Last updated: July 30, 2026
Data Controller:
Name: Edgar Apolonio Aguilera
RFC: AOAE781008V98 (operating under the registered trademark YAYIKA)
Email: admin@yayika.com
Website: yayika.com
This Privacy Notice is issued in compliance with the UK General Data Protection Regulation (UK GDPR), the California Consumer Privacy Act (CCPA/CPRA), the Children's Online Privacy Protection Act (COPPA), and for awareness purposes, the Lei Geral de Proteção de Dados (LGPD).
This notice applies to all personal data processed by Yayika through its website (yayika.com) and associated services. It covers data collected from users, customers, and visitors regardless of their location. Where local law imposes additional requirements, those requirements are addressed in the regional sections below.
Yayika is not required to appoint a Data Protection Officer under current regulations. However, all data protection inquiries should be directed to admin@yayika.com, which serves as the primary point of contact for all privacy-related matters.
This data is obtained directly from you when you register, make a purchase or use the platform services, as well as automatically through your interaction with the site. We do not collect data from third-party sources or data brokers.
Under the CCPA, the categories of personal information we collect include: identifiers (name, email), commercial information (purchase history), internet activity (browsing history, interactions), and inferences drawn from the above (preferences, characteristics). We do not collect geolocation data, biometric data, or data from consumer reports.
You may opt out of secondary-purpose communications at any time by emailing admin@yayika.com.
Your consent is obtained when you:
You may withdraw your consent at any time by contacting admin@yayika.com. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
To exercise any of your rights under this notice, please:
We will acknowledge your request within 3 business days and provide a substantive response within the applicable legal timeframe. We may need to verify your identity before processing your request.
Your data may be shared with the following third parties, including international transfers:
Where we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the relevant authority, the UK International Data Transfer Agreement (IDTA), or reliance on an adequacy decision. You may request a copy of the relevant transfer mechanism by contacting admin@yayika.com.
If you are a UK resident, you have the following rights under the UK GDPR:
Supervisory authority: Information Commissioner's Office (ICO). Response time: maximum 30 calendar days.
To exercise these rights, contact admin@yayika.com. Response time: maximum 45 days.
When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include:
Yayika uses only essential cookies for platform functionality (user sessions, preferences). We do not use advertising tracking cookies. For details, see our Cookie Policy.
You can reject analytics cookies through the cookie banner displayed when visiting the platform, or by configuring your browser to block Plausible Analytics cookies.
Third-party services that may set cookies include: Stripe (payment processing session), Supabase (authentication session). These cookies are strictly necessary for the provision of the service and do not require consent.
Yayika's service is intended for users aged 18 and over. We do not knowingly collect personal data from children under 13. In accordance with COPPA, if a parent or guardian becomes aware that their child under 13 has provided us with personal data without their consent, they should contact us at admin@yayika.com for immediate deletion.
For users between 13 and 17, we require parental or guardian consent before processing any personal data. Yayika reserves the right to suspend or delete accounts of users under 18 without prior notice.
If you are a parent or guardian and believe your child has provided personal data to Yayika, please contact us immediately. We will take steps to delete such information from our systems.
We may collect limited data from minors (13-17) with verifiable parental consent as required by COPPA and applicable state laws. Such data is processed under the same conditions as adult data.
Our third-party service providers process data under written agreements that ensure adequate protection. We conduct due diligence on all processors and sub-processors:
You have the right to request human intervention, an explanation of the logic involved, and to contest any automated decision that affects you. Under the EU AI Act (Regulation 2024/1689, Art. 50), AI-generated content is clearly identified on the platform.
For users in Brazil, processing is governed by the Lei Geral de Proteção de Dados (LGPD — Lei 13.709/2018). You have rights including access, rectification, anonymisation, blocking, deletion, portability, and information about data sharing. Automated decisions (Art. 20) are subject to review upon request. The supervisory authority is the ANPD.
If you are in Argentina, your personal data is protected by the Ley de Protección de Datos Personales No. 25.326 and its regulations (Decreto 1558/2001). You have rights of access, rectification, update, and deletion of your data. The regulatory authority is the Agencia de Acceso a la Información Pública (AAIP). You may file complaints before the AAIP or competent courts.
If you are in Chile, your personal data is protected by the Ley No. 19.628 sobre Protección de la Vida Privada. You have rights of information, access, rectification, cancellation, and opposition. The regulatory authority is the Servicio Nacional del Consumidor (SERNAC). You may file complaints before SERNAC or competent courts.
If you are in Colombia, your personal data is protected by the Ley Estatutaria 1755 de 2015 and the Ley 1581 de 2012. You have rights of access, rectification, update, deletion, and portability. The regulatory authority is the Superintendencia de Industria y Comercio (SIC). You may file complaints before the SIC or competent courts.
If you are in Peru, your personal data is protected by the Ley No. 29733 and its regulations (Decreto Supremo No. 003-2013-JUS). You have rights of access, rectification, update, deletion, and opposition. The regulatory authority is the Autoridad Nacional de Protección de Datos Personales (ANPDP) under INDECOPI. You may file complaints before INDECOPI or competent courts.
If you are in Ecuador, your personal data is protected by the Ley Orgánica de Protección de Datos Personales. You have rights of access, rectification, update, deletion, and portability. The regulatory authority is the Superintendencia de Control del Poder de Mercado. You may file complaints before the Superintendencia or competent courts.
Yayika may process sensitive personal data (e.g., health and cycle data) only when voluntarily provided by the user. This data is used exclusively for wellness and cycle tracking services and will never be used for discriminatory purposes. Processing of sensitive data requires explicit consent under applicable law.
Under California Civil Code Section 1798.83, California residents may request information regarding the disclosure of personal information to third parties for direct marketing purposes. Yayika does not share personal information with third parties for their direct marketing purposes. We do not currently respond to "Do Not Track" (DNT) browser signals, but you may exercise your CCPA/CPRA rights as described in Section 5.2.
Yayika does not sell, trade, or rent personal information to third parties for monetary or other valuable consideration. We do not have actual knowledge that we sell or share personal information of consumers under 16 years of age.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours (UK GDPR Art. 33). Where the breach poses a high risk, we will communicate the breach to you without undue delay. Notification will include the nature of the breach, categories and approximate number of data subjects affected, likely consequences, and measures taken or proposed to address the breach.
If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the relevant supervisory authority. UK residents should contact the ICO. California residents may contact the California Attorney General's Office.
We reserve the right to modify this Privacy Notice at any time. Changes will be published on this page and take effect upon publication. We recommend reviewing this page periodically. Where material changes are made, we will make reasonable efforts to notify registered users via email.
For the purposes of this notice:
This Privacy Notice was last reviewed and updated on July 30, 2026. It will be reviewed at least annually or whenever there are material changes to our data processing activities, applicable laws, or regulatory guidance. Version 1.0 of this notice was first published on July 30, 2026.
Any previous versions of this notice can be obtained by contacting admin@yayika.com. We maintain records of all changes to this notice for compliance purposes.
This document was last updated on July 30, 2026. Version 1.0.