YOHB – Privacy Policy

Effective Date: 07/01/2026

YOHB (“we,” “our,” “us”) provides digital tools that let automotive enthusiasts create, view, and share information about vehicles. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the rights and choices you have. By using YOHB, you agree to the practices described below.

1. Information We Collect

We collect information in the following categories:

a) Information you provide directly:

• Account information: email address, username, and password (stored only in hashed form).
• Profile information: first and last name, display name, date of birth (used to verify age), gender (optional), phone number (optional), city and state (optional), years in the hobby, a short bio, interests, links to your social media profiles, and a profile photo and banner image. You control which of these fields are public.
• Vehicle data: make, model, year, trim, body style, color, drivetrain, category, VIN and license plate (each optional and private by default), photos, specifications, modifications, build history, ownership information, and any other details you add to a vehicle profile.
• Clubs and events: clubs and events you create or join, your membership and role, applications and the answers you provide in them, vehicles you choose to share with a club or event, and the fields you consent to share for membership (which may include your name, contact details, or a vehicle’s VIN/license plate — see Section 17).
• User-generated content: posts, comments, listings, and the photos and text you add to them.
• Event participation: event check-ins, scans you perform, and votes you cast at events.
• Legal acceptances: a record of the Terms of Service and Privacy Policy versions you accept, including the date and time, your IP address, and your browser user-agent at the time of acceptance.
• Support communications: messages you send us for help, feedback, or questions.

Photos and files you upload may contain embedded metadata (such as the time or location a photo was taken). Avoid uploading images that contain metadata you do not wish to share.

b) Information collected automatically:

• Device and technical data: IP address, browser type, operating system, device identifiers, mobile device type and model.
• Usage data: pages viewed, features used, session duration, date and time of access, referring URLs.
• Location data: approximate location derived from your IP address. If you grant location permission on your device, we may also use precise location for specific opt-in features — verifying event check-in, sharing the approximate area of a vehicle scan with the vehicle’s owner, and showing nearby events. When used for these features, your precise location is processed to perform the feature and is not stored in precise form; we retain only a reduced-precision, approximate location (such as a coarse area or city/region) and, for check-in, your check-in status — never your exact coordinates. You can disable precise location at any time through your device settings; declining does not prevent you from scanning vehicles or attending events.
• Cookies and similar technologies: see Section 5.

c) Information from third parties:

• Integration partners: if you connect YOHB with external services, we receive only the information you authorize to be shared.

2. How We Use Information

We use the information we collect to:

• Create and manage your account.
• Operate, maintain, and improve the Services.
• Generate and display vehicle profiles, QR codes, and digital credentials.
• Facilitate event participation, check-ins, and voting.
• Personalize your experience and recommend relevant content, events, or builds.
• Communicate with you about updates, launches, support, or policy changes.
• Send marketing communications (if you have opted in).
• Analyze overall usage patterns to develop aggregated statistics and improve the Services.
• Detect, prevent, and respond to fraud, abuse, security incidents, or violations of our Terms.
• Comply with legal obligations and enforce our rights.

Location collected for event check-in and vehicle-scan notifications is used only for those features. It is not used for advertising, and it is not added to the aggregated or de-identified datasets described in Section 3 in precise form.

Legal basis for processing (for EU/UK users): We process personal data based on (a) your consent (e.g., marketing communications, optional precise location); (b) performance of our contract with you (e.g., providing the Services you signed up for); (c) our legitimate interests (e.g., improving the Services, preventing fraud); and (d) legal obligations (e.g., tax, regulatory, law enforcement requests).

3. Aggregated and De-Identified Data

YOHB may analyze collected data to create aggregated, anonymized, or de-identified datasets that cannot reasonably identify any individual. We may use, license, or share these datasets for analytics, research, product development, advertising, or other lawful business purposes. We do not sell or rent identifiable personal information such as names, email addresses, phone numbers, or precise location data.

4. When We Share Information

We share information only in these situations:

• Service providers that perform services on our behalf under contract, including cloud hosting and database providers, analytics providers, email delivery services, payment processors, customer support platforms, and error monitoring services. These providers are contractually required to protect your data and use it only for the purposes we authorize.
• Other users: information you post publicly (vehicle profiles, posts, comments) is visible to other YOHB users and may be visible to the public if your profile is set to public.
• Vehicle owners: when someone scans your vehicle’s code, we share the approximate area (such as city or region) and the time of the scan with you, the vehicle owner, so you know your vehicle’s profile was viewed. We do not share the precise location of the scan, and we do not share the identity of the person who scanned the code.
• Integration partners: if you connect YOHB to third-party services, information is shared as you authorize.
• Legal reasons: if required by law, subpoena, court order, or to protect the rights, safety, or property of YOHB, our users, or others.
• Business transfers: if we merge, sell assets, reorganize, or are acquired, information may be transferred to the successor entity, which will honor this Policy or provide notice of changes.
• Aggregated or anonymized information as described in Section 3.
• With your consent for any other purpose disclosed to you at the time of collection.

5. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Strictly necessary: required for the Services to function, including authentication, security, and session management.
• Functional: remember your preferences and settings.
• Analytics: help us understand how users interact with the Services.

You can control cookies through your browser settings. Disabling strictly necessary cookies will prevent the Services from functioning properly.

Do Not Track: YOHB does not currently respond to Do Not Track signals, but we honor valid opt-out requests through the mechanisms described in this Policy.

6. Marketing Communications

If you opt in, we may send promotional emails about YOHB features, events, or offers. You can unsubscribe from marketing emails anytime by clicking the unsubscribe link in any email or by emailing us at support@yohb.io. We may still send non-marketing messages such as account confirmations, policy updates, or transactional notices that are part of the Services.

7. Data Retention

We retain information for different periods depending on its purpose:

• Account information: retained while your account is active, plus a reasonable period after deletion to allow recovery and comply with legal obligations.
• Vehicle profiles and user content: retained while your account is active. Content shared with other users may persist after your account deletion.
• Support communications: retained for a reasonable period after the matter is resolved.
• Backups: backup copies may persist for a reasonable period after deletion from primary systems.
• Legal or security hold: we may retain information longer if required by law, for ongoing investigations, or to resolve disputes.
• Location data: precise location is processed only to perform a feature (event check-in or generating a scan notification) and is not retained in precise form. For a scan, we retain only a reduced-precision, approximate location and its timestamp; for check-in, we retain your check-in status and its timestamp — never your exact coordinates.

8. Your Rights and Choices

Depending on where you live, you may have the following rights:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct inaccurate information.
• Deletion: request that we delete your personal information.
• Portability: receive your data in a portable, machine-readable format.
• Restriction: request that we limit how we process your data.
• Objection: object to certain processing (e.g., marketing, legitimate interests).
• Withdraw consent: where processing is based on consent, withdraw it at any time.
• Opt-out of sale or sharing: we do not sell personal information, but you can confirm this preference.
• Non-discrimination: we will not discriminate against you for exercising these rights.

To exercise any of these rights, email us at support@yohb.io. We will verify your identity before responding and will respond within the time period required by applicable law.

9. California Residents (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (“CCPA”) and California Privacy Rights Act (“CPRA”):

• Right to know what personal information we collect, use, disclose, and sell or share.
• Right to delete personal information we have collected.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing of personal information. YOHB does not sell personal information.
• Right to limit use of sensitive personal information.
• Right to non-discrimination for exercising your rights.

To exercise California rights, email support@yohb.io with “California Privacy Request” in the subject line.

10. Other State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Delaware, Iowa, New Jersey, Tennessee, Montana, and other states with comprehensive privacy laws have similar rights to California residents, including rights to access, correct, delete, and port personal information, and to opt out of targeted advertising, sale of personal data, and certain profiling activities. To exercise these rights, email support@yohb.io with your state and the specific request.

11. EU, UK, and International Users (GDPR)

If you are located in the European Union, United Kingdom, European Economic Area, or Switzerland, the General Data Protection Regulation (“GDPR”) and UK GDPR apply. In addition to the rights described in Section 8, you have the right to lodge a complaint with your local data protection authority.

Data controller: YOHB Inc. (a Delaware corporation), 8 THE GREEN #8968, Dover, DE 19901, USA.

International data transfers: if you access YOHB from outside the United States, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your country. For transfers of personal data from the EU/UK to the U.S., we rely on appropriate safeguards including Standard Contractual Clauses where required.

12. Security

We implement technical and organizational measures designed to protect your data, including encryption in transit, access controls, authentication requirements, and incident response procedures. However, no system is completely secure. You should use strong, unique passwords and safeguard your account credentials.

13. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you without undue delay as required by applicable law.

14. Children’s Privacy

The Services are intended for users 13 and older, and we do not knowingly permit users under 13 to create accounts. Under the U.S. Children’s Online Privacy Protection Act (“COPPA”), we do not knowingly collect personal information from children under 13. During signup we collect date of birth to determine age; if a user indicates they are under 13, we do not create an account and do not retain the information provided. Users between 13 and 17 may be subject to additional account restrictions. If we learn we have collected personal information from a child under 13, we will delete it promptly. If you believe we may have collected such information, contact support@yohb.io.

15. Third-Party Links and Services

The Services may contain links to third-party websites or integrate with third-party services. This Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use.

16. Updates to This Policy

We may revise this Policy occasionally. The “Effective Date” will change to reflect the latest version. Material changes will be communicated via email or in-app notice. Continued use of the Services after changes take effect means you accept the revised Policy.

17. Clubs & Events

Participating in some clubs and events may require you to provide additional information, including your full name, email address, phone number, and vehicle details such as VIN or license plate — even if you have marked these as private on your profile.

Each club or event specifies which fields it requires, and you will be asked to consent before that information is shared. Information you provide to a club or event is visible to some or all of that club's or event's administrators for membership verification, contact, and management purposes. YOHB does not verify the accuracy of member- or organizer-provided information.

18. Contact

Questions, concerns, or requests about this Privacy Policy may be sent to:

YOHB Privacy Team

Email: support@yohb.io

Phone: (302) 205-6677

Address: 8 THE GREEN #8968, Dover, DE 19901