The Yuann team ("we") values your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information. It applies to users worldwide and works together with the Terms of Service and the AI Diary Analysis Notice.
【Public Version】The public privacy policy URL required for app store listing is as shown on the in-app About page and in store backend disclosures (HTTPS accessible). In-app content matches the public webpage.
The data controller for this App is the Yuann team, located in mainland China. This team is solely responsible for all data compliance matters.
Depending on how you use features, we may process:
• Account information: login identifiers, nickname, avatar, membership status, registration time
• Diary and mood data: text, images, tags, weather/location (added by you; we do not continuously track your device's real-time location in the background), timestamps — sensitive personal information that may reflect personal psychological state
• Check-in and achievements: consecutive days, claimed tiers
• Invite data: invite codes, binding relationships
• Device and logs: app version, device model, redacted operation logs (excluding diary text)
• Support communications: emails you send us; diagnostic logs are attached only when you separately consent during issue reporting
We process information to: provide diary and sync services, membership and check-in features, AI analysis after your separate consent, maintain security, improve the product (anonymized aggregation), and fulfill legal obligations. Legal bases include: necessary for contract performance, your consent (especially for sensitive personal information and AI analysis), legitimate interests (security and anti-fraud), and similar grounds.
【Not Uploaded by Default】Your diary text is stored locally on your device by default.
【Single-Entry Authorization】Only the 【single diary entry】 you manually select and actively trigger for AI analysis is temporarily transmitted through an encrypted channel. We do not batch-read or upload all local diaries, nor automatically fetch historical diaries without your action.
【AI Transmission Rules】Yuann servers use stateless forwarding for AI requests: diary text is used only during that request and is not persistently stored on the server as original diary text for AI purposes; after processing, it is forwarded to Volcengine Doubao to generate results.
Temporary in-memory diary data from a single AI inference is destroyed immediately after the API request ends. There is no hour-level cache retention.
【Prohibited Uses】Your original diary text must not be used for: large-model training, advertising profiling, external sale, or sharing identifiable original text with unrelated third parties.
Diaries may be stored on your device. You may set a privacy password to encrypt local diaries. Local diagnostic logs (if any) are redacted, kept for up to about 3 days for troubleshooting, and are not sent with emails unless you explicitly agree to attach them in the Report an Issue flow.
When paid subscription members enable cloud sync, diary text and AI analysis results are stored in the cloud after encryption with your privacy password (AES-256 encryption standard) for cross-device recovery and backup. Ciphertext is protected by keys derived from your privacy password; we cannot read plaintext without your privacy password.
You may export local diaries under Settings → Privacy & Authorization. To delete cloud data, use Account Security → Delete Account to clear it together.
To provide features, we integrate the following types of third parties (only minimum necessary data is passed):
① Large-Model Service: Volcengine Doubao (火山引擎豆包) — receives diary text only during the request when you authorize AI analysis, to generate results; we enable a "do not store" option when sending requests to Doubao and do not persistently retain original diary text on Yuann or Doubao for AI purposes; diary text is not shared with analytics/advertising SDKs. Volcengine Doubao loads diary text only temporarily in memory for a single inference session and destroys all original text cache when the request ends, with no disk persistence. When activating the Doubao inference API, we signed the Volcengine Ark Large Model Service Platform Special Terms online and strictly follow the provider's published constraints, including that original text is not used for model training, temporary cache is destroyed after sessions end, and data is transmitted encrypted. We will not relax any data security rules on our own (official link: https://www.volcengine.com/docs/82379/1104498?lang=zh).
② App Store Payments: Apple App Store, Google Play — process subscription orders and receipt validation; we do not store full card numbers.
③ Product Analytics: PostHog — receives redacted feature usage events (diary text, passwords, email, and similar fields filtered out) to improve product experience.
④ Sign-In Services: such as Google Sign-In — handle account identifiers under third-party policies. Google Sign-In only obtains your public account nickname, avatar, and linked email for registration and login verification; it does not access unrelated data such as your Google contacts or photo library.
We do not sell your diary content to advertisers.
You have rights to access, copy, correct, delete, and withdraw consent. Exercise them under Settings → Privacy & Authorization or by contacting yuannteam@gmail.com.
Related in-app features include:
• Export all diaries (free, with no count or extra fee limits)
• Delete account and permanently remove cloud data (Account Security page)
• After you disable AI analysis authorization, this device will no longer initiate new AI upload requests
We will complete review and respond within 15 calendar days after receiving your rights request. For complex needs such as cross-border data or bulk diary export, we may extend up to 30 days and notify you in advance by email with reasons for the extension. EU GDPR users have a statutory one-month response period, and we follow that standard as well.
If you disable AI analysis authorization in Settings or decline the authorization dialog: this device clears local authorization records and will no longer initiate new AI analysis requests. Historical analysis results saved locally on your device may be deleted by you.
If a guardian discovers that a minor used the App without consent and created an account, they may contact yuannteam@gmail.com to request deletion of the related account and diary data. We will verify and process valid requests as soon as possible.
When submitting a request, guardians must also upload proof of guardianship and a valid ID document of the guardian. We use these only for identity verification and delete them immediately after verification is complete.
After account deletion, we will immediately and permanently delete cloud diaries and account data that can identify you from production, as stated in the Terms of Service, and recovery is not available. Records that must be retained by law, such as orders, may be kept in anonymized form.
Except for financial payment orders and anonymized logs retained as required by regulators, identifiable diaries and AI text records are cleared immediately upon account deletion or authorization withdrawal.
If you are located in mainland China, we process personal information under the Personal Information Protection Law, Cybersecurity Law, Data Security Law, and Interim Measures for the Administration of Generative Artificial Intelligence Services. Using diary text for AI analysis is sensitive personal information and requires your separate, explicit, voluntary consent.
All AI inference for this App uses Volcengine Doubao nodes located in mainland China. Your diary data is not transmitted to servers outside China, so no separate cross-border consent process is required.
EU/UK (GDPR): you have rights such as restriction of processing, data portability, and complaint to supervisory authorities. California, USA (CCPA/CPRA): we do not sell personal information. Users in Brazil (LGPD), Japan (APPI), Korea (PIPA), and other regions enjoy equivalent protection principles where applicable.
Indonesia and Vietnam users: sensitive diary data is preferentially stored locally or on nearby nodes; cross-border AI transfer occurs only after you separately confirm again in the AI authorization dialog.
Your data may be processed in countries or regions where we or our service providers operate. When users outside China initiate AI analysis, diary text is transmitted over the public internet through encrypted direct connection to Volcengine Doubao inference nodes in mainland China for computation, with TLS encryption, strict access controls, and provider confidentiality agreements to protect your data.
If a security incident involving leakage, tampering, or loss of your diaries or personal information occurs, we will promptly take remedial measures such as blocking the leak and fixing vulnerabilities, notify affected users within 72 hours via in-app dialog and email, and report to regulators as required by local law.
We may update this Policy. Material changes will be communicated through in-app prompts or announcements. Where renewed consent is required, we will obtain your explicit consent.
This Policy is governed by the laws of the People's Republic of China. If a dispute arises, the parties will first try to resolve it by email. If negotiation fails, either party may bring suit in the people's court where the operating entity is located. Users outside China may choose to apply mandatory local law where applicable.
Privacy questions and rights requests: yuannteam@gmail.com
This Policy is available in Simplified Chinese, Traditional Chinese, English, Japanese, Korean, Spanish, Brazilian Portuguese, French, German, Indonesian, Vietnamese, and other languages. Translations are for reference only; if translations conflict, the Simplified Chinese version prevails.