Youmi

Privacy Policy

Effective date: 15 July 2026 · Last updated: 15 July 2026

Youmi ("we", "the app") is an AI emotional companion for iOS. This policy explains what information Youmi processes and why. Youmi is not a medical, therapy, diagnostic, or emergency-response service.

Summary

• Sign in with Apple or Google is required to use Youmi. It creates an account so the service can recognize your signed-in device.
• Your conversations, topics, and reflections are stored locally on your device.
• To generate replies, the text of your messages (and voice transcripts) is sent to our backend, which relays it to a third-party AI provider to produce a response — not to advertise to you.
• We do not sell your data or use ads. Youmi does not include analytics or advertising SDKs.

Information We Process

Stored on your device only (not sent to us):

• Your topics, chat messages, and generated reflection summaries (in the app's local database).
• Preferences: chosen language, chat scene, voice auto-play, privacy-lock setting, nickname and avatar, your daily free-session marker, and IDs of AI replies you have reported.
• A local cache of synthesized voice audio (to avoid re-generating the same speech).

Stored by our account service (Cloudflare D1):

• Your Apple or Google account subject identifier, an optional provider-supplied name and email address, and account creation/update times.
• One-time sign-in nonce hashes and hashes of device session tokens, with expiry and last-used times. We do not store raw session tokens.
• If you explicitly report an AI reply, the reported reply, report ID, locale, account ID, and report time so we can review it. We do not automatically copy chats into this report store.

Sent to our backend to provide the AI features:

• The text of your chat messages and, for voice chat, your recorded audio (for transcription) and the resulting transcript.
• The conversation context needed to generate a relevant reply, deep recap, or summary.
• A signed device-session token, a random per-session identifier, and your locale (to authorize, route, and format responses).

We do not send your device identifiers, contacts, location, nickname, or avatar to the backend.

How Information Is Used

• To generate Youmi's conversational replies.
• To transcribe voice input and synthesize spoken replies (text-to-speech).
• To generate the post-session reflection summary and gentle suggestion.
• To store your preferences and conversation history locally on your device.
• To verify your Apple or Google sign-in and keep your signed-in device connected to your account.
• To review an AI reply only when you explicitly choose to report it.

We do not use your content for advertising. We keep the limited account and session information described above; we do not store your conversations in D1.

AI Processing & Third Parties

Message text and voice transcripts are sent to the Youmi backend (a Cloudflare Worker) which relays them to a third-party AI provider (Alibaba Cloud Model Studio / DashScope — Qwen models) for language, speech-to-text, and text-to-speech. Providers may be changed over time; this policy will be updated accordingly.

Our backend does not store your conversations or retain the content of your requests in its account database. Its account database holds only the account/session information described above. It may emit runtime logs containing operational metadata (request type, model name, locale, message/character counts, latency, success or failure) with no message content.

The AI provider processes requests under its own applicable data terms to provide the requested model, speech-to-text, or text-to-speech service. We do not use your content for advertising or marketing.

Local Data & Your Controls

Your conversations live on your device. In Me → Data controls you can, at any time: clear chat history, clear the current reflection, delete your local profile (nickname and avatar), or clear all local data on this device. Deleting the app removes its local data and voice cache, but does not itself delete the account record used for sign-in.

Microphone

Microphone access is optional and used only for voice chat. If you deny it, text chat still works fully.

Purchases

Youmi offers an optional auto-renewable subscription (Youmi Plus). Purchases are processed by Apple via StoreKit; Apple handles payment. Youmi does not receive your payment card details. Your subscription status is determined from your Apple transaction.

Children

Youmi is not directed at children and is intended for users 17 and older. We do not knowingly collect information from children.

Safety

Youmi does not provide emergency or crisis services. If a message suggests immediate danger, the app shows supportive resources (regional hotlines and an international directory). If you are in immediate danger or may harm yourself or someone else, contact your local emergency services or a crisis line right away.

Data Security

Requests to the backend are sent over encrypted connections (HTTPS). No AI provider API keys are stored in the app.

Your Rights

You control local content through the in-app Data controls. To permanently delete your account, go to Me → Account → Delete account. This removes the account record, provider identity, active sessions, and any reports you submitted from our account service, then clears chats, reflections, profile data, and voice cache on that device. This action cannot be undone.

Contact

Privacy & support questions: baicuya@gmail.com

Changes

We may update this policy as Youmi evolves. We will keep it aligned with the App Store privacy labels and the app's actual behavior, and update the dates above.