UK GDPR · Inject Group
Privacy policy
Who we are
Inject Group (“we”, “us”) is the controller for personal data processed in Yuzuup. Contact: support@injectgroup.com. If you are in the UK you may also complain to the Information Commissioner’s Office.
What we collect
- Account: email, password (hashed by Google Firebase Authentication), display name, and optional phone or location text you type at register.
- Sign-in providers: Google Sign-In and, on Apple devices, Sign in with Apple (name and email, or Apple’s private relay address).
- Profile: optional photo, role/team-size survey answers if you complete onboarding, and presence used to show you on project teams.
- Workspace content: organisations, projects, tasks, comments, calendar blocks, and compliance answers you or your teammates create.
- Personal Notes: note ciphertext and encrypted attachments stored in Firebase. We cannot read note bodies. If you enable Copilot on notes, the app may send text you choose to Google Gemini.
- Device and security: optional Face ID / fingerprint unlock (keys stay on the device), notification preference, and local reminder banners. Device Check (if your organisation enables it) sends posture booleans, not a full disk scan.
- Technical: Firebase Auth / Firestore identifiers, IP and security logs held by Google as our processor, and the cookie preference on this marketing site (see Cookies).
Why we use it
We process this data to provide the Yuzuup contract (run your workspace), keep accounts secure, send the reminders you switch on, improve reliability, and meet UK law. Lawful bases are contract (account and workspace), legitimate interests (security, abuse prevention, support), and consent (optional cookies, optional Copilot on notes, optional marketing email).
Who we share it with
We do not sell personal data. Processors that host or help run the product:
- Google (Firebase Authentication, Firestore, Cloud Functions, Storage, and Gemini when you use Copilot)
- Apple (Sign in with Apple, if you choose it)
- Email delivery used for support and product mail (Google Workspace Gmail, sent from support@injectgroup.com)
Teammates you invite can see the project data you share with them. Personal Notes stay in your vault unless you share a note.
International transfers
Google and Apple may process data outside the UK. We rely on their UK/EU adequacy or standard contractual clauses as published in their customer terms.
How long we keep it
We keep account and workspace data while your account is open. Deleted projects stay in the bin for 30 days, then are permanently removed. If you delete your account we erase your profile, notes vault, personal workplace, owned projects (including nested board data), authentication record, signup capture for your email, and mail logs addressed to you. Shared projects owned by others remain for teammates; we remove your membership and clear assignees tied to your account. We may keep information required for legal claims, security logs, or tax. Support mail may be retained as correspondence.
Your rights
You can access, correct, or export your data, object to or restrict some processing, and withdraw consent where we rely on it. You can delete your account in the app under Settings, or use Delete your account on this site (including a support email request).
Children
Yuzuup is a workplace tool. We do not offer the service to children under 16 and we do not knowingly collect their data.
The product app
Sign in and manage your data at app.yuzuup.com or in the Yuzuup iOS/Android app. This marketing site does not hold your projects.