Overview

YoListen is an interactive presentation platform that enables real-time audience participation through games like Buzzword Bingo and collaborative puzzles. This page explains specifically how YoListen collects, uses, and protects your data within the application.

For general privacy policy and legal information, please see our main Privacy Policy.

Information We Collect

Personal Information

• Display Name: A display name is required when joining games, but you are not required to use your real name. If you don't specify one, a random name will be generated automatically.
• Email Address: Only collected if you choose to create an account for presentation management features.
• Google Account Information: If you sign in with Google, we receive basic profile information (name, email, profile picture) as permitted by Google's OAuth service.

Usage Information

• Game participation data (bingo card selections, puzzle piece placements)
• Session participation timestamps
• Device and browser information for technical functionality

Public Nature of Service

• Display Names: Your chosen display name is publicly visible to anyone who accesses the application
• Game Actions: Your game participation (marked bingo words, placed puzzle pieces) is visible to other players as this is essential for the collaborative nature of the activities
• Participation Status: Other players can see that you are online and participating in the game
• Real-time Updates: Your actions are synchronized in real-time across all devices for the intended collaborative experience

By using YoListen, you acknowledge and agree that your participation data (display names, game actions) is publicly accessible and visible to all users of the platform.

How We Use Your Information

• Facilitate real-time game participation and collaboration
• Display participant lists and game progress to all players
• Enable presenters to manage and monitor game sessions
• Provide technical support and improve service functionality
• Send account-related communications (for registered users only)

Data Storage and Security

Your data is stored securely using Supabase, a trusted cloud database provider. We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

Game session data is retained only as long as necessary for the functionality of active sessions. Historical participation data may be retained for service improvement purposes.

Age Requirements

YoListen is designed for general audiences and can be used by people of all ages. However:

• Account Creation: Users under 16 years old need parental consent to create accounts
• Anonymous Participation: No age restrictions for anonymous game participation
• Educational Use: The platform is suitable for educational settings and presentations

Anonymous Participation

You can participate in most YoListen activities without creating an account:

• Join games using only a session code or QR code
• Use a randomly generated display name or choose your own
• No email address or personal information required for basic participation

Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication services
• Google OAuth: Optional sign-in service (only if you choose to use it)

These services have their own privacy policies which govern their use of your information.

Legal Basis for Processing

Under GDPR, we process your data based on the following legal grounds:

• Legitimate Interest: Providing real-time interactive games and session management
• Consent: When you voluntarily provide information like display names or create accounts
• Contract Performance: Delivering the interactive gaming service you requested

Data Retention

• Active Game Sessions: Data is retained for the duration of the game session
• Account Data: Retained until account deletion is requested
• Anonymous Participation: Data is retained for a short period after session ends for system stability, then automatically purged
• Analytics Data: Aggregated, anonymized data may be retained for up to 24 months for service improvement

Your GDPR Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right to Access: Request information about what data we have collected about you
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data ("Right to be Forgotten")
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Anonymous Participation: Participate without providing personal information

To exercise these rights, please contact us at the email provided below. We will respond within 30 days.

International Data Transfers

Your data may be processed in countries outside the European Economic Area (EEA). We ensure adequate protection through:

• Supabase: Uses AWS infrastructure with appropriate safeguards and Standard Contractual Clauses (SCCs)
• Google Services: Covered by Google's Privacy Shield certification and SCCs where applicable

Data Protection Contact

For questions about data processing, GDPR rights, or to exercise your rights, please contact our Data Protection Officer:

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.