Your page.
Your choice.

The editor stores your working page and saved editions on your iPhone. Shared photos and links stay in a private app inbox until you add them. Photo cutouts are processed on your device.

You can sign in with an email code or, when available, Apple or Google. Provider sign-in shares a verified account identifier and an email address with Yours; Apple may supply a private relay address when you choose Hide My Email. Yours uses those details to create your account or authenticate a sign-in method you explicitly connect to an existing account. Yours does not receive your Apple or Google password, and Google sign-in requests identity and email access only. Apple and Google receive the sign-in request and handle it under the Apple Privacy Policy and Google Privacy Policy. Yours stores your account, connected sign-in identifiers, secure session records, and any pages you choose to save online. Apple refresh credentials are encrypted on the server so Yours can revoke its access when you delete your account. First publication is a separate action: only a published snapshot is accessible through its public link. After your first online save, connected private pages save privately and connected published pages update their public snapshot automatically while the app is open and connected.

When paid features are available, Apple processes in-app subscription payments and Stripe processes web subscription payments. Yours receives purchase verification information and stores the subscription product, provider transaction identifiers, billing period, status, and link to your Yours account to provide paid access, restore purchases, and prevent a purchase from being claimed by another account. Yours does not store your full payment card number. Apple and Stripe handle payment and billing details under the App Store privacy notice and Stripe Privacy Policy.

Pages viewed in Yours or on the web can load images and linked media from third-party providers. Remote images can load when a page opens. In iPhone versions that show Open in Spotify, Open in SoundCloud or Open in TikTok, those links open the provider’s app or website outside Yours. Yours does not load those three providers’ embedded players inside that app version. Your saved media links remain unchanged. When you open a provider, its own privacy policy and settings apply.

YouTube, Vimeo, Bandcamp and Apple Music remain available as supported players inside the iPhone app. Vimeo, Bandcamp and Apple Music playback starts only after you choose to play and agree to that provider’s privacy notice. Open Menu → Help → Playback privacy, choose one of those providers, and turn its playback off. You can also turn playback off from its player privacy control. This stops that provider’s players in Yours and leaves your saved page unchanged. See the Vimeo Privacy Policy, Bandcamp Privacy Policy and Apple Music web-player notice.

Embedded media providers receive network and device information and player activity, and may use cookies or recognize a signed-in account under their own privacy policies. Supported iPhone players use a separate temporary browser store that is discarded when playback closes. This does not prevent the provider from receiving requests or erase information it has already received. The iPhone Vimeo player uses its do-not-track setting, which limits player analytics while allowing essential security cookies. Bandcamp’s policy describes usage analytics and distinguishes advertising cookies that require consent on its website. Yours does not include its own advertising trackers in these pages.

The Yours website and older app versions can still use embedded Spotify, SoundCloud and TikTok players; exported files can also behave differently from the iPhone app. Where a Yours player offers a privacy agreement, choosing to play after that agreement permits it to load. Spotify players use cookies, including third-party cookies, and collect information for analytics as described in the Spotify Widget Terms and Spotify Privacy Policy. Playing Spotify podcasts can also send your IP address to the podcast’s hosting provider. SoundCloud players may collect usage data for analytics; see the SoundCloud Privacy Policy and SoundCloud Cookie Policy. TikTok describes its collection and use of device information and interactions in the TikTok Privacy Policy. Those providers’ practices and cookie choices continue to apply wherever their players load.

Yours uses YouTube API Services when YouTube features are available. Yours sends public video or playlist identifiers to Google to check whether the requested media can be embedded, and briefly caches the returned eligibility information. These checks may also send your IP address and other network information to Google, including when playback is unavailable. Loading YouTube media also sends network and device information to Google, even before Play. The iPhone player uses YouTube’s privacy-enhanced mode. Google says views in this mode do not personalize the embedded or subsequent YouTube experience, and any ads shown are nonpersonalized; contextual ads can still use the current content and general location. Privacy-enhanced mode does not mean that no information is collected. Google handles those requests under the Google Privacy Policy. Using these features is subject to the YouTube Terms of Service.

You can unpublish a page, delete an online page, or delete your account in the app. Account deletion removes online pages, connected sign-in identifiers, and sessions from the active database. An encrypted Apple credential can remain in a restricted retry queue until Apple confirms revocation; it cannot be used to sign back into the deleted Yours account. Deleting Yours does not delete your Apple or Google account. Purchase records are kept so that an active subscription can be restored to a new Yours account that signs in with the same Apple Account. Deleting your Yours account does not cancel an Apple subscription; manage or cancel it separately in Apple subscription settings. Hosting backups follow the hosting provider’s retention process. Device drafts remain under your control in the app.

To limit abuse, Yours keeps request counts and expiry times alongside hashed identifiers derived from request IP addresses, sign-in email addresses or account IDs. These security records recognize repeated requests; hashing does not make them anonymous. Expired records are removed by scheduled cleanup.

Cloudflare provides hosting, database storage, and sign-in email delivery. Operational logs help diagnose service failures and can include request paths and error types. A path can contain a page identifier or public address associated with an account. Page reports contain the reason supplied by the reporter and are kept for review. Please avoid including sensitive personal information in a report.

When you block a publisher in Yours, we store the two account identifiers, a label for your blocked-users list, and the time of the block. The block applies to that publisher’s pages when viewed through the signed-in Yours app. You can remove a block in Menu → Account → Safety & blocked users. These block records are removed when either Yours account is deleted. Published pages can still be viewed outside Yours without signing in.

Beta access requests

When you request beta access on this website, we store your email address and request date so we can contact you about Yours beta access. Submitting a request does not create an app account or send an invitation immediately. To withdraw your request and delete it, email yoursapp.support@gmail.com.

We record invitation status and, when your app account uses the same email address, the date of your first page publication after requesting the beta. This helps us understand whether testers can get started. These records are visible only to the beta team.

Our public marketing pages use Cloudflare Web Analytics without analytics cookies. We also count browser tab sessions using a random identifier in session storage, the landing page, and a broad source category such as search or social. If you submit a request, that identifier and source can be associated with it. We do not collect the full referring URL. Session visit records expire after 90 days; our session measurement is skipped when Global Privacy Control or Do Not Track is enabled. Short-lived, hashed network identifiers limit automated requests.