Privacy Policy

At Yasso, your family's privacy is our top priority. This Privacy Policy explains how we collect, use, and protect information when you use the Yasso mobile application ("App") and website ("Site"). We are committed to transparency and to safeguarding the personal information of both parents and children.

1. Who We Are

Yasso is an AI-powered children's storybook creation app operated by an independent developer. If you have any questions about this Privacy Policy, you can contact us at support@yasso.ai.

2. Information We Collect

2.1 Information Provided by Parents

When you create a Yasso account, we may collect:

• Account information: Your name and email address provided during registration
• Authentication data: Data received from Apple Sign-In or Google Sign-In (such as a unique user ID and email)
• Story prompts: The text descriptions you enter when creating stories

2.2 Information Collected Automatically

• Usage analytics: We use Firebase Analytics to understand how the App is used (e.g., which features are popular, session duration). This data is aggregated and anonymized
• Device information: General device type, operating system version, and app version for troubleshooting and compatibility
• Subscription data: Your subscription status is managed by Apple App Store or Google Play. We receive confirmation of your subscription tier but never access your payment details

2.3 Information We Do NOT Collect

• We do not collect personal data directly from children
• We do not collect precise location data
• We do not collect contacts, photos, or other sensitive device data
• We do not use advertising trackers or serve ads

3. Children's Privacy (COPPA Compliance)

We comply with the Children's Online Privacy Protection Act (COPPA) and take the following measures:

• No personal information is collected from children under 13
• All account creation and management is handled by the parent/guardian
• Story prompts entered by children under parental supervision are processed solely to generate story content and are not used for profiling or marketing
• AI-generated content is filtered for age-appropriateness and child safety
• We do not enable children to publicly share personal information

If you believe we have inadvertently collected personal information from a child, please contact us immediately at support@yasso.ai and we will promptly delete it.

4. How We Use Your Information

We use the information we collect to:

• Create and manage your Yasso account
• Generate stories, illustrations, and narration based on your prompts
• Process and manage your subscription
• Improve the App's features and performance through aggregated analytics
• Provide customer support
• Ensure the security and integrity of our services

We do not use your data for advertising purposes. We do not sell your personal information to third parties.

5. AI Story Generation & Data Handling

When you create a story, the text prompt you provide is sent to our AI service to generate story content, illustrations, and narration. Important details:

• Only the story prompt text is sent to the AI — no personal user data accompanies it
• Prompts are not stored by the AI service beyond the generation session
• Generated stories are stored in your account library for your access
• We may use anonymized, aggregated data about prompt themes to improve our service quality

6. Third-Party Services

We use the following trusted third-party services:

• Firebase (Google): For authentication, database storage, analytics, and cloud functions. Firebase Privacy Policy
• RevenueCat: For managing in-app subscriptions across platforms. RevenueCat Privacy Policy
• Apple App Store & Google Play: For payment processing and subscription management. Yasso never directly handles payment information
• AI Services: For generating story text, illustrations, and voice narration (no personal data is sent)

7. Data Storage & Security

Your data is stored securely using Google Cloud / Firebase infrastructure. We implement industry-standard security measures including:

• Encrypted data transmission (TLS/SSL)
• Secure authentication via Apple and Google Sign-In
• Access controls limiting who can access stored data
• Regular security reviews of our infrastructure

While no system is 100% secure, we take every reasonable measure to protect your information.

8. Data Retention

We retain your data for as long as your account is active. Specifically:

• Account data: Retained until you request account deletion
• Stories and content: Retained in your library until you delete them or your account
• Analytics data: Aggregated analytics are retained for up to 14 months (per Firebase Analytics defaults)
• Subscription data: Retained as long as needed for billing purposes

When you delete your account, we will delete your personal data within 30 days. Some anonymized, aggregated data may be retained for service improvement purposes.

9. Your Rights

Regardless of where you live, you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate information
• Delete your account and all associated personal data
• Export your stories and data in a portable format

To exercise any of these rights, contact us at support@yasso.ai. We will respond within 30 days.

10. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, withdraw at any time

Our legal basis for processing your data is: (a) contractual necessity (to provide the service), (b) legitimate interests (to improve the service), and (c) consent (where applicable).

11. CCPA Rights (California Users)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know: What personal information we collect and how we use it
• Right to delete: Request deletion of your personal information
• Right to opt-out: We do not sell personal information, so this right does not apply
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights

To exercise your CCPA rights, contact us at support@yasso.ai.

12. Cookies

Our website uses minimal cookies:

• Essential cookies: Cookie consent preference storage
• Analytics cookies: Firebase Analytics to understand website traffic (aggregated, anonymized)

The App itself does not use cookies. You can manage your cookie preferences through your browser settings or our cookie consent banner on the website.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes:

• We will update the "Last updated" date at the top of this page
• For material changes, we will notify you via email or an in-app notification
• Continued use of Yasso after changes constitutes acceptance of the updated policy

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

• Email: support@yasso.ai

We aim to respond to all inquiries within 30 days.