Merricot Limited ("Yoley", "we", "us") is the data controller responsible for your personal data.
| Registered name | Merricot Limited |
| Registered address | Sterling House, F2/F3, Davidson Road, Lichfield, England, WS14 9DZ |
| Company number | 10973068 |
| ICO registration number | Pending registration |
| Privacy contact | privacy@yoley.com |
When you set up Yoley you provide:
Why: To personalise the app, pre-fill documents you send to customers, and identify your business on quotes and invoices.
The app stores records you create, including:
Why: To provide the core functionality of the app — you cannot use Yoley without creating these records.
When you take a card payment or generate a Pay by Link via Monek, we pass to Monek:
We do not store card numbers or CVV codes. Those are handled entirely by Monek's PCI-DSS certified systems.
If you subscribe to Yoley Pro, Apple manages the billing and subscription status via the App Store. We receive only a transaction entitlement token — we never see your payment card details.
We collect minimal technical data to keep the app working:
We do not use third-party analytics SDKs (e.g. Firebase, Mixpanel). We do not track your activity across other apps or websites.
| Processing activity | Legal basis |
|---|---|
| Providing the app and its features | Performance of a contract (Article 6(1)(b)) |
| Storing business records you create | Performance of a contract |
| Processing payments via Monek | Performance of a contract |
| Keeping the app secure and stable | Legitimate interests (Article 6(1)(f)) |
| Complying with tax / accounting obligations | Legal obligation (Article 6(1)(c)) |
| Sending service communications (e.g. invoice receipts) | Performance of a contract |
All business records you create in Yoley are stored:
We do not operate our own cloud database for your business records. We cannot read your invoices, customers, or expenses — they live in your iCloud account, not ours.
| Third party | What we share | Why | Location |
|---|---|---|---|
| Monek Merchant Services Limited monek.com |
Invoice reference, amount, customer email, your Merchant ID | Card payment processing and Pay by Link generation | United Kingdom |
| Apple Inc. (iCloud / CloudKit) |
All app data you create (encrypted) | Device sync across your Apple devices | EU / UK data centres |
| Apple Inc. (App Store / StoreKit) |
Subscription entitlement token only | Pro subscription management | EU / UK data centres |
| Open-Meteo open-meteo.com |
Approximate location (latitude / longitude) | 5-day job weather forecast (Pro feature only) | European Union |
We do not sell your personal data to any third party. We do not share your data with advertisers.
| Data type | Retention period | Reason |
|---|---|---|
| Your business records (invoices, expenses, etc.) | Until you delete the app or the record, plus iCloud copy | You control this data |
| Financial records (invoices, expenses) | Minimum 6 years from the end of the tax year | HMRC / Companies Act 2006 requirement |
| Payment transaction logs (Monek) | Per Monek's retention policy (typically 7 years) | PCI-DSS and anti-fraud obligations |
| Subscription records | Duration of subscription + 7 years | Legal and tax records |
| Support correspondence | 3 years from resolution | Legitimate interests |
As a UK resident you have the following rights. To exercise any of them, contact us at privacy@yoley.com. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
The Yoley app does not use cookies. It does not contain advertising SDKs or cross-app tracking. Apple's App Tracking Transparency framework is respected; we make no ATT requests because we do not track you across third-party apps or websites.
Yoley is a business tool intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact privacy@yoley.com and we will delete it promptly.
We take reasonable technical and organisational measures to protect your data, including:
We may update this policy from time to time. We will notify you of material changes via an in-app notice and by updating the effective date above. Continued use of the app after changes take effect constitutes acceptance of the revised policy.
For any privacy-related questions or to exercise your rights: