Privacy Policy
1. Scope and who operates YnY
This policy applies to the YnY mobile app, website and support services. YnY is the service operator referred to as “we”, “us” or “our”. It explains how we process personal data when you use YnY.
2. Data we collect
We may process: Apple or Google sign-in identifiers and any email shared by the provider; birth date and adult-confirmation status; profile, twin, preferences, schedules, boundaries, memories and calibration data; photos, audio, video and documents you upload; messages, introductions, friendships, blocks, reports and moderation records; device coordinates you choose to provide for city-level matching, together with the derived city (your distance is not shown to other users); device, app, push-token, notification, security and diagnostic data; support requests; and Apple purchase, subscription, transaction and entitlement records received through RevenueCat. We do not receive your full payment-card details.
3. Where data comes from
Data comes from you, your device permissions and app activity, Apple or Google sign-in, Apple App Store purchase events, RevenueCat entitlement records, other users who interact with or report content, and security or support operations.
4. How we use data
We use data to authenticate accounts; confirm adult eligibility; create and operate your AI twin; provide introductions, friendships and chat; deliver and moderate media; provide city-level matching and notifications; fulfill purchases and entitlements; prevent abuse and fraud; investigate reports; respond to support; maintain, secure and improve the service; and comply with legal duties. We do not sell personal data or use it for third-party targeted advertising.
5. AI processing and disclosure
Text, images, audio, profile or twin data, memories and conversation context submitted to an AI feature may be processed by Cloudflare Workers AI and, when configured as a provider or fallback, DeepSeek for generation, transcription, embeddings, safety review or moderation. We send only the context needed for the requested function. Avoid submitting another person’s data unless you have the right and permission to do so. You can prevent new AI processing by not submitting new material or using the relevant AI feature.
6. Service providers and disclosures
Cloudflare provides hosting, Workers, D1, R2, security, vector and Cloudflare Workers AI services. DeepSeek may provide AI processing. Apple and Google provide sign-in; Apple processes App Store purchases; RevenueCat manages purchase validation and entitlements; Expo supports app delivery and notifications. We may also disclose data when required by law, to protect users or the service, or in a business reorganization. We require providers to use data only for their service role and to provide protection consistent with this policy and applicable law.
7. Permissions and privacy choices
Location, camera, photo library, microphone and notifications are permission-based. You may deny or revoke them in device settings, although the related feature may stop working. In YnY you may inspect or edit supported profile, twin and memory data, control notification and nearby settings, block users and report content. Contact us to request access, correction, deletion or other rights available where you live.
8. Retention
We keep account and service data while your account is active and only as long as needed for the purposes above. After deletion, operational copies are removed through an asynchronous deletion process. Limited transaction, safety, fraud-prevention, dispute, audit or legal records may be retained for the period reasonably necessary to meet those obligations. Backups and logs may remain until their normal replacement cycle, and de-identified data that can no longer reasonably identify you may be retained.
9. Account and data deletion
You can start permanent account deletion in YnY at Profile Center > Account Security > Delete Account. The process removes the account and associated twins, memories, media, social and chat data from active systems, subject to the limited retention above, and also attempts to revoke the sign-in provider authorization. Deleting the account does not cancel an Apple subscription; manage it separately in Apple subscription settings. You may also contact privacy support for help.
10. Security
We use administrative, technical and organizational safeguards designed to protect data, including access controls, authenticated requests, moderation and audit records. No internet or storage system is completely secure, so we cannot guarantee absolute security.
11. International processing
Our providers may process data in countries or regions other than where you live. Where required, we use contractual or other lawful safeguards for cross-border processing.
12. Adults only
YnY is intended only for people aged 18 or older. We do not knowingly provide accounts to children. Contact us if you believe a minor has provided personal data.
13. Changes to this policy
We may update this policy as the service or law changes. We will update the date above and provide additional notice when a material change requires it.
14. Contact and privacy requests
For privacy questions or rights requests, contact privacy@yny.me. For general support, use support@yny.me or the support form. Do not send passwords, one-time codes, identity documents or card details. For immediate danger, contact local emergency services.