Provisions Index

Yelp collects your precise GPS location from your device when you use the app, and may use this data to personalize content, target advertising, and share it with third-party partners....

Why it matters: Precise location data is among the most sensitive categories of personal information and can reveal where you live, work, worship, or receive medical care....

When you make or receive calls through Yelp's platform (such as calls to businesses), Yelp may record, transcribe, and analyze those calls for quality assurance, fraud prevention, and service improvement purposes....

Why it matters: Call recordings may capture sensitive personal conversations and can be retained and analyzed, raising significant privacy concerns for both consumers and businesses....

Yelp shares your personal information, including browsing behavior and identifiers, with advertising partners for the purpose of targeted and cross-context behavioral advertising....

Why it matters: Under CCPA/CPRA, sharing data for cross-context behavioral advertising is treated as a 'sale' of personal information, giving California residents the right to opt out....

Yelp both collects data about you from third-party sources (such as data brokers and social networks) and shares your data with third parties including advertising partners, analytics providers, and business partners....

Why it matters: This bidirectional data flow means Yelp builds richer profiles on users than what they share directly, and distributes that data broadly across the advertising ecosystem....

If you have a legal dispute with Nintendo, you must resolve it through individual arbitration rather than going to court. This means a private arbitrator — not a judge or jury — will decide your case....

Why it matters: This clause removes your ability to take Nintendo to court, which is a significant restriction on your legal rights as a consumer....

You agree to give up your right to participate in any class action lawsuit or class-wide arbitration against Nintendo. Any dispute must be resolved only on an individual basis....

Why it matters: Class actions allow many consumers to band together to pursue claims that would be too small or costly to pursue individually; waiving this right significantly weakens consumers' collective bargaining power against Nintendo....

Nintendo reserves the right to suspend or terminate your account at any time, with or without notice, if they believe you have violated their terms or for any other reason they deem appropriate....

Why it matters: Your access to Nintendo's digital services, including any purchased digital games or content tied to your account, can be cut off at Nintendo's discretion....

If you have a dispute with MetaMask or Consensys, you must resolve it through binding individual arbitration rather than going to court, unless you opt out within 30 days of agreeing to the Terms....

Why it matters: Arbitration removes your right to a jury trial and limits your ability to appeal decisions, and proceedings are often less favorable to consumers than court litigation....

You agree to waive your right to participate in any class action lawsuit or class-wide arbitration against MetaMask or Consensys....

Why it matters: Class actions allow many consumers to pool claims against a company, which is often the only practical way to seek redress for small individual harms caused by widespread platform issues....

MetaMask does not store or have access to your private keys or seed phrase, and if you lose them, MetaMask cannot help you recover your funds — they will be permanently lost....

Why it matters: Unlike a bank or traditional financial institution, MetaMask has no ability to restore access to your account or funds if you lose your credentials, meaning user error results in permanent, irreversible financial loss....

MetaMask and Consensys disclaim liability for nearly all losses you might suffer, including lost profits, lost data, financial losses from bugs or hacks, and most other damages arising from use of the service....

Why it matters: This clause means that even if MetaMask's software has a bug or security flaw that causes you to lose money, you likely cannot recover those losses from the company....

TaskRabbit shares your personal information with third-party advertising partners, and acknowledges this may count as a 'sale' under California's privacy law (CCPA). You have the right to opt out of this....

Why it matters: This means your personal data could be shared with advertisers even if you don't realise it, and California residents have a legal right to stop this from happening....

TaskRabbit collects background check results, which may include criminal history, for Taskers and other users as permitted by law....

Why it matters: Criminal and identity check data is among the most sensitive personal information, and its collection, storage, and potential disclosure to third parties carries significant privacy and safety implications....

If you have a dispute with 23andMe, you cannot take them to court — you must resolve it through private arbitration, and you must do so alone, not as part of a group....

Why it matters: This clause eliminates your ability to join a class action lawsuit, which is often the only practical way for individual consumers to hold large companies accountable for widespread harms....

You agree that you will not bring or participate in any class action lawsuit, class-wide arbitration, or consolidated proceeding against 23andMe....

Why it matters: Class actions are a critical mechanism for consumers to collectively challenge corporate misconduct; waiving this right means each consumer must act alone, making it economically impractical to pursue many legitimate claims....

23andMe may use a de-identified version of your genetic data for research purposes, potentially including sharing with third-party research partners....

Why it matters: Your DNA is uniquely identifying even when anonymized, and sharing it with third parties for research — even in aggregate form — carries risks of re-identification that could affect your privacy and potentially your family members who never consented....

You must be at least 18 years old to create a 23andMe account and use the services, though parents or legal guardians may purchase and manage testing for minors....

Why it matters: Genetic testing of minors raises significant ethical and privacy concerns, as DNA results are permanent and irrevocable, and children cannot meaningfully consent to having their genetic information collected and potentially used for research....

23andMe limits how much they can be held financially responsible if something goes wrong with their service, including errors in your genetic results....

Why it matters: If 23andMe provides inaccurate genetic health information that leads you to make medical decisions, the financial damages you can recover may be capped at what you paid for the service....

Calm uses cookies and allows advertising partners to track you across the web to show you targeted ads, and this may legally count as 'selling' or 'sharing' your personal data under privacy laws like CCPA....

Why it matters: This means your personal information may be commercially transferred to advertising partners without a direct payment, which triggers opt-out rights under California law and similar statutes....

US-based users must resolve disputes with Fiverr through binding arbitration rather than going to court, and cannot join class action lawsuits against Fiverr....

Why it matters: This means if Fiverr wrongs you financially or otherwise, you cannot sue them in court or join a group lawsuit — you must go through a private arbitration process which can be costly and less favourable to consumers....

Fiverr reserves the right to suspend or permanently terminate your account at its discretion, including withholding pending funds, if it believes you have violated the Terms of Service....

Why it matters: Your account and any earnings or credits in it can be frozen or removed by Fiverr without prior notice, which is particularly significant for sellers who rely on the platform for income....

Fiverr limits the maximum amount they can be held responsible for to the fees you paid in the 12 months prior to your claim, and disclaims liability for many types of losses entirely....

Why it matters: Even if Fiverr causes you significant harm — such as wrongly withholding earnings or enabling a fraudulent transaction — your ability to recover compensation is capped at what you recently paid them....

When you post a BeReal, the app can collect your precise GPS location and attach it to your post. This data is stored and may be shared with service providers....

Why it matters: Precise location data is among the most sensitive categories of personal information — it can reveal where you live, work, sleep, and socialize over time....

BeReal shares personal data including usage patterns, device identifiers, and behavioral data with third-party advertising and analytics companies to deliver and measure targeted ads....

Why it matters: This means your app behavior, device fingerprint, and potentially your posts and interactions are used to build an advertising profile about you and shared with companies outside of BeReal....

Verizon enrolls customers by default in a program that analyzes your web browsing, app usage, and location data to serve you personalized ads. You must actively opt out if you do not want this....

Why it matters: Being enrolled by default means your detailed browsing and location data is used for advertising unless you take action to stop it — most consumers may not be aware this is happening....

Verizon collects your precise location data through your device and network, and may use and share this information with partners for various purposes including advertising and analytics....

Why it matters: Precise location data is one of the most sensitive categories of personal information, and its collection and sharing can reveal details about your daily life, health, religion, and relationships....

Verizon shares your personal information with advertising partners, analytics companies, and other third parties to deliver targeted ads both on and off Verizon platforms....

Why it matters: Once your data is shared with third parties, you have limited control over how it is subsequently used, stored, or further shared by those external companies....

If you have a dispute with Coinbase, you must resolve it one-on-one through private arbitration rather than by suing them in court or joining a group lawsuit with other affected customers....

Why it matters: This clause strips you of your right to sue Coinbase in court and prevents you from joining other harmed customers in a class action — the primary mechanism through which consumers hold large companies accountable for widespread harms....

If Coinbase goes bankrupt, your cryptocurrency held on the platform may be legally treated as Coinbase's property, not yours, meaning you might only get a fraction of it back — or nothing — as an unsecured creditor....

Why it matters: This is the highest-impact financial risk in the entire agreement: unlike money in an FDIC-insured bank, cryptocurrency held on Coinbase is not protected if Coinbase fails, as demonstrated by the Celsius and FTX collapses where customers lost billions....

Coinbase can freeze your account, block your transactions, or shut down your account at any time based on their own judgment, including suspecting — without proof — that something illegal is happening....

Why it matters: This provision gives Coinbase nearly unchecked power to cut off your access to your money and cryptocurrency with limited appeal rights, which could be devastating if triggered in error during a market event when you need to trade or withdraw urgently....

No matter what goes wrong — hacks, outages, errors, lost funds — Coinbase limits what they owe you to a maximum of $100 total, even if you lose thousands of dollars....

Why it matters: A $100 liability cap on a platform where users may hold tens of thousands of dollars in cryptocurrency is extraordinarily low and means Coinbase bears almost no financial responsibility for losses you suffer due to their errors, outages, or security failures....

Google employees and contractors may read your Gemini conversations to improve safety, quality, and AI performance. These reviews can occur even if you have deleted your conversation history....

Why it matters: Users may assume their AI conversations are private, but human reviewers can access the content, which is especially significant if sensitive personal information was shared....

By default, Google retains your Gemini conversation data for up to 3 years, though you can change this retention period or delete your history in your account settings....

Why it matters: A 3-year default retention period is significantly longer than many users would expect for an AI chat service, meaning years of personal interactions may be stored and accessible....

When Gemini Apps Activity is enabled, Google may use your conversations to train and improve its AI models. This is on by default for most users....

Why it matters: Your personal conversations and queries may be permanently incorporated into AI training datasets, potentially influencing how Gemini responds to millions of users....

If you connect third-party extensions to Gemini (such as apps from other companies), your conversation content relevant to those extensions may be shared with those third parties....

Why it matters: Connecting extensions dramatically expands the number of companies that can access your Gemini conversation data, beyond just Google, and each third party has its own privacy policy....

If you use your Fitbit with a Google Account, Google's Privacy Policy governs your data instead of (or in addition to) Fitbit's own policy. This means your fitness and health data may be processed under Google's much broader data practices....

Why it matters: This provision means millions of Fitbit users may be unaware that their health data is governed by Google's expansive data ecosystem, not just Fitbit's narrower policy....

Fitbit collects highly sensitive health data from your device including heart rate, sleep patterns, menstrual cycles, weight, calories, exercise activity, and GPS location. This data is stored on Fitbit's servers and may be shared with third parties....

Why it matters: This is among the most sensitive personal data a company can collect — it can reveal medical conditions, reproductive health, and daily routines, making robust data protection essential....

Fitbit may share your health and fitness data with third-party apps, health platforms, and service providers that you authorize or that Fitbit works with to operate its services. Once shared, Fitbit's policy may no longer govern how that data is used....

Why it matters: Once your health data leaves Fitbit's environment and goes to a third party, Fitbit's privacy protections may no longer apply, and the third party's own policies govern how your data is handled....

Fitbit's services are not directed at children under 13, and Fitbit states it does not knowingly collect personal data from children under 13 without parental consent. However, the policy's mechanisms for enforcing this restriction are not detailed....

Why it matters: Without robust age verification, children's sensitive health data could be collected and processed without appropriate parental consent, creating legal risk and real harm to minors....

Fitbit collects GPS and location data from your device and smartphone to track exercise routes and provide location-based features. This data can reveal your home, workplace, and daily movement patterns....

Why it matters: Continuous location tracking creates a detailed profile of your physical movements, which could be misused if exposed in a data breach or shared with third parties....

Waze collects your precise GPS location continuously while the app is in use, including in the background, to provide navigation and community-based traffic features....

Why it matters: Continuous location tracking creates a detailed record of your movements, which can reveal sensitive information about your daily routine, home, workplace, and habits....

Waze shares your personal data, including location and usage information, with its parent company Google and affiliated entities within the Google group....

Why it matters: Sharing your data with Google means it can be combined with other Google data about you, significantly expanding the profile Google holds and the ways your data can be used....

Waze uses your location data, driving behavior, and usage information to show you personalized advertisements within the app....

Why it matters: Your driving patterns and location history are being used to commercially profile you, which many users may not expect from a navigation app....

You cannot use the Google Maps APIs to build any product that competes with or closely resembles Google Maps or Google Earth....

Why it matters: This clause prevents developers from using Google's own infrastructure and data to build a rival mapping service, effectively locking them into Google's ecosystem....

Google can change, pause, or shut down any part of the Maps Platform — including specific APIs — at any time without your consent....

Why it matters: Businesses that have deeply integrated Google Maps APIs into their products face the risk of sudden service changes or terminations that could break their applications without meaningful advance notice....

You cannot use Google Maps to track the real-time location of vehicles, assets, or people without getting proper consent from everyone being tracked....

Why it matters: This clause places direct responsibility on the developer-customer to obtain consent for real-time tracking use cases, which has significant privacy and regulatory implications....

Google will not pay you for lost profits, lost data, business interruption, or similar losses even if their Maps Platform fails or causes you harm....

Why it matters: This clause means that if a Maps API outage or data error causes significant business losses for a developer, Google's financial liability is essentially zero for consequential damages — the developer bears the full commercial risk....

Google can immediately cut off your access to Google Maps APIs if it believes you've violated the terms or could harm Google or its users....

Why it matters: The subjective standard of 'reasonably believes' gives Google broad discretion to suspend access immediately without prior warning, which can devastate businesses that depend on Maps APIs....

Strava uses your health data — including heart rate, HRV, and other fitness metrics — to train and improve its AI and machine learning models....

Why it matters: Your sensitive health information is being used not just to provide you a service, but to build Strava's AI products, which raises significant privacy concerns about the secondary use of intimate personal data....

Strava uses your GPS activity data to generate the Global Heatmap, a publicly accessible map showing where people exercise, which is visible to anyone on the internet....

Why it matters: Even if your individual activities are set to private, your GPS data may still contribute to Strava's public heatmap, potentially revealing sensitive locations such as your home address, workplace, or private military installations....