The short version
- These guidelines are for police, prosecutors and other authorities asking for information about Yapp accounts.
- Send requests to lawenforcement@joinyapp.app or through the form at joinyapp.app/law-enforcement.
- We need valid legal process, except in emergencies involving a risk of death or serious physical injury.
- We report child sexual exploitation to NCMEC, and UK-linked material NCMEC reporting doesn’t cover to the National Crime Agency.
Latency LLC, [Address], runs Yapp, a friendship app for people 13 and older in the United States. Teens and adults use separate age groups that never mix.
What we need
- US requests: a subpoena for basic subscriber information, a court order under 18 U.S.C. section 2703(d) for other non-content records, and a search warrant for the content of communications, as the Stored Communications Act requires.
- Requests from outside the US: through a mutual legal assistance treaty or another process US law recognizes, such as an order under the US-UK Data Access Agreement.
- Every request: the issuing authority, the officer’s name, badge or ID and official email, the account’s username or another identifier we can look up, the records you want and the date range.
We review every request and may push back on or narrow one that is unclear, overbroad or not legally valid.
Emergencies
If there is a risk of death or serious physical injury, email lawenforcement@joinyapp.app with “Emergency” in the subject and describe the emergency. We may share information voluntarily where the law allows (18 U.S.C. section 2702), and we review emergency requests at any time.
Preservation
We preserve records for 90 days on a request under 18 U.S.C. section 2703(f), and for another 90 days if the request is renewed. After a CyberTipline report, we preserve the reported material and related records for 1 year, as the law requires.
What we may hold
- Account records: the sign-in provider and email, the age group, the country, when the account was created and its age-check outcome (never face or ID images).
- Content kept for safety: messages, media, snaps and stories for the retention periods in the Privacy Policy, including safety copies kept for 1 year, and video call recordings kept for 30 days.
- Logs: limited device, network and security records for the periods in the Privacy Policy.
Telling the user
We aim to tell users about requests for their information before we disclose it, unless the law or a court order forbids it, or telling them would put someone at risk or obstruct an emergency.