Privacy Policy
Last updated: January 2026
Table of Contents
1. Introduction
Yoma (Youth Agency Marketplace) is a digital platform where youth can develop their skills, find opportunities, and achieve impact while connecting to peers in a supportive community. We respect your privacy and are committed to protecting your personal data.
2. Our Privacy Principles
Our approach to privacy is guided by three key principles:
- Self-Sovereign Identity (SSI): You should own and control your data. We aim to give you control over what you share and with whom.
- Data Portability: Your credentials and verified skills should be useful beyond Yoma. We use standards that allow you to take your achievements with you.
- Data Minimization: We only collect the information necessary to provide our services and connect you with opportunities.
3. Information We Collect
We collect information you provide directly to us (registration and profile data), information generated by your activity (opportunities, credentials, ZLTO), and technical information from your device.
| Section | Data name | Data category | Data type | Reason for collection |
|---|---|---|---|---|
| Youth Portal | First name, Surname | Profile Data | Personalised | User identification and account creation |
| Youth Portal | Email or Phone Number | Registration Data | Personalised | Login identifier and communication |
| Youth Portal | Country | Profile Data | Personalised | Matching opportunities by location |
| Youth Portal | Date of Birth | Profile Data | Personalised | Age verification and opportunity matching |
| Youth Portal | Gender | Profile Data | Personalised | Demographic matching for opportunities |
| Youth Portal | Education | Profile Data | Personalised | Matching to relevant learning/earning opportunities |
| Youth Portal | Profile Image | Profile Data | Personalised | User profile personalization |
| Youth Portal | Credentials / Skills | User Activity | Personalised | Verification of achievements and CV building |
| Youth Portal | Opportunity Applications | User Activity | Personalised | Processing participation requests |
| Youth Portal | ZLTO Transactions | User Activity | Personalised | Managing rewards balance and redemptions |
| Youth Portal | IP Address / Device Info | Technical Log Data | Anonymised/ Pseudonymised | Security, fraud prevention, and platform optimization |
| Youth Portal | Usage Analytics | Log Data | Anonymised | Improving platform performance (consent-based) |
4. How We Use Your Data
We use your information to:
- Create and manage your account.
- Match you with relevant learning, earning, and impact opportunities.
- Issue and verify credentials (YoID) for your achievements.
- Facilitate the earning and redemption of ZLTO rewards.
- Improve the platform and user experience (using anonymous analytics).
- Communicate with you about your account and new opportunities.
5. Data Sharing and Partners
We do not sell your personal data. We share data only in specific circumstances:
- With Partners: When you choose to apply for or participate in a partner opportunity, we may share necessary information (such as your name and contact details) with that partner. Standard practice is that you authorize this sharing.
- Marketplace Vendors: When you redeem ZLTO, necessary transaction details are shared to fulfill the formatted request.
- Analytics Providers: We use tools like Google Analytics and Datadog to monitor platform performance. This data collection is gated by your consent preference.
- Legal Requirements: We may disclose information if required by law or to protect the safety and security of our users and platform.
6. Data Storage and Security
Your data is stored securely. Our primary hosting environmnent is Amazon Web Services (AWS) located in the Europe (Ireland) region (eu-west-1). We implement appropriate technical measures to protect your data from unauthorized access.
7. Data Retention
We retain your personal data only in as far as necessary to fulfill benefits of the platform (your lifelong skills profile) and to comply with legal obligations.
Active accounts are retained indefinitely to support your learning journey. If an account is deleted, we aim to remove personal identifiers within 30 days, subject to legitimate business needs (e.g., fraud logs) or legal requirements.
8. Your Privacy Rights
Depending on your location, you have rights regarding your data, including:
- Accessing your personal data.
- Correcting inaccurate data (mostly available via profile settings).
- Requesting deletion of your data.
- Withdrawing consent for optional processing.
Note on Deletion: Currently, there is no automatic "delete button" in the settings. To request account deletion, please contact us at the email below.
9. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Data Controller:
RLabs (Yoma)
Email: admin@yoma.world
Address: 54 Kiewiet Road, Bridgetown, Athlone 7764, Cape Town, South Africa