Privacy policy

Yapflip is a Fersify.com service operated by 3-101-912163 S.A. ("Fersify", "we", "us"), a corporation registered in Costa Rica. We are responsible for (the controller of) your personal data on yapflip.com, in the Yapflip app, in support chats and in our emails. This policy explains what we collect, why, who helps us, and how long we keep it.

• Legal name: 3-101-912163 S.A.
• Costa Rica corporate ID (cédula jurídica): 3-101-912163
• Address: Residencial La Carpintera 5L, La Unión, Cartago 30304, Costa Rica
• Phone: +506 8346 3461
• Legal representative: Cristian Ferrer Piedra

Privacy questions and requests: [email protected]. Everything else: [email protected]. The person responsible for privacy at Fersify is Cristian Ferrer Piedra.

Version 2026-10-30, in effect since October 30, 2026. This policy is published in English, Spanish, French and Portuguese. All versions have the same legal value. If they differ, the version in the language we showed you at sign-up prevails: French in French-speaking countries, Portuguese in Brazil and in Portuguese-speaking countries, Spanish in Latin America and Spain, and English everywhere else.

The short version

• Everything you upload, including voice samples, is deleted 24 hours after upload.
• Your dubbed files, and the transcript and translation of each dub, are deleted 30 days after the dub is ready.
• All AI processing (transcription, translation, voices, our support assistant and our error checks) runs on Fersify's own servers in Costa Rica. We don't send your content to outside AI services.
• We don't sell your data, we don't show ads, and we don't use your content, your voice or your support messages to train AI models.

What we collect

• Account: your email address, the country you signed up from (detected from your connection; older accounts also have the country and province they chose), and your name if you sign in with Google or add it.
• Your acceptance of the terms and this policy, with the version, the language, the date, IP address and browser.
• Your choice about tips and offers by email, with the date and the exact text you agreed to.
• Sign-in: one-time codes and session records with IP address and browser. We store codes and sessions in a form that can't be read back.
• Free minutes: a one-way fingerprint (hash) of your email address, so each person gets the free minutes once, and the IP address you signed up from, kept 30 days to limit free sign-ups per network.
• Your files: the video, audio or text you upload, and the files we make for you (dubbed audio or video, subtitles, transcripts).
• Your dubs: title, languages, voice, length, price, glossary, the word fixes you ask for, and the transcript and translation text.
• Your own voice, if you use it: the voice sample and your confirmation of whose voice it is and that you are 18 or older, with date, time, IP address and browser.
• In the European Union, the European Economic Area and the United Kingdom: your request to start each dub right away, with date, time, IP address and browser, and any withdrawal you send us.
• Payments: your top-ups, refunds and balance movements. Paddle handles the payment and tells us the amount and whether it went through. We never see your card number.
• Affiliates: who referred you, the rewards you earn, the PayPal or email address you give us for a payout and, for some U.S. payouts, the W-9 tax form.
• Support: your messages, the files you attach (images, PDFs, logs or clips) and your conversation with our support assistant.
• Reports: if you report abuse, your name, email, the details you send and your signed statements.
• Waitlist: if you joined our waitlist before Yapflip opened in your country, your email address, country and choice about offers.
• Technical data: IP address, browser, and server logs needed to run and protect the service.

Required and optional data

• Required to create an account: your email address, the country you sign up from (we detect it from your connection) and your acceptance of the terms and this policy. Without them we cannot create the account.
• Required to make a dub: the file you upload. To pay, Paddle asks for the payment details it needs.
• Required only for some features: payout details for an affiliate payout, and the W-9 form for some U.S. payouts. Without them we cannot send that payout.
• Optional: your name, signing in with Google, your own voice, tips and offers by email, and support attachments. If you say no, you can still use Yapflip. For example, without your own voice you can dub with a library voice.

How we use it, and why we may

Primary purposes, needed for the service you asked for:

• To make your dubs and deliver them, run your account and balance, process refunds, withdrawals and affiliate rewards, and send service emails such as sign-in codes, receipts and dub notices. Legal basis: our contract with you.
• To answer support requests. Our support assistant, an AI that runs on our own servers, helps you describe the problem and collect the details. A person at Fersify handles the case. Legal basis: our contract with you.
• To keep the service working and safe: an AI error checker on our own servers reads system logs to find and explain failures. It removes personal data such as emails, names and IP addresses before it analyzes a log. Legal basis: our legitimate interest in a secure, working service.
• To prevent fraud and abuse, such as repeated sign-ups for free minutes, and to act on reports. Legal basis: our legitimate interest and, for reports, the law.
• To meet legal duties, such as tax records, consumer law and sanctions rules, and to defend legal claims. Legal basis: the law.

Secondary purpose, only with your consent:

• To send tips and offers by email. You can say no when you sign up, and stop them at any time from your account page or the link in each email. Saying no does not affect your account.

We do not use your content, your voice or your support messages to train AI models. We do not make decisions with legal or similarly significant effects about you by automated means alone, and we do not use your data for profiling.

Your voice

A sample of your own voice is sensitive or biometric data under some laws, such as those of Colombia, Chile, Mexico, Brazil, Quebec and Illinois. Using your own voice is optional. Before we receive any sample, you give your express consent in the app, and we record it electronically with the date, time, IP address and browser. That consent is the legal basis for this use, and you can withdraw it at any time for future dubs.

• System: Fersify's own zero-shot speech synthesis engine, on our servers in Costa Rica. It reads the sample and speaks the translated text in a voice like yours.
• Purpose: only the dub you ordered. We do not use it to identify you, we do not create or keep a voice model of you, we do not add your voice to our library, and we do not sell your voice or train AI models with it.
• The sample you upload or record is deleted 24 hours after upload.
• So you can fix words later, we keep with your dub results, for 30 days after the dub is ready: the separated voice and background tracks, and a clip of up to 10 seconds from the sample. They are deleted with the results.
• Your consent record is kept as proof of consent. It contains no audio.

This is our public retention and destruction policy for voice data: we permanently destroy it when the purpose is met, on the schedule above, and never later than 30 days after the dub is ready.

How long we keep it

• Uploaded files, including voice samples: deleted 24 hours after upload.
• Dubbed files, subtitles, transcript documents, and the transcript and translation text of a dub: deleted 30 days after the dub is ready, together with the separated tracks and the voice clip described above.
• Glossary and word fixes of each dub: kept with your account's dub history, and deleted when you delete your account.
• Server logs: 30 days.
• Error incidents found by our error checker: deleted 30 days after they were last seen. They contain no personal data.
• Support: messages and attachments are deleted 90 days after your ticket is resolved, or right away when you delete your account. Attachments you upload but never send are deleted after 24 hours. A ticket that waits for your reply with no activity for 30 days is marked resolved.
• Database backups, which hold account and dub records but no media files: up to 5 weeks.
• Free-minutes fingerprint: 24 months. It doesn't contain your email address.
• Account data: until you delete your account.
• Payment and balance records: as long as tax law requires.
• Consent records (terms, voice, starting a dub right away and email offers): as long as they may serve to answer a legal claim.
• Reports of abuse: as long as we need them to act on the report and answer legal claims.
• Waitlist: until we tell you that Yapflip is open in your country, or until you ask us to remove you.

When you delete your account, we remove your email address and name, sign you out everywhere, and delete your support messages and the glossaries and word fixes of your dubs. Dubbed files you already made are deleted on their normal 30-day schedule. We keep the payment, consent and free-minutes records listed above.

Who helps us

Fersify's own servers run the dubbing, the AI, the storage and the account system. These companies process some data for us (as our processors), only for the purpose listed:

• Cloudflare, Inc. (United States): domain name service, the secure connection between the internet and our servers, protection from abuse, and receiving email sent to our @yapflip.com addresses.
• Plus Five Five, Inc., which runs Resend (United States): sends our emails, such as sign-in codes and dub notices.

These companies receive some data and decide how to use it under their own privacy policies (as separate controllers):

• Paddle: Paddle.com Market Limited (United Kingdom), or Paddle.com Inc. (United States) for purchases from the United States and Paddle.com (Canada) Ltd. for purchases from Canada. Payments, invoices, tax and refunds, as our reseller and merchant of record. Paddle's own privacy policy covers the checkout.
• Google LLC (United States): only if you choose to sign in with Google. We receive your email address, your name and a Google account ID.
• PayPal: only if you ask for an affiliate payout by PayPal. It receives your PayPal address and the amount.

Service emails come from a noreply address at yapflip.com or fersify.com. Replies to it are not read: write to [email protected] instead. We may also share data when the law requires it, to protect people from harm, or with a company that takes over Yapflip, which would have to follow this policy.

International transfers

Our servers are in Costa Rica. The companies above process data in the United States and, for Paddle, also in the United Kingdom and other countries. Those countries may not offer the level of protection that the law of your country requires. Data stored in another country can be accessed by its courts and authorities under its laws. When you accept this policy at sign-up, you expressly authorize these international transfers.

Where your law requires a specific safeguard, we use these. With Cloudflare and Resend, their data processing agreements include the standard contractual clauses approved by the European Commission, with the United Kingdom addendum and the Swiss amendments, and both take part in the EU-U.S. Data Privacy Framework. Data sent to Paddle in the United Kingdom is covered by the European Commission's adequacy decision for the United Kingdom. Costa Rica has no adequacy decision from the European Union, the United Kingdom or Switzerland: when you use Yapflip from those places, you send your data to us directly, and the GDPR, the UK GDPR or Swiss law applies to us as described in your regional section. To ask for a copy of these safeguards, write to [email protected].

Cookies

We only use cookies the site needs to work. We don't use analytics, advertising or tracking cookies, so we don't ask for cookie consent.

• yf_session: keeps you signed in. Lasts 30 days.
• yf_ref: remembers the affiliate link you arrived from, so the referral counts when you sign up. Lasts 30 days.
• yf_alta: keeps your sign-up step while you finish creating your account. Lasts 30 minutes.
• yf_oauth: protects sign-in with Google. Lasts 10 minutes.

When you open the checkout to add balance, Paddle loads its payment form and may set its own cookies for payment and fraud checks. Cloudflare may set a security cookie when it checks for bots.

Security

We use encrypted connections, store sign-in codes and sessions in a form that can't be read back, and limit access to your data to the people at Fersify who need it to run Yapflip. If a breach puts your data at risk, we will tell you and the authorities as the law requires.

Your rights

You can download a copy of your data and delete your account from your account page. You can also write to [email protected] to access, correct, delete or port your data, restrict or object to a use, or withdraw a consent. Withdrawing a consent does not affect what we did before. We may ask you to confirm that you own the account. If we say no, we explain why, and you can ask us to review the decision by replying. We offer these rights to everyone, wherever you live, free of charge.

We answer within these times, counted from when we receive your request:

• Costa Rica: 5 business days (Law 8968, article 7).
• Mexico: 20 business days to answer, and if we grant the request, it takes effect within 15 more business days.
• Colombia: inquiries (consultas) within 10 business days, extendable by 5; claims (reclamos) within 15 business days, extendable by 8 (Law 1581, articles 14 and 15). If we need the extension, we tell you why and when we will answer. Before complaining to the SIC, you must first file your claim with us.
• Argentina: access within 10 calendar days, and correction or deletion within 5 business days (Law 25,326, articles 14 and 16). Access is free once every 6 months, or sooner if you show a legitimate interest.
• Chile: 30 calendar days, extendable once by 30 more (Law 21,719, from December 1, 2026).
• Peru: within the times set by Law 29733 and its regulation.
• Brazil: confirmation and access in full within 15 days (LGPD, article 19).
• Quebec: 30 days.
• European Union, European Economic Area and United Kingdom: one month, extendable by two more months for complex or numerous requests. If we need the extension, we tell you why within the first month.
• Switzerland: 30 days.
• Everywhere else: within the time your law sets, and never later than 30 days.

You can also complain to your data protection authority, such as PRODHAB in Costa Rica, the Secretaría Anticorrupción y Buen Gobierno in Mexico, the Superintendence of Industry and Commerce (SIC) in Colombia, the Agency for Access to Public Information (AAIP) in Argentina, the Agencia de Protección de Datos Personales in Chile (from December 1, 2026), the National Authority for Personal Data Protection (ANPD) in Peru, or the authorities named in your regional section.

Age

Yapflip is for people 18 and older. We do not knowingly collect data from children. If we learn that we did, we delete it.

Your region

Your region is set by the country you sign up from, which we detect from your connection, and you accept this policy together with the section for your region. If we got your country wrong, write to [email protected]. Nothing here reduces the rights your local law gives you.

United States

Residents of California and other states with privacy laws can ask to know, access, correct, delete and port their personal information, and we will not treat you differently for asking. The categories we collect are listed in "What we collect" and come from you, from your use of Yapflip, and from Paddle and Google. We do not sell or share personal information for targeted advertising, so there is nothing to opt out of. We use your voice sample, which can be sensitive personal information, only to make your dub. Where state law treats a voice sample as biometric data (for example the Illinois Biometric Information Privacy Act, or the laws of Texas or Washington), we collect it only after your written consent in the app, never sell, lease, trade or profit from it, and destroy it on the schedule in "Your voice".

Canada

We follow PIPEDA. Our privacy officer, Cristian Ferrer Piedra, is responsible for this policy and can be reached at [email protected]. Your data is stored in Costa Rica and processed by the companies listed above in other countries. We send tips and offers only with your express consent, as Canada's anti-spam law requires, and every such email lets you unsubscribe. You can complain to the Office of the Privacy Commissioner of Canada. If you live in Quebec, the next section also applies.

Quebec

• This policy is published in French, and in Quebec the French version prevails. We follow the Act respecting the protection of personal information in the private sector (CQLR, chapter P-39.1), as amended by Law 25.
• Person in charge of the protection of personal information: Cristian Ferrer Piedra, 3-101-912163 S.A., [email protected].
• You can access and correct your personal information, withdraw your consent, ask for a copy in a structured, commonly used technological format, and ask us to stop disseminating it. We answer within 30 days.
• Your information is kept in Costa Rica and processed by the companies listed above outside Quebec. Before communicating it outside Quebec, we assess the privacy impact, as section 17 of the Act requires, and we only do it if the information will be adequately protected, under a written agreement.
• Your voice is sensitive information: we only use it with your express consent, for the dub you ordered. We do not use any technology that identifies, locates or profiles you.
• We keep a register of confidentiality incidents and report those that present a risk of serious injury to you and to the Commission d'accès à l'information du Québec, where you can also file a complaint.

Latin America

This policy is also published in Spanish, and for you the Spanish version prevails. Depending on your country, you can access, correct, update, delete or object to the use of your personal data, and withdraw your consent. Write to [email protected]. The response times and authorities are in "Your rights".

Brazil

• This policy is published in Portuguese, and for you the Portuguese version prevails. We follow the General Personal Data Protection Law (Law 13,709/2018, LGPD) as controller.
• Data protection officer (encarregado): Cristian Ferrer Piedra, [email protected].
• Legal bases (article 7): performance of the contract with you, compliance with legal obligations, our legitimate interest (security and fraud prevention) and your consent (offers by email). Your own voice: your specific and prominent consent (article 11).
• Your rights (article 18): confirmation that we process your data, access, correction, anonymization, blocking or deletion of unnecessary data, portability, deletion of data processed with your consent, information about who we share it with and about refusing consent, withdrawal of consent, and objection. We answer access requests in full within 15 days.
• International transfers: your data is stored in Costa Rica and processed by the companies listed above in other countries, based on your specific consent at sign-up and on the performance of the contract with you (article 33, items VIII and IX).
• You can file a complaint with the National Data Protection Authority (ANPD).

European Union and European Economic Area

• The General Data Protection Regulation (Regulation (EU) 2016/679, GDPR) applies to us because we offer Yapflip to people in the European Union and the European Economic Area (article 3(2)). We have no establishment there.
• Legal bases (article 6): performance of the contract with you (account, dubs, payments, support, service emails); our legitimate interests (security, error checks, fraud prevention), which you can object to; legal obligations (tax, consumer law, sanctions); and your consent (offers by email, your own voice). If your voice sample counts as special category data, the basis is your explicit consent (article 9(2)(a)).
• Your rights (articles 15 to 22): access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time. We do not make decisions based solely on automated processing. We answer within one month.
• You can complain to the data protection authority of the country where you live or work, or where you think the problem happened. The list of authorities is on the website of the European Data Protection Board (edpb.europa.eu).
• Transfers: see "International transfers" above.

If you are in the EU, EEA or UK, write to [email protected]; we answer every request within the legal deadlines.

United Kingdom

The UK GDPR and the Data Protection Act 2018 apply to us because we offer Yapflip to people in the United Kingdom. The legal bases, rights and response times are the same as in the European Union section above. You can complain to the Information Commissioner's Office (ico.org.uk). We suggest you write to us first, so we can try to solve it.

If you are in the EU, EEA or UK, write to [email protected]; we answer every request within the legal deadlines.

Switzerland

We follow the Federal Act on Data Protection (FADP). You can ask for access to your data, its correction or deletion, and a copy in a common electronic format. We answer within 30 days. Your data is processed in Costa Rica and in the countries named in "International transfers", with the safeguards described there. You can complain to the Federal Data Protection and Information Commissioner (FDPIC).

Everywhere else

This policy and the rights in "Your rights" apply to you wherever you live. If the law of your country gives you more rights or shorter response times, we follow it. Write to [email protected].

Changes

If we change this policy in a way that matters, we will email you at least 30 days before it takes effect. The version and date at the top show the last update.