Privacy Policy

1. Who we are

Yomi is a property-transaction platform that makes a UK residential property sale visible, in real time, to everyone involved in it — sellers, buyers, estate agents and solicitors. This policy explains what personal data we collect when you use the Yomi mobile apps (Yomi for buyers and sellers, Yomi for Agents, Yomi for Solicitors, and Yomi Admin) and the Yomi website, why we collect it, how we look after it, and the rights you have over it.

For the purposes of UK data protection law, the data controller is:

In this policy, “we”, “us” and “our” mean Yomi Group Ltd. “You” means any person whose personal data we process — including buyers, sellers, estate agents, solicitors and platform administrators.

How to contact us about your data: support@yomigroup.com

2. The data we collect

We only collect the data we need to operate the platform and to support a property transaction. The categories below reflect what Yomi actually stores.

Account and identity data

• Your name and email address (used to create and identify your account).
• Your password — held by Google Firebase Authentication in a securely hashed form; we never see or store your plaintext password. If you sign in using Sign in with Apple, we receive a private identifier from Apple and the name/email you choose to share — we do not receive your Apple password.
• Optionally, your phone number, your own postal address, and a profile photo.

Property and transaction data

• Details of properties you are selling or buying — address, price, photos, listing information, and the progress of the sale through its stages (from listing to completion).
• Offers you make or receive, and the related correspondence.
• For estate agents and solicitors: your professional account, agency/firm, branch and role information.

Commission and fee data

• Commission agreements between sellers and agents, and solicitor fee agreements. Commission and valuation figures are private to the seller and their agent — buyers can never see them.

Messaging, timeline and notifications

• Messages and images you send through the in-app chat to other parties in your transaction.
• A timeline of events for your transaction (for example, “offer accepted”, “solicitors instructed”), shared with the parties to that transaction.
• In-app and push notifications. To deliver push notifications we store a device push token (a Firebase Cloud Messaging / Apple Push Notification token) against your account.

Documents

• Files you upload or that are shared with you as part of a transaction — for example contracts, forms and supporting paperwork — held in secure document storage.

Anti-money-laundering (AML) and identity-verification (KYC) data

• Where a transaction reaches the legal stages, solicitors are required by law to carry out customer due diligence. This can include proof of identity, proof of address, and source-of-funds / source-of-wealth evidence. This data is highly sensitive and is restricted to the solicitor handling the matter and to Yomi administrators — it is never visible to estate agents or to other parties in the transaction.

Technical data

• For website sign-in, we store a session token in your browser’s local storage so you stay signed in. In the apps, we store your session and limited app-configuration data on your device so the app works and to keep you signed in on a single device at a time.

What we do NOT do

• We do not track you across other apps or websites, and we do not sell your personal data. The Yomi apps carry no third-party advertising or cross-app tracking SDKs.

3. How and why we use your data, and our lawful basis

UK data protection law requires us to have a “lawful basis” for each use of your data. The table below sets out what we do with each category, why, and the lawful basis.

We do not use your data for automated decision-making that produces legal or similarly significant effects on you, and we do not use it for advertising.

Marketing. Yomi does not send marketing communications — no product-update emails, newsletters or campaigns. We only contact you about your account and the transactions you are part of. If this ever changes, we will ask for your consent first and give you a simple way to opt out.

4. Sharing your data, and our sub-processors

Sharing within a transaction. Yomi’s whole purpose is to make a transaction visible to the people involved in it. So, by design, certain data is shared with the other parties to your transaction — for example, a seller and their agent and solicitor can see the relevant property and progress data. We apply strict privacy boundaries:

• Estate agencies can never see each other’s data, names or activity.
• Buyers can never see commission or valuation figures.
• AML/KYC data is restricted to the handling solicitor and Yomi administrators.

We do not sell your personal data and we do not share it with third parties for their own marketing.

Sub-processors. We use the following trusted service providers to run the platform. They process data on our behalf, under contract, and only on our instructions:

We may also disclose data where we are legally required to — for example to comply with a court order, a regulator, or a law-enforcement request, or to make a Suspicious Activity Report where the law requires it.

5. International transfers

We store your core transaction data in the UK (Google’s London europe-west2 region), so most processing stays within the United Kingdom.

Some website server-side processing runs in Google’s Netherlands (europe-west4) region, within the European Union. Transfers of personal data from the UK to the EU are covered by the UK Government’s adequacy decision for the EEA, which recognises that the EU provides an equivalent level of data protection. Where any transfer falls outside an adequacy decision, we rely on appropriate safeguards (such as the UK International Data Transfer Agreement / Addendum) with our providers.

6. Cookies and similar technologies (website)

The Yomi website uses your browser’s local storage to hold a session token that keeps you signed in. This is a strictly necessary technology required to operate a secure sign-in — it is not used to track you and is not shared with third parties. Because we use no analytics or marketing cookies, no cookie-consent banner is required.

The buyer/seller apps do not use third-party tracking. The iOS apps’ privacy manifests declare no tracking and no cross-app tracking domains.

7. How long we keep your data (retention)

We keep personal data only as long as we need it, and in line with our legal obligations:

• Your profile / account data — kept until you delete your account, after which it is removed or anonymised (subject to the legal-hold exceptions below).
• Transaction records (the record of a property sale, including completion records) — retained for 7 years after completion, to meet financial and legal record-keeping requirements.
• AML / KYC data — retained for a minimum of 5 years after the end of the business relationship, as required by the Money Laundering Regulations 2017. Where we are required to keep this data, we anonymise it rather than delete it, so it can no longer identify you while still meeting the legal requirement.
• Notifications — automatically expire and are deleted on a rolling basis.

After the applicable retention period, we securely delete or irreversibly anonymise the data.

8. Your rights

Under UK GDPR you have the following rights over your personal data. You can exercise any of them by contacting us at support@yomigroup.com:

• Access — get a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data (you can update much of your profile data directly in the app).
• Erasure— ask us to delete your data (“right to be forgotten”). You can also delete your account from within the app. Please note: where the law requires us to keep certain data — in particular AML/KYC records for 5 years, and transaction records for 7 years — we cannot delete it during that period, but we will restrict and (where possible) anonymise it.
• Restriction — ask us to pause our use of your data in certain circumstances.
• Portability — receive the data you gave us in a structured, machine-readable format, or have it transmitted to another provider where technically feasible.
• Objection — object to processing we carry out on the basis of legitimate interests.

We will respond to any request within one month. We will not charge a fee for a reasonable request, and we may need to verify your identity before we act.

Complaints. If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the UK supervisory authority:

9. How we protect your data

We take the security of your data seriously and apply measures appropriate to its sensitivity:

• All data is encrypted in transit (TLS) and at rest (AES-256) by our cloud infrastructure.
• Access to data is controlled by strict, role-based security rules — for example, agencies are isolated from one another, buyers cannot see commission figures, and AML/KYC data is restricted to the handling solicitor and administrators.
• Passwords are stored only in securely hashed form by our authentication provider; we never see them.
• Sign-in is enforced on a single device at a time, and the apps support device biometrics (Face ID / Touch ID) to protect an active session.

No online service can be guaranteed 100% secure, but we work continually to protect your data and to meet recognised security standards.

10. Children

Yomi is a service for adults involved in a UK property transaction (buyers, sellers, estate agents and solicitors). It is not directed at children and is not intended for anyone under 18. We do not knowingly collect personal data from under-18s. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time — for example if we change how the platform works or add a new service provider. When we make a material change we will update the “Last updated” date at the top and, where appropriate, notify you in the app or by email. Please check this page periodically.

12. Contact

For any question about this policy or your personal data, or to exercise any of your rights, contact us at:

Last updated: 28 June 2026