Privacy Policy
Yonderify — legal referral Version of 18 October 2026
1. Who we are, and what we do
Yonderify OÜ, a company incorporated under Estonian law, with its registered office at Narva mnt 5, 10117 Kesklinna linnaosa, Tallinn, Estonia, VAT number EE103018724, is the controller of the personal data collected through this application.
For privacy matters, and to exercise any of the rights in section 8: privacidade@yonderify.com.
Yonderify is not a law firm. We do not give legal advice, we do not assess the merits of your case and we do not represent you before any authority. What we do is collect what you describe and forward it, with your authorisation, to lawyers admitted in the jurisdiction concerned. The legal relationship with the lawyer is between you and them.
Our only establishment is in Estonia, and that is what determines the competent supervisory authority (section 9), regardless of which country's law your case involves.
2. What data we collect
To create and keep your account: full name, email address, date, city, country and state of birth, declared nationalities, passport number and issuing country, country of residence, address, postcode, city, phone and employment status.
To forward your case: the country and the subject you chose, your answers to that subject's form — which may include dates of entry into the country, case numbers, the validity of residence permits, employers and deadlines from official notifications — the description you write in your own words, and the documents you attach.
From the running of the application: an account identifier, sign-in records and the confirmation codes sent, application error reports and, if you turn them on, the device identifier we need to send you notifications.
To measure our ads: the device's advertising identifier and four events — you installed the app, created an account, submitted a case, signed a contract — with the country of the case. See "Measuring our ads", below.
We do not ask you for your tax identification number or bank details, and we do not collect your location.
The passport image
When creating your account you may read your passport with the camera instead of typing the data in by hand. What happens at that moment:
- The reading happens inside the phone. The two lines at the bottom of the data page — the machine-readable zone — are recognised by the device's own operating system, with no network. While you are pointing the camera, no frame leaves it.
- The image of the data page is kept. Once the account exists, we store the photograph the reading captured. It is not so that we can identify you — we already have the data on the account. It is for the lawyer you come to choose, for whom that document saves the first thing they would ask you for anyway.
- When reading the page, we do not recognise your features or compare your face against anything. What is kept is the page, whole, like a photocopy. Your face is only compared before you sign a contract, and only with your permission — see "The liveness check before signing", below.
- It is optional, and reversible. You may type the data in by hand and never open the camera. And you may ask us to delete the image afterwards, without deleting the account, through the address in section 1.
The liveness check before signing
To sign the contract with the lawyer, we confirm that the person signing is the passport holder. This happens in two steps:
- When you read the passport chip, we keep the photograph stored on it, encrypted. It is kept only until you sign the contract, and for at most 30 days: it is deleted as soon as the contract is signed, declined or voided, and deletes itself after 30 days if you never sign.
- When you sign, the camera runs a liveness check (it confirms a person is there and not a photo or a video) and compares your face with the chip photograph. We do not keep the video, the images or a model of your face. We keep only the result: whether it passed, the similarity score, the threshold used and the date.
This is biometric data, which the law treats as sensitive. It therefore only happens with your explicit consent, asked on its own screen when you sign, and you may refuse — in which case you do not sign through the app. The liveness check and the comparison are carried out by Amazon Web Services, in Ireland, on our behalf.
Measuring our ads
We advertise on Facebook and Instagram so that Yonderify reaches the people who need it. To know which ads work, the app includes Meta's kit for apps, which sends Meta:
- the device's advertising identifier;
- that the app was installed and opened;
- that you created an account, submitted a case or signed a contract, with the country of the case.
We never send Meta the subject of your case, your answers, the description, the documents, your name, email, phone or nationality. Meta knows that an account was created; not whose, nor what for.
You can stop this measurement at any time:
- iPhone: on first launch the app asks whether you allow it to track your activity. If you say no, the advertising identifier is not sent. You can change your mind in Settings → Privacy & Security → Tracking.
- Android: in Settings → Google → Ads you can delete the advertising ID; from then on there is no identifier to send.
Sensitive data
The forms were written so as not to ask for sensitive data: we do not ask about your health, your religion, your political opinions or your criminal record.
But the case description is a free-text field, and there are subjects — an asylum application, an appeal against a removal decision — where that kind of information is the essence of the case. If you write it there, or include it in a document, it is handled with the same care as everything else and only goes to a lawyer with your express authorisation.
Criminal proceedings
We do not ask you for, and we ask you not to write, details of criminal proceedings — charges, convictions, precautionary measures, pending cases. We do not need them in order to forward your case: the subject and the jurisdiction are enough for us to choose the right lawyer. Those details belong to the conversation you will have with them, protected by professional privilege.
If they do appear anyway in what you write or attach, we do not use them for any decision, we handle them with the same care as the rest, and they go only to the lawyer you authorise. You may ask us to delete them at any time, at the address in section 1.
3. What we use the data for, and on what basis
| Purpose | Basis |
|---|---|
| Creating and managing your account | Performance of a contract — art. 6(1)(b) |
| Sending the code that gives access to the account | Performance of a contract — art. 6(1)(b) |
| Presenting your case to lawyers | Your consent — art. 6(1)(a) |
| Keeping the passport image for the lawyer | Your consent — art. 6(1)(a) |
| Liveness check and face comparison when signing | Explicit consent — art. 9(2)(a) |
| Measuring ads (advertising identifier) | Your consent — art. 6(1)(a) |
| Sensitive data you include in the description | Explicit consent — art. 9(2)(a) |
| Security, access logs and abuse detection | Legitimate interest — art. 6(1)(f) |
Sharing with lawyers never happens without your consent, which is asked for separately, on a screen of its own, after we show you exactly what would be shared. Accepting this policy does not authorise that sharing.
4. Who we share it with
With the lawyers who receive your case, and only after you authorise it. Those lawyers are independent controllers: from the moment they receive the case, they answer for the data to you and to the law, under the confidentiality obligations of their profession. This policy does not cover what they do with the data.
With those who provide us with technical services, who process the data on our behalf and on our instructions:
| Processor | For what | Where |
|---|---|---|
| Amazon Web Services | hosting and database | Ireland (EU) |
| Amazon SES | transactional email | Ireland (EU) |
| Amazon Rekognition | liveness check and face comparison when signing | Ireland (EU) |
| DocuSign | electronic signature of the contract | see section 6 |
| Apple and Google | delivering notifications to your phone | see section 6 |
With Meta Platforms Ireland, to measure our ads, and only what is listed in "Measuring our ads" (section 2): the advertising identifier and the events installed, created an account, submitted a case, signed. Meta also processes that data under its own privacy policy.
We do not sell your data. The content of your case — the subject, the answers, the description and the documents — is not passed on to anyone for commercial or advertising purposes.
5. What we share with lawyers, and when
The authorisation we ask you for is prior and general: you authorise your case to be presented to lawyers admitted in the jurisdiction you chose, registered with the relevant bar, verified by us and bound by the confidentiality of their profession. We do not ask for an authorisation for each lawyer, nor do we know in advance which of them will reply.
The sharing happens at two moments, and it is not the same thing that goes out at each of them:
1. So they can make you a proposal, only the following goes out:
- your name, your location and your contact details
- the subject and the summary of the case
2. After you choose a lawyer, and only to that one, the rest of the file goes out — your answers to the form, the documents you attached and the passport image, if you had it stored.
This order is deliberate: an attached document can say more about you than the whole case, and there is no reason to show it to someone who is not yet your lawyer.
At the proposal stage none of this goes out: not the documents, not the passport image, not its number. The tax identification number never goes out at any moment, because we never ask you for it.
6. Where the data is
On Amazon Web Services, in the Ireland region (eu-west-1), encrypted in transit and at rest.
The documents you attach and the passport image are not kept in the database: they sit in separate storage, encrypted at rest and with no public access. Every read requires a temporary address signed by us, which expires within minutes and is given only to you or to the lawyer you chose — there is no link that can be guessed or passed around.
The content of your case does not leave the European Economic Area. The lawyers we forward cases to are established in EEA countries.
Some providers may process data outside the EEA: DocuSign (the contract you sign and your contact details), Apple and Google (the notification identifier) and Meta (the advertising identifier and the events in section 2). Those transfers take place under the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.
7. For how long
One year. That is the period we apply to the data of a case — the form answers, the description and the attached documents — counted from the moment the case is closed or you delete your account, whichever comes first. After that period, it is deleted.
- Account: for as long as it stays active. When you delete it, the data is deleted from our systems, with the exception below.
- Cases you never submitted: deleted after a year without activity.
- Passport image: the same period as the case documents. You may delete it whenever you want, without that deleting the account or the case.
- Chip photograph: until the contract is signed, declined or voided, and never more than 30 days. The liveness result (passed or not, the score and the date) is kept while you have an account.
- Record of consents: kept even after you delete your account — the date, the version of the document accepted and the email it was delivered to. It is what allows us to demonstrate that the authorisation existed, and demonstrating it is an obligation of the GDPR itself (art. 7(1)). That record does not contain your case.
8. Your rights
At any time, you may:
- access your data and obtain a copy
- correct anything that is wrong
- erase your data
- take your data to another service, in a machine-readable format
- object to a processing operation or ask for it to be restricted
- withdraw your consent to sharing with lawyers, without that affecting what was done before you withdrew it
- withdraw your consent to ad measurement, as explained in section 2, in your phone's settings
Just write to privacidade@yonderify.com. We answer within one month, as the GDPR requires.
An honest warning: withdrawing your consent does not erase what a lawyer has already received — for that you will have to speak to them directly.
9. Complaints
If you think we have handled your data badly, tell us first — it is quicker.
The supervisory authority competent for Yonderify is the Estonian one, because that is where our establishment is:
Andmekaitse Inspektsioon Tatari 39, 10134 Tallinn, Estonia www.aki.ee
You may also complain to the authority of the country where you live or where the matter you are complaining about took place — in Portugal, the CNPD (www.cnpd.pt); in Spain, the AEPD (www.aepd.es). It is a right the GDPR gives you (art. 77).
10. Changes
If this policy changes, we publish a new version, with a date. The version you accepted is kept and continues to be the one that applies to you until you accept another.
What changed in the version of 18 October 2026:
- The liveness check before signing: we keep the passport chip photograph until you sign (at most 30 days) and compare your face with it, with your explicit consent. Sections 2, 3, 4 and 7.
- Measuring our ads: the app now sends Meta the advertising identifier and whether you installed, created an account, submitted a case or signed — never the content of the case. Sections 2, 3, 4 and 8.
- New providers: DocuSign (signature), Amazon Rekognition (liveness check) and Apple and Google (notifications), and the transfers outside the EEA that some of them involve. Sections 4 and 6.
What changed in the version of 21 September 2026: it became possible to read the passport with the camera, and the image of the data page is now stored. It is described in section 2, with its basis in section 3, what goes to the lawyer in section 5, where it is kept in section 6 and for how long in section 7. None of it happens unless you ask for it.