Privacy policy

Latest update: 27 April 2023

This Privacy Policy explains how yeekatee AG (“yeekatee”, “we”, “us” or “our”) collects, processes, and shares your personal data (“data”) through our mobile Application (“App”), website www.yeekatee.com (“website”), and any other online or offline services we provide (collectively, the “services”).

This privacy policy of yeekatee is based on Swiss data protection legislation and, if and to the extent applicable, the General Data Protection Regulation of the European Union (EU GDPR). The EU GDPR requires standards of data protection with extra-territorial effects. This can result in companies outside of the EU needing to comply with the requirements of the EU GDPR.

By accessing or using our services, you agree to the collection, processing, and sharing of your data as described in this Privacy Policy. We may update this Privacy Policy from time to time, so please review it periodically.

By sharing other individuals’ personal data in the App, you confirm having their consent and that the data is accurate. You agree to inform them about this Privacy Policy.

yeekatee is the “controller” for the data processing under this Privacy Policy unless specified otherwise in this Privacy Policy.

To exercise your data protection rights or to ask us any question regarding this Privacy Policy, please contact us:

yeekatee AG
Wiesenstrasse 10A
8952 Schlieren
support@yeekatee.com

1. What data do we process, and for which purpose

We collect the data for the conclusion, administration, and performance of our contractual relationship with you. We further process this data for the purpose of providing our services to you.

We may use the data to pursue legitimate interests, such as direct marketing, research, and development (including marketing research), ensure quality control and safety, carry out audits, enforce our agreements, and comply with our legal obligations.

We may use this data to communicate with you about activities on the App, changes to our agreements, solicit your feedback, respond to questions, comments, and other requests.

While operating the App, the website, and our services, we collect and process the following types of data.

a) Investment data when you link a bank or broker account

Linking your bank or broker account to the App is optional. It will allow you to view and partially share your investments, money accounts, transactions, and portfolio data (collectively “investment data”) in the App.

We use the external data processing provider SPLIT PAYMENTS, S.L. (“Flanks”), Calle Sol 55, 08840 Viladecans Barcelona, Spain, to extract data from your external accounts. yeekatee acts as the data controller, and Flanks is our data processor. We have a specific data processing agreement with Flanks. Both we and Flanks process particularly sensitive data during investment data extraction and will always ask for your consent before doing so.

During Flanks extraction process, the extracted investment data is stored in London, UK, on the servers of Flanks subcontractor Google Ireland Limited, 4 Barrow St, Dublin, Ireland. Upon completion of the extraction process, all investment data is removed from Flanks and its subcontractors’ servers and partially retained on our servers, as explained below. We are hosting our servers using the provider Amazon Web Services EMEA SARL, the retained investment data is hosted in Ireland, see Section 5.

Upon completion of extraction processing, the subsequent data is permanently removed and not retained on either our servers or those of Flanks:

Login credentials, including usernames and passwords;
Personal account details, such as ownership, name, email address, address, identity documents, or account identifiers;
Payment specifics, including IBAN numbers, credit cards, debit cards, or alternative payment methods;
Customized or distinct payment descriptions;
Demographic information, such as age and gender;
Location data;
Employment-related information, including your job title and work details.

The following investment data is extracted, processed, and retained on our servers (but not on Flanks servers):

The information that you have an account relationship with the linked bank or broker and de-identified account identifiers;
Money accounts, including their type, balance, currency, and de-identified IBAN number or de-identified money account number;
Investments, including their type, name, amount, balance, listing, currency, accrued interests, investment identifiers such as ISIN, expiration date, and leverage;
Transactions, including dates, transaction identifiers, type, amounts, balances and prices, affected money accounts, affected investments, currencies and exchange rates, gross, net, commissions, fees and taxes, accrued interest, leverage, listings, and status information of the transaction.

Based on this extracted investment data, we calculate and store additional portfolio data on different aggregation levels, including but not limited to investment performance, investment statistics, cost price, holding periods, return, allocation, and impact of commissions, fees, and taxes.

Your usage of the App and linking of an account is not disclosed to your bank or broker, but it may be able to detect and/or prevent it.

Your investment allocation and performance on the levels total, aggregations like currency and individual investments are automatically displayed to other users. Absolute amounts and values are never disclosed to other users. You may limit the users who can view the aforementioned data in the privacy settings.

If you use the “Delete linked accounts” option in the App, all investment data referred to in Section 1a will be permanently removed in due time from our servers and the servers of our data processors.

b) User Profile Data

When you register for the App, our services require you to create a user profile.

This profile data we process on our servers includes:

your name or alias
yeekatee username
location (optional)
language
reference currency
email address (verified)
profile picture (optional)
other information you provide to us in “About” (optional)

If you register on the App using your social media account provided by a social media service, e.g. “Sign up with Google” or “Sign up with Apple”, we may collect and process the data provided to us by the social media service in accordance with the terms of its privacy policy. Such data may include, without limitation, your first and last name, username, profile picture, unique social media identifier and access token, and e-mail address.

Your name, username, location, language, profile picture, and other information (“About”) is automatically shown to other users of the App. Your email address is never disclosed to other users.

If you use the “Delete yeekatee account” option in the App, all profile data and investment data referred to in Sections 1a and 1b will be permanently removed in due time from our servers and the servers of our data processors.

c) Functional and technical data

We automatically collect functional data regarding your use of the App, such as the types of content you interact with, information derived from your user content (including other users with whom you interact, topics you discuss, and anything else that you post or interact with via the App) and the frequency, duration, and timing of your activities. We may combine your data with other users’ data when they use the App.

We collect technical data automatically when you use the App. This includes your internet protocol (IP) address, cookies (please see also Section 1f), user settings, details about your browser, operating system or device, location information, internet service providers, the links you click, and other similar technical and functional data.

If you use the “Delete yeekatee account” option in the App, the functional and technical data identifying you personally will be permanently removed from our servers and the servers of our data processors. This includes your posts and references in other users’ posts (@ tag) to your profile but excludes free text references other users may have posted about you.

Server log files may contain additional functional and technical data identifying you personally, including the IP address. They will only be periodically removed, see also Section 6.

d) De-identified and aggregated data

We may analyse your data in de-identified or aggregated form to operate, maintain, manage, and improve the App and our services. This de-identified or aggregated data does not identify you personally. We may also disclose aggregated statistics to describe our products and App to current and prospective business partners and to other third parties for other lawful purposes. Furthermore, we may publicly disclose aggregated statistics regarding activities in our App and website, including investment allocations and activities.

De-identified and aggregated data will be retained on our servers even after you delete your yeekatee account.

e) Data from interaction with yeekatee

When you interact with yeekatee, for example, by e-mail, telephone, chat, or social media, yeekatee collects the data exchanged, such as your name as well as the content of your message, including the metadata of the communication.

f) Online tracking and online advertising techniques

When you visit the website, our servers automatically record certain details of your use (e.g. your IP address, the website you are visiting us from, or subpages you are visiting, including the date and duration of your usage).

We use cookies and similar technologies to maintain, improve and personalize the website. Cookies are small text files placed on your device. Cookies help us understand how the website and the App, and our services are being used, which allows us to improve its functionality and performance.

Types of cookies we may use:

Essential cookies enable core functionality such as security, verification of identity, and network management. These cookies can’t be disabled.
Marketing cookies are used to track advertising effectiveness to provide more relevant services and deliver better ads to suit your interest. We currently don’t show you ads and don’t have advertising partners. The use of marketing cookies will require your consent.
Functional cookies collect data to remember choices you make to improve and give a more personalized experience. The use of functional cookies will require your consent.
Analytics cookies help us to understand how visitors interact with the website, the App, and our services, discover errors, and provide better overall analytics. The use of analytics cookies will require your consent.

We use Google Analytics as tracking technology on the website (duration, page views, geographic region of access, device type, operating system, referral page, etc.). This includes the use of Analytics cookies. The data collected is used to evaluate how the website is used, to produce reports on the activities of users on a website, and to provide other services (e.g. needs-based design of individual pages). The controller of this service is Google Ireland Ltd., with its registered office in Dublin and/or Google Inc., with its registered office in the USA (hereinafter referred to as ‘Google’). Therefore, it cannot be excluded that collected data may be transferred to a Google server in the USA. We have set up the service in such a way that IP addresses are anonymised by Google Ireland. Although it can be assumed that the data collected for Google is not personal data, it is possible that Google may trace your identity from this data for its own purposes, create personal profiles and link this data to any Google accounts you may have. Further information on Google’s privacy policy in relation to Google Analytics can be found here. Google’s privacy policy can be found here.

g) Data from survey forms

We have integrated Typeform on our website. The data processor is TYPEFORM S.L., Carrer de Pallars 108, 08018 Barcelona, Spain (hereinafter “Typeform”). Typeform enables us to create online survey forms and integrate them into our website. The data you enter in our Typeform forms are stored on Typeform’s servers. View Typeform privacy policy here.

This data is used for direct marketing, research, and development (including marketing research) and to prioritize features of the App. We may use this data to communicate with you for surveys and email newsletters. The collected data includes your email address, name, and other inputs specifically asked.

We will require your consent before you submit survey forms.

Using your email address collected with your consent when subscribing to the email newsletter, specifically the survey forms on the webpage and the user profile in the App, we may send you an email newsletter.

We use the data processor “Sendinblue” to send out the newsletter. The provider of this service is Sendinblue GmbH, Köpernicker Str. 126, 10179 Berlin, Germany. The email addresses of our newsletter recipients and other personal data, including names, obtained as part of this information about the newsletter are stored on Sendinblue servers in Germany. Sendinblue uses this information to send and evaluate the newsletter in our order. We then receive and process data with which it can be determined whether a newsletter message has been opened and what links have been clicked on. In addition, technical information may be collected, including time of access, IP address, browser type, and operating system. You can view the privacy policy of Sendinblue here .

The data stored for the purpose of the newsletter subscription will be stored by us until you unsubscribe from the newsletter. After you have unsubscribed from the newsletter, your data will be deleted from our servers and from Sendingblue’s servers. Data stored by us for other purposes (e.g. email addresses for the user profile in the App, etc.) remains unaffected by this.

You cannot unsubscribe to important emails regarding your yeekatee account or our contractual relationship unless you delete your yeekatee account and stop using our services.

We offer you the option of using a “social media button” from Facebook, Instagram, LinkedIn, Twitter, YouTube, and TikTok on our website. The button leads to linked yeekatee profiles. The services are deactivated by default. As soon as you activate them (e.g. by clicking on the button), the respective providers can determine that you are on our website. If you have a corresponding account with the social media provider, they can associate this information with you and thus track your use of online offers. The responsibility for data protection-compliant processing lies with the respective provider. We, therefore, recommend that you read the privacy policy of the respective social media provider.

We operate our own presence on third-party platforms (e.g. LinkedIn profile). If you communicate with us there or comment or share content, we collect information for this purpose, which we use primarily for communication with you, for marketing purposes, and for statistical evaluations consistent with the descriptions provided in this Privacy Policy. Please note that when you visit our social media sites, the platform provider also collects and uses data itself (e.g. on user behaviour), possibly together with other data known to it (e.g. for marketing purposes or for personalising the platform content). Further information on data processing by social network providers can be found in the data protection policies of the relevant social networks.

j) Downloads from our website

We use the data processor Krivisoft Inc, 651 North Broad Street, Suite 206, Middletown, DE, United States (“ShareDocView”) to share documents such as eBooks on the website. If you download such documents, ShareDocView will store on their servers your email address and other data as described in their privacy policy here.

2. Legal basis for collecting and processing your data

We process your data in accordance with the relevant data protection provisions:

a) To meet contractual obligations

Your data is processed for the purpose of concluding our contract with you.

We may process your personal data for specific purposes (e.g. evaluation for marketing purposes or product improvement) if you have provided your consent. For example, we use cookies and analytics tools on our website (see also Section 1f). You may withdraw your consent at any time. The withdrawal will be effective for the future but does not affect the legality of the processing of data up until the time of withdrawal.

c) Legitimate interests

If required, we process your data beyond the extent necessary for the performance of the contract in order to serve our legitimate interests or those of third parties, for example:

Ensuring IT security and IT operations;
Asserting legal claims and defence in case of legal disputes;
Enforce our agreements;
Preventing and investigating criminal offences;
Development of products and services;
Advertising or market research, unless you have objected to the use of your data.

We also collect personal data from publicly accessible sources for customer acquisition purposes. We may combine data obtained from third parties with data that we have collected for the purposes of direct marketing.

d) Due to legal regulations

We may process your data in order to fulfil legal and compliance obligations.

3. Profiling

We may create profiles based on your data for the purposes set out in Section 1, in particular, to continually improve the App, the website, and our services by statistical analysis and to market the App, website, and services by addressing you with offers and advertising that yeekatee deems of interest to you. For these purposes, we may combine the data.

We may disclose your personal data to the specified service providers and other users of our services for the purposes explained in this Privacy Policy. Furthermore, we may disclose your data to courts, authorities, and other regulatory bodies in Switzerland or elsewhere, if we are legally obliged or entitled to do so or if yeekatee is involved in proceedings before courts or authorities.

5. How and where is your data stored?

Data will be transferred to locations in countries outside of Switzerland (third countries) insofar as:

this is necessary for providing our services,
this is required by law,
this is necessary due to the involvement of service providers (data processors), or
you have given us your consent.

We are hosting our App servers with AWS. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter referred to as “AWS”). The data, including the data referred to in Sections 1a through 1d, is stored on AWS servers in Ireland. In addition, we use the Content Delivery Network Amazon CloudFront CDN. Amazon CloudFront CDN is a globally distributed Content Delivery Network. The information transfer between your device and our servers is technically routed via the Content Delivery Network. This enables us to boost the global availability and performance capabilities of our App. It cannot be excluded that data may be transferred to an AWS server in the USA. The transfer of data to the USA is based on the EU’s standard contractual clauses. For details, please consult here. For more information, please see the AWS Data Privacy Policy here.

We use Neo4j AuraDB to improve the performance capabilities of our App, for example, for the search functionality. The provider is neo4j inc., 111 E 5th Avenue, San Mateo, CA 94401, USA (“Neo4j”). Data referred to in 1b through 1d, but no investment data (1a), is stored in London, UK, on servers of their subcontractor Google Ireland Limited, 4 Barrow St, Dublin, Ireland. It cannot be excluded that data may be transferred to a Neo4j or Google server in the USA. For more information, please see the Neo4j Privacy Policy here.

We use Sentry for Error and Performance Monitoring of our App. The provider is Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA (“Sentry”). Data referred to in 1c through 1d, but no investment data (1a), is stored on Sentry’s servers in the USA. We use Sentry mainly for aggregated technical data, it may specifically include your IP address. For more information, please see Sentry’s Privacy Policy here.

The data outlined in Sections 1f through 1j undergoes processing and storage by the respective providers disclosed within each individual Section.

6. How long is your data stored?

We store your data as long as it is necessary for the specific purpose for which we collected it. If you use the “Delete linked accounts” option in the App, all investment data referred to in Section 1a will be permanently removed in due time from our servers and the servers of our data processors.

If you use the “Delete yeekatee account” option in the App, all profile data and investment data referred to in Section 1a, 1b, and partially 1c (including as posts) will be permanently removed in due time from our servers, and the servers of our data processors. Server log files may contain functional and technical data identifying you personally, including the IP address, that will be kept for a maximum of 3 months.

De-identified and aggregated data (Section 1d) will be retained on our servers even after you delete your yeekatee account.

We will not store cookie information from cookies (Section 1f) for longer than a maximum of 2 years. You can manually clear and block cookies in your browser settings.

7. Your data protection rights

In some cases, your data will be processed for the purposes of direct marketing. You have the right to object to the processing of your personal data for the purposes of direct marketing at any time. You also have this right for profiling, where the profiling is connected to direct marketing.

Under Applicable data protection law and to the extent provided for therein, all data subjects have the right to access, the right to correction, the right to deletion, the right to restriction of processing, and the right to object to the processing of their data. Furthermore, you have the right to submit a complaint to the responsible data protection authority.

You may withdraw your consent to our processing of personal data at any time. The withdrawal will be effective for the future but does not affect the legality of the processing of data up until the time of withdrawal. Please be aware that, in such cases, it is possible that we may no longer be able to provide you with services or maintain a business relationship. You can exercise the above rights by contacting us at the address listed above. In order to prevent misuse, we may need to identify you by means of a copy of your ID, unless identification is possible otherwise.

8. Data Security

yeekatee takes appropriate security measures in order to maintain the required security of your data and ensure its confidentiality, integrity, and availability, to protect it against unauthorized or unlawful processing, and to mitigate the risk of loss, accidental alteration, unauthorized disclosure, or access. However, security risks cannot be completely excluded in general; minimal risks are unavoidable.