The data controller for personal data on the platform is Yliway.
To exercise your rights or for privacy requests: [email protected].
We process identity data (first name, last name, date of birth), contact details (phone, email if provided), professional profile data, skills, experience, preferences, and technical usage data.
Your phone number is required for passwordless authentication via WhatsApp OTP.
Service delivery and account management (performance of a contract).
Security, abuse prevention, and legal compliance (legitimate interest / legal obligation).
Product improvement and career-path personalization, within the limits of consent or legitimate interest where applicable.
Service communications about your account and, only with consent where required, promotional communications.
Data are retained for as long as needed for the stated purposes and, after account closure, for periods required by law or to protect legal rights.
Security logs may be retained for limited and proportionate periods.
Data may be processed by providers of hosting, messaging, analytics, and AI infrastructure under confidentiality and data-protection agreements.
Any transfers outside the EU/EEA rely on appropriate GDPR safeguards.
You have the right of access, rectification, erasure, restriction, portability, and objection where provided by the GDPR.
You may withdraw consents at any time without affecting the lawfulness of processing based on consent before withdrawal.
You may also lodge a complaint with the competent supervisory authority.
The service is not intended for children under 16. If you believe a child has provided us with data, contact us for removal.
If you sign up from an invite link, we keep track of who invited you and when: it's what lets us grant the reward and stop anyone granting it to themselves by creating accounts. The attribution is written only after you verify your phone number, and never changes afterwards.
The person who invited you sees neither your name nor your number: only a counter of how many people arrived through their link and how many completed their profile. Your data stays yours.
To spot multiple sign-ups from the same network we keep a hashed fingerprint of the IP address used at sign-up, not the address itself.
We don't access your contacts, we don't import your address book, and we don't email people who haven't signed up. Invites are shared by hand, by you.