Privacy Policy

Last updated: 30 September 2026

This policy explains how the Yesoid Portal mobile app (“the app”) handles your information. The app is a private tool for staff, mentors, supervisors and administrators of Yesoid. It is not intended for the general public.

Who this is for

The app requires an account issued by Yesoid. Only authorised users (mentors, supervisors, case managers and administrators) can sign in.

What information the app collects

• Account information you provide or that Yesoid holds: name, email, phone, address, role and profile details.
• Session and booking data: mentoring sessions you create, start, complete, and any notes or expenses you record.
• Location data: while — and only while — you have an active mentoring session running, the app records your device’s GPS location periodically to verify attendance and mileage/expenses for safeguarding and funding purposes. Location is never collected in the background when no session is active. You can decline the location permission; sessions still work but location will not be recorded.
• Device notification token: lets us send you push notifications (e.g. session reminders).

How we use it

• To operate the mentoring portal (bookings, sessions, messaging, compliance, supervision, funding and reporting).
• To send reminders and alerts by push notification and/or email. You can turn any of these off in the app under Profile Settings → Notifications.
• To verify session attendance and expenses using session-time location.

Where your data is stored

Data is stored in Google Firebase (Firestore, Authentication and Storage) and processed by our backend on Google Cloud Run. Push notifications are delivered via Firebase Cloud Messaging (Google) and Apple Push Notification service (Apple). Emails are sent via our email provider. These providers process data on our behalf.

Sharing

We do not sell your data. It is accessible to authorised Yesoid staff according to their role, and to the service providers above strictly to provide the service.

Retention

We keep records for as long as necessary to run the mentoring programme and to meet our legal, safeguarding and funding obligations.

Your rights

You may request access to, correction of, or deletion of your personal data by contacting Yesoid. Where required by UK GDPR, we respond within the statutory time frame.

Permissions the app requests

• Location — only during an active session, as described above.
• Notifications — to deliver reminders and alerts.

Delete your account and data

To request deletion of your Yesoid Portal account and personal data, email info@yesoid.co.uk from the email address on your account, with the subject "Yesoid Portal data deletion request". We will confirm your identity and action the request within 30 days.

• Deleted: your account and login, profile details (name, phone, address), notification settings and device push tokens, and location points recorded during your sessions.
• Kept: records Yesoid is legally required to retain for safeguarding, charity, funding and financial (e.g. invoicing) purposes, such as session logs and safeguarding concern records. These are kept only for as long as the law requires and are then deleted.

Contact

For any privacy question or request, contact Yesoid at info@yesoid.co.uk.