Updated September 29, 2026
Yonder operates this service. For questions or privacy requests, email Yonder support.
If you search for a place, Yonder sends the words you enter to its server, which forwards the search to OpenStreetMap Nominatim or a configured geocoding provider. You can search without granting device-location access.
If you allow foreground location, Yonder uses it on your device to center the map and show your position. The current app does not send your device location to Yonder's place-search server.
Saved places, collections and personal pins are stored on your device. They do not sync to a Yonder account. Explore and Saved work without an account.
Community checks are free and use an email account. Supabase processes your email and authentication credentials and assigns an account identifier. New accounts require email confirmation. Your sign-in session is stored on your device; your email is not shown to other community members.
When you send a check, Yonder sends the selected public place's name and coordinates, optional landmark, question and expiry time to Supabase. Shared records include the requester and responding Scout's account identifiers, status, timestamps, answer and optional note. Open checks are visible to signed-in community members; the requester and responding Scout can see their check and answer. These coordinates identify the selected place, not a live feed of your device location. Answers are self-reported, with no photo or GPS verification.
Reports store the check identifier, reporter identifier, reason and review status. Blocks store the participating account identifiers. Yonder uses this information to moderate content and restrict interactions. Shared checks do not upload photos, dispatch Scouts or process payments.
Some preview builds include a separate, clearly labeled local demo with sample requests, answers, bounties and earnings. No one is dispatched or paid. Its optional device-check path uses foreground location and captures three camera frames. Those photos and location readings stay on the device and are not uploaded or independently verified. The sample path works without camera or location permission.
Yonder's server caches place-search terms in memory to limit repeated provider requests. Search results are refreshed after 24 hours; old entries can remain in memory until replaced, evicted or the server restarts. Hosting and place-data providers may process request URLs and technical logs under their own policies. The platform map provider may process map and location data under its own policy.
Supabase stores account, shared-check and safety records for the service in its U.S. East region. Shared checks stop appearing in the app after 30 days. Older records can remain stored until cleanup or account deletion. Contact support for access or deletion requests.
Supabase records authentication and security events, such as sign-ins, email verification, token refreshes and account deletion. These technical records can include your account identifier, IP address, user-agent information about your device or browser, and timestamps. They are used for security, abuse prevention and troubleshooting. Provider authentication, security and technical logs follow separate retention settings and policies and may remain after your account and shared records are deleted.
You can decline or turn off camera and location permissions in iOS Settings. You can remove collections within the app; removing a collection leaves its saved places intact. Removing the app removes its locally saved data, but does not delete your shared account or server records.
To delete your account, sign in and open Requests or Scout, choose Delete live account, then confirm. This deletes the account and shared checks you requested or answered, along with associated reports and blocks. Signing out does not delete an account. Contact Yonder support at the email above for privacy requests or if you cannot sign in; do not send passwords, card details or sensitive photos.