Privacy policy

1. Who we are

Ignis AI Limited (“we”, “us”) develops and operates Yomi and is responsible for the personal data described in this policy.

You can contact us about anything in this policy at [email protected]. Our website is https://yomi-ai.com.

2. What we collect

We collect what Yomi needs in order to work, to stay safe and to improve.

• Account information. If you create an account with email, we store your email address and a salted hash of your password, never the password itself. If you sign in with Google, we receive your Google account identifier, email address, name and profile picture; the name becomes your account name, which you can change in Me > Edit profile.
• Profile. The name characters call you, your gender if you choose one, and the “Who you are” descriptions you write for yourself in a story.
• Chats. The messages you send, the replies the AI writes for you, the replies you retry or rewrite and the version you keep, and the memories and summaries Yomi keeps so that a story stays consistent.
• Stories and images. The stories, characters, openings and tags you write; the images you upload, such as covers, portraits and face references; and the prompts, styles and results of AI image generation.
• Reports. When you report something, the reason you choose, any details you add, and a copy of the content you reported.
• Usage. How you use the app: the screens you open and the buttons you tap — for example opening a story, switching tabs, sending a message, searching, reporting, signing in or creating a story — together with the story or image involved, the app's version, your language and the time. These records never include what you type: a search is recorded only by its length. Also which stories we show you on Home and which ones you open, when you chat, how many credits you use, and the record of credits added to or taken from your balance.
• Device and connection. Your IP address, the app's version and user agent, your language, and the approximate location (country and city) that our network provider derives from your IP address.
• Anti-abuse signals. A one-way hash of your IP address, user agent and language, used to detect and investigate abuse, such as accounts created over and over; the IP address, user agent, country and city your guest session or account was created from; and the IP address of your most recent chat.
• Crash reports. If the app crashes, Firebase Crashlytics collects a crash report: the error, the app's state at the time, your device model and operating system version, and installation identifiers.

3. What we don't collect, and what stays on your device

• Yomi does not use an advertising ID, and it does not ask for access to your location, contacts, camera or microphone. It sees a photo only when you pick one to upload.
• Your session is identified by a signed cookie kept in the app's private storage. Your app language and your pinned chats are stored only on your device.

4. What other people can see

• Your chats are private: other users can't see them.
• When a story you created is published, anyone using Yomi can read and play it. It shows your account name as its author (for an account created with Google, this starts as the name on your Google account) and your handle, which is based on the part of your email address before the @. Changing your name later doesn't change the name on stories you have already created.

5. How we use data

We don't show ads, we don't use your data for advertising, and we don't send you marketing email. We use data:

• To run Yomi: write replies, keep your chats and stories across sessions and devices, and remember your settings.
• To sign you in and keep your account secure, including sending verification and password-reset codes.
• For safety: check messages, replies, stories and images against our Community guidelines, rate stories so that the app shows only those suitable for it, review stories before they are published, and review reports.
• To prevent abuse: enforce rate and credit limits, and detect automated, fraudulent or repeated sign-ups.
• To improve Yomi: produce aggregate statistics, rank and personalise the stories we recommend, fix crashes, and evaluate reply quality, for example by comparing the replies you retried or rewrote with the ones you kept.
• To meet legal obligations, and to establish, exercise or defend legal claims.

6. Legal bases

Where the GDPR, the UK GDPR, Brazil's LGPD or a similar law applies to you, we rely on: our contract with you (providing Yomi and your account); our legitimate interests (security, preventing abuse and improving Yomi); your consent, where we ask for it; and our legal obligations.

Where we rely on consent, you can withdraw it at any time. Withdrawing it does not affect processing that has already happened.

7. Service providers

We use the service providers below to run Yomi. They process data on our behalf to provide their services to us.

• DeepSeek and Alibaba Cloud Model Studio (Qwen), our language model providers. To write each reply, they receive the story's setting, the name characters call you, your “Who you are” description, the memories kept for the chat and the recent messages. They also help us check replies against our content rules, and rate and translate stories. We don't send your email address, IP address or account ID with these requests.
• Our image generation provider, currently apimart, and the upstream model provider it passes each request to. They receive the prompt and style you choose and, if you upload one, your face reference image, and they return the generated image.
• Twilio SendGrid, which sends our emails. It receives your email address and your verification or password-reset code.
• Google, for Sign in with Google if you use it, and for Firebase Crashlytics, which receives the crash reports described in section 2 and keeps them for 90 days.
• Cloudflare, which carries all traffic between the app and our servers, protects Yomi from attacks and tells us your approximate country and city.
• Our hosting and database providers, which store the data described in this policy.

8. Other disclosures and international transfers

We don't sell your personal data, and we don't share it with advertisers.

We may disclose data when the law requires it, to protect anyone's safety, or to investigate and prevent abuse, such as content that endangers minors. If our business is involved in a merger, acquisition or sale of assets, personal data may be transferred as part of it; we will tell you before your data becomes subject to a different privacy policy.

Our servers and providers are in several countries, so your data may be processed outside the country where you live, including in the United States and in mainland China, where DeepSeek is based. Where the law requires safeguards for these transfers, we put them in place.

9. How long we keep data

• Your profile, chats, stories, images and usage records are kept while your account or guest session exists. Section 10 explains what happens when you delete your account.
• Clearing a conversation starts a new conversation; the earlier one is archived on our servers, not deleted. Removing a chat from your list hides it; it is not deleted.
• Deleting a story takes it off Yomi; a copy stays on our servers.
• Verification and password-reset codes are stored only as one-way hashes and expire within minutes.
• The anti-abuse hash described in section 2 is kept indefinitely, including after an account is deleted, so that we can detect and investigate abuse, such as accounts created over and over.
• Firebase Crashlytics deletes crash reports after 90 days.

10. Deleting your account

You can delete your account in the app (open the Me tab, tap More settings, then Delete account), on the web, or by email. https://yomi-ai.com/app/account-deletion explains each way.

When you delete your account, you are signed out on every device and the stories you published are taken off Yomi at once. Within 30 days we permanently delete your account information, your chats and the memories kept for them, your “Who you are” descriptions, the stories and characters you created, the images you uploaded or generated, your reports, and the usage records linked to your account. We keep only: the anti-abuse hash described in section 2; and records of credits added to or taken from your balance, without any content, for fraud prevention and accounting.

Guest sessions can't be deleted in the app. Guest data stays on our servers after you uninstall the app or clear its data, even though you can no longer reach it.

11. Your rights and choices

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to have it erased, to receive a copy in a portable format, to object to or restrict some processing, and to withdraw consent.

To make a request, email [email protected] from the email address linked to your account, or tell us your handle. We may need to confirm that the request comes from you.

You can change your name in Me > Edit profile, and you can choose not to upload photos or create stories. You can also complain to the data protection authority where you live.

12. Children and teens

Yomi is intended for people aged 13 and over. It is not directed to children under 13, and they may not use it.

If you are under the age of majority where you live, use Yomi only with the permission of a parent or guardian, and read this policy with them.

We do not knowingly collect personal data from children under 13. If we learn that we have, we will close the account and delete that data. If you believe a child under 13 has given us personal data, contact [email protected].

13. Security

Data is encrypted in transit between the app and our servers or Firebase, and between our servers and the providers that write replies, generate images, send email and handle sign-in. Passwords are stored only as salted hashes, and verification codes only as one-way hashes.

No service can guarantee perfect security. If a breach affects your personal data, we will notify you and the relevant authorities where the law requires it.

14. Changes to this policy

When we change this policy, we update the date at the top. If a change materially affects your rights, we will tell you in the app before it takes effect.

15. Contact

Yomi: AI Story Chat is developed and operated by Ignis AI Limited. Questions, requests or complaints about this policy: [email protected].