Draft notice: This policy was prepared based on current GDPR, CCPA/CPRA, COPPA and App Store/Play Store disclosure requirements as general guidance. It has not yet been reviewed by a licensed attorney and should be reviewed by one, and adjusted to reflect your exact data practices, before being treated as final.
Legal

Privacy Policy

Last updated: September 28, 2026

YVI is operated by YKA Global ("YVI," "we," "us," or "our"), a company organized in the United States. This Privacy Policy explains what personal data we collect through our mobile applications and website (together, the "Service"), why we collect it, how we use and protect it, and the choices and rights you have.

1. Information We Collect

Account information: name, email address, and authentication data (including via Apple Sign-In or Google Sign-In, if you choose those methods).

Content you provide: journal entries, habit and goal data, focus session history, community posts and messages, uploaded files or media, and course content you create.

Health and fitness data: heart rate, HRV, sleep, recovery, steps and related metrics, only when you explicitly connect a wearable or health data source (e.g., Apple Health, Health Connect, Garmin, WHOOP, Oura). This data is treated as sensitive and is never sold.

Usage data: device type, operating system, app version, crash logs, and general interaction data used to diagnose issues and improve the Service.

Payment information: processed by our payment providers (e.g., Apple, Google, RevenueCat, Stripe); we do not store full payment card numbers ourselves.

2. How We Use Information

  • To provide, operate, and maintain the Service.
  • To personalize your experience, including AI coach responses grounded in your own data.
  • To communicate with you about your account, support requests, and material changes to the Service.
  • To detect, investigate, and prevent fraudulent or unauthorized activity.
  • To comply with legal obligations.

We do not sell your personal information. We do not use your health data for advertising purposes.

3. End-to-End Encrypted Messages

Direct messages between friends are end-to-end encrypted. We do not have the technical ability to read the content of these messages — our servers store and relay only encrypted data. Group community chat is not end-to-end encrypted and is stored to enable moderation and community features.

4. Sharing of Information

We share information only with:

  • Service providers who process data on our behalf (e.g., cloud hosting, analytics, payment processing, transactional email), under contractual confidentiality obligations.
  • Other users, to the extent you choose to share information (e.g., a public community profile, a shared challenge).
  • Law enforcement or regulators, only where required by valid legal process.

5. Your Rights

If you are in the European Economic Area or UK (GDPR): you have the right to access, correct, delete, restrict, or port your data, and to object to certain processing. Our legal bases for processing include contract performance, legitimate interests, consent, and legal obligation.

If you are a California resident (CCPA/CPRA): you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information (we do not sell personal information as defined by the CCPA). We honor Global Privacy Control signals.

To exercise any of these rights, contact us at privacy@getyvi.com.

6. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it. Parents who believe their child has provided us information may contact us atprivacy@getyvi.com.

7. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time from Settings or by contacting support.

8. Data Security

We use industry-standard technical and organizational measures, including encryption in transit and at rest, row-level access controls, and least-privilege service accounts, to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Our servers may be located outside your country of residence. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers of personal data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the app or by email before they take effect.

11. Contact Us

Questions about this policy or your data: privacy@getyvi.com