Privacy Policy

Operator and contact

YOYO is a physical Apple-device retail and service business in Vientiane, Laos, operated by YOYO IPHONE INDIVIDUAL ENTERPRISE, Ban Dongpalan Thong, Sisattanak District, Vientiane, Lao PDR. The owner of this individual enterprise is the seller shown on the Apple App Store product page. For privacy questions or deletion requests, email wxjpf001@gmail.com, message our Facebook Page or WhatsApp number, or visit a YOYO store.

Information we handle

This may include your WhatsApp login number and session, YOYO account identifier, name, date of birth, identity-document type and number, address, work and income range, emergency contact and, when an eligible plan requires it, guarantor details. We also handle device model and IMEI/serial number, product, quote, inventory, reservation, order, contract, payment, invoice, consignment, trade-in, repair and after-sales records, plus necessary login, security, request and operational audit records.

Facebook Page, Messenger and WhatsApp conversations

When you message our Facebook Page on Messenger or our WhatsApp number, we receive and store your Page-scoped or WhatsApp identifier, your messages, photos, voice notes and attachments, and their timestamps. If you came from one of our ads, we also record which ad or post you came from. For Messenger, we read your first name, last name and profile picture through Meta's User Profile API, and may read the sender name attached to your message. Within YOYO, only signed-in employees can see this information, in our internal staff console, so they can recognise you and reply to the right person. Your name is stored encrypted (AES-256-GCM). Your profile picture is resized and kept only in server memory for up to 6 hours; it is never written to our database. If you give us your phone number or IMEI in the chat, we may use it to link the conversation to your existing YOYO orders. We do not sell this information or use it for advertising profiles.

Camera, photo library and files

The app uses the camera or photo library, or files, only after you choose to upload. Application and business evidence is not published automatically. Community customer and merchant photos are security checked and reviewed by authorized staff before public display. Do not upload third-party information you are not authorized to provide.

Device binding and Nearby Owners

Listing in Nearby Owners is a condition of the device-binding feature. Before acceptance, the app explains that it will read device location once. The server stores only an approximately 0.01-degree coarse location cell to calculate distance bands and does not publish precise coordinates. The default card publishes the device model, colour, WhatsApp last four digits, and a distance band. You may decline and not bind, or later stop publishing the card under My > Community profile and unlist. Unlisting does not undo a completed device binding.

Purposes and human review

We use information to authenticate access, provide product and store services, generate and display server-calculated quotations, save application drafts, support corrections and human review, perform transactions and after-sales support, prevent fraud, investigate faults and preserve necessary business evidence. YOYO does not use automated credit scoring to approve applications; authorized personnel conduct the review.

Processors and cross-border handling

Access is limited to authorized YOYO personnel and the processors required to operate the service. These include server hosting and backup storage; Meta (Facebook Pages, Messenger, WhatsApp and Meta login); Apple App Store and Expo for app delivery and updates; Google Translate to translate chat messages between Lao, Thai, English, Chinese and Vietnamese; and AI service providers (DeepSeek and Anthropic) that may read message text to help our staff draft, translate or check replies, and, on WhatsApp only, to reply automatically when no employee has answered within about 10 minutes, or overnight (00:00–07:00 Vientiane time). Replies sent from our staff console on Facebook Messenger are always sent by an employee. Map or social platforms you choose to open are also processors. Some processing takes place outside Laos. Processors may use the information only to provide their service to YOYO. We do not sell personal information or use it for cross-company advertising tracking.

Retention, deletion and legal holds

We keep information for as long as needed to answer you, complete sales, reservations and after-sales service, reconcile payments and invoices, handle disputes, keep security audit records and backups, and meet legal duties. Conversation records are kept while they are needed for these purposes; profile pictures are not stored. Signing out, unbinding a device or withdrawing an application does not automatically erase established transaction, contract, payment or audit records.

You can ask us to delete your information in three ways:

• App users: under My > Settings (gear icon) > Account and personal data.

• Anyone who contacted us on Messenger or WhatsApp, including people without a YOYO account: send "Delete my data" to the same Page or WhatsApp number, or email wxjpf001@gmail.com.

• In person at a YOYO store.

We reply within 24 hours to confirm that we received your request, in the same chat where Messenger or WhatsApp allows it, or by email if you emailed us. Within 30 days we delete or anonymize the conversation data held in YOYO's own systems: your messages, attachments, stored name, Page-scoped or WhatsApp ID, ad-referral details and AI or translation records linked to the conversation, and we stop importing it again. Copies in our encrypted backups are removed when those backups are replaced. Meta keeps its own copy of the chat in Messenger or WhatsApp, which we cannot delete. Records we must keep by law, such as completed sales receipts or contracts, have their access restricted and are not used for any other purpose. Instructions are also on our data deletion page: https://www.yoyoiphone.com/data-deletion

Your choices and rights

You may ask to access or correct your information, replace an application file while correction remains available, withdraw an application before the contract stage, and request account deletion. Guarantor information is handled only when a plan expressly requires it and you are authorized to provide it. Contact YOYO through official WhatsApp if information is inaccurate, appears misused or an account-deletion request is unresolved.

Security, children and changes

We use risk-appropriate encrypted transport, access control, private-file authorization and audit measures, but no online service can promise absolute security. The service is intended for customers able to purchase goods or lawfully assisted by a guardian; children should not independently submit identity or financial information. We will update the effective date and provide an appropriate notice when the service, processors or rules materially change.