The Yuann team ("we") values your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information. It applies to users worldwide and works together with the Terms of Service and the AI Diary Analysis Notice.
【Public Version】The public privacy policy URL required for app store listing is as shown on the in-app About page and in store backend disclosures (HTTPS accessible). In-app content matches the public webpage.
The data controller for this App is the Yuann team, located in mainland China. This team is solely responsible for all data compliance matters.
Depending on how you use features, we may process:
• Account information: login identifiers, nickname, avatar, membership status, registration time
• Diary and mood data: text, images, tags, weather/location (added by you; we do not continuously track your device's real-time location in the background), timestamps — sensitive personal information that may reflect personal psychological state
• Check-in and achievements: consecutive days, claimed tiers
• Invite data: invite codes, binding relationships
• Device and logs: app version, device model, redacted operation logs (excluding diary text)
• Support communications: emails you send us; diagnostic logs are attached only when you separately consent during issue reporting
We process information to: provide diary and sync services, membership and check-in features, AI analysis after your separate consent, maintain security, improve the product (anonymized aggregation), and fulfill legal obligations. Legal bases include: necessary for contract performance, your consent (especially for sensitive personal information and AI analysis), legitimate interests (security and anti-fraud), and similar grounds.
【Not Uploaded by Default】Your diary text is stored locally on your device by default.
【Single-Entry Authorization】Only the 【single diary entry】 you manually select and actively trigger for AI analysis is temporarily transmitted through an encrypted channel. We do not batch-read or upload all local diaries, nor automatically fetch historical diaries without your action.
【AI Transmission Rules】Yuann servers use stateless forwarding for AI requests: diary text is used only during that request and is not persistently stored on the server as original diary text for AI purposes; after processing, it is forwarded to Volcengine Doubao to generate results.
Temporary in-memory diary data from a single AI inference is destroyed immediately after the API request ends. There is no hour-level cache retention.
【Prohibited Uses】Your original diary text must not be used for: large-model training, advertising profiling, external sale, or sharing identifiable original text with unrelated third parties.
Diaries may be stored on your device. You may set a privacy password to encrypt local diaries. Local diagnostic logs (if any) are redacted, kept for up to about 3 days for troubleshooting, and are not sent with emails unless you explicitly agree to attach them in the Report an Issue flow.
When paid subscription members enable cloud sync, diary text and AI analysis results are stored in the cloud after encryption with your privacy password (AES-256 encryption standard) for cross-device recovery and backup. Ciphertext is protected by keys derived from your privacy password; we cannot read plaintext without your privacy password.
To delete all cloud data linked to your account, use Profile (Me) → Account Security → Delete Account. You may also delete individual diary entries as described in §8, or email us as described in §11.
To provide features, we integrate the following types of third parties (only minimum necessary data is passed):
① Large-Model Service: Volcengine Doubao (火山引擎豆包) — receives diary text only during the request when you authorize AI analysis, to generate results; we enable a "do not store" option when sending requests to Doubao and do not persistently retain original diary text on Yuann or Doubao for AI purposes; diary text is not shared with analytics/advertising SDKs. Volcengine Doubao loads diary text only temporarily in memory for a single inference session and destroys all original text cache when the request ends, with no disk persistence. When activating the Doubao inference API, we signed the Volcengine Ark Large Model Service Platform Special Terms online and strictly follow the provider's published constraints, including that original text is not used for model training, temporary cache is destroyed after sessions end, and data is transmitted encrypted. We will not relax any data security rules on our own (official link: https://www.volcengine.com/docs/82379/1104498?lang=zh).
② App Store Payments: Apple App Store, Google Play — process subscription orders and receipt validation; we do not store full card numbers.
③ Product Analytics: PostHog — receives redacted feature usage events (diary text, passwords, email, and similar fields filtered out) to improve product experience.
④ Sign-In Services: such as Google Sign-In — handle account identifiers under third-party policies. Google Sign-In only obtains your public account nickname, avatar, and linked email for registration and login verification; it does not access unrelated data such as your Google contacts or photo library.
We do not sell your diary content to advertisers.
You have rights to access, copy, correct, delete, and withdraw consent. Exercise them in the relevant in-app screens or by contacting yuannteam@gmail.com.
Actions available in the current product include:
• Delete a single diary entry (from the entry’s settings/more menu)
• Turn off AI analysis authorization (Settings → Privacy & Authorization)
• Delete the account and permanently remove identifiable cloud data (Profile → Account Security → Delete Account)
We will complete review and respond within 15 calendar days after receiving your rights request. For complex needs such as cross-border data matters, we may extend up to 30 days and notify you in advance by email with reasons. EU GDPR users have a statutory one-month response period, and we follow that standard as well.
【How to delete some or all data without deleting your account (follow these steps)】
This notice applies to the app “Yuann” as shown in the Google Play / App Store listing (developer: Yuann team). You can remove data without deleting the whole account:
1. Delete a single diary entry (including that entry’s images, etc.): Open Yuann and sign in → open the diary list or entry → open that entry’s settings/more → choose delete and confirm. That entry is removed locally; if cloud sync applied, the matching cloud item is cleared per sync rules and we cannot restore that entry for you.
2. Withdraw AI authorization: Turn off AI analysis under Settings → Privacy & Authorization so this device stops new AI uploads; you may delete related local analysis content yourself.
3. Requests you cannot complete in the app: Email yuannteam@gmail.com with subject “Delete Yuann partial data”, your account identifier, and the scope you want removed. After verification we process the request (usually reply within 15 calendar days; up to 30 for complex cases).
【What this removes / what may remain】
• Removed: the diary entries you delete; after withdrawing AI, no new AI uploads from this device.
• Usually kept: the account itself (email/Google identifiers, nickname, etc.), membership/order records, check-in/invite relationships (unless you later delete the account), other diaries you did not delete, fully anonymized analytics, and anonymized orders retained as required by law.
• Extra retention: no extra business retention period for diary entries you actively deleted, except legally required or anonymized data. To delete the entire account and all identifiable cloud data, follow Privacy Policy §11 (account deletion).
Note: The current app version does not provide an in-app “export all diaries” button or a separate “clear cloud only, keep account” control. If you need help with those requests, contact us by email as above.
If you disable AI analysis authorization in Settings or decline the authorization dialog: this device clears local authorization records and will no longer initiate new AI analysis requests. Historical analysis results saved locally on your device may be deleted by you.
If a guardian discovers that a minor used the App without consent and created an account, they may contact yuannteam@gmail.com to request deletion of the related account and diary data. We will verify and process valid requests as soon as possible.
When submitting a request, guardians must also upload proof of guardianship and a valid ID document of the guardian. We use these only for identity verification and delete them immediately after verification is complete.
This Policy applies to the app “Yuann” as shown in the Google Play / App Store listing (developer name: Yuann team).
【How to request account deletion (follow these steps)】
Option A (recommended — in-app, immediate):
1. Open the Yuann app and sign in;
2. Go to Profile (Me);
3. Open Account Security;
4. Tap Delete Account and confirm as prompted.
Option B (if you cannot sign in): Email yuannteam@gmail.com with subject “Delete Yuann account” and include the email or Google account identifier you use to sign in. After we verify your identity, we will delete or anonymize related data to the same standard as in-app deletion (usually within 15 calendar days; up to 30 days for complex cases), and reply to you.
Before deletion, if you want to keep copies of diaries, save them yourself (for example by copy/screenshot or other means you choose). The current app version does not offer one-tap export of all diaries. You may also delete individual entries you no longer need as described in §8.
【Deleted immediately after deletion completes (production; not recoverable)】
• Account information: login identifiers, nickname, avatar, membership status, and similar profile data;
• Cloud diaries and mood data: encrypted diary text, images/metadata, tags, weather/location fields, timestamps, and similar;
• Cloud emotion reports and AI analysis results;
• Check-in/achievements, invite binding, and other account-linked business data;
• Related identifiable backup copies (cleared promptly; not retained externally in identifiable form).
【On-device data】In-app deletion also clears local sign-in state and related local data. If you only uninstall without deleting the account, local diaries may remain until you complete deletion or clear app data yourself.
【Data that may be retained or handled separately】
• Payment/order records required by law: may be kept in anonymized form as required (not used externally in identifiable form);
• Fully anonymized aggregate statistics that cannot identify you;
• Anonymized security/audit logs retained as required by regulators;
• Support emails you sent us: may be kept briefly for support handling, then deleted or archived per internal policy.
Except for the legally required or anonymized cases above, identifiable diary text, account identifiers, and identifiable AI-related text are cleared from production immediately when deletion completes, with no extra business retention period.
If you are located in mainland China, we process personal information under the Personal Information Protection Law, Cybersecurity Law, Data Security Law, and Interim Measures for the Administration of Generative Artificial Intelligence Services. Using diary text for AI analysis is sensitive personal information and requires your separate, explicit, voluntary consent.
All AI inference for this App uses Volcengine Doubao nodes located in mainland China. Your diary data is not transmitted to servers outside China, so no separate cross-border consent process is required.
EU/UK (GDPR): you have rights such as restriction of processing, data portability, and complaint to supervisory authorities. California, USA (CCPA/CPRA): we do not sell personal information. Users in Brazil (LGPD), Japan (APPI), Korea (PIPA), and other regions enjoy equivalent protection principles where applicable.
Indonesia and Vietnam users: sensitive diary data is preferentially stored locally or on nearby nodes; cross-border AI transfer occurs only after you separately confirm again in the AI authorization dialog.
Your data may be processed in countries or regions where we or our service providers operate. When users outside China initiate AI analysis, diary text is transmitted over the public internet through encrypted direct connection to Volcengine Doubao inference nodes in mainland China for computation, with TLS encryption, strict access controls, and provider confidentiality agreements to protect your data.
If a security incident involving leakage, tampering, or loss of your diaries or personal information occurs, we will promptly take remedial measures such as blocking the leak and fixing vulnerabilities, notify affected users within 72 hours via in-app dialog and email, and report to regulators as required by local law.
We may update this Policy. Material changes will be communicated through in-app prompts or announcements. Where renewed consent is required, we will obtain your explicit consent.
This Policy is governed by the laws of the People's Republic of China. If a dispute arises, the parties will first try to resolve it by email. If negotiation fails, either party may bring suit in the people's court where the operating entity is located. Users outside China may choose to apply mandatory local law where applicable.
Privacy questions and rights requests: yuannteam@gmail.com
This Policy is available in Simplified Chinese, Traditional Chinese, English, Japanese, Korean, Spanish, Brazilian Portuguese, French, German, Indonesian, Vietnamese, and other languages. Translations are for reference only; if translations conflict, the Simplified Chinese version prevails.