Privacy Policy

At Yasso, your family's privacy is our top priority. This Privacy Policy explains how we collect, use, and protect information when you use the Yasso mobile application ("App") and website ("Site"). We are committed to transparency and to safeguarding the personal information of both parents and children.

1. Who We Are

Yasso is an AI-powered children's storybook creation app operated by an independent developer. If you have any questions about this Privacy Policy, you can contact us at support@yasso.ai.

2. Information We Collect

2.1 Information Provided by Parents

When you create a Yasso account, we may collect:

• Account information: Your name and email address provided during registration
• Authentication data: Data received from Apple Sign-In or Google Sign-In (such as a unique user ID and email)
• Child profile data: The child's name, age, and an optional profile photo that you provide to personalize the stories. This information is entered by you (the parent) on behalf of your child
• Story prompts: The text descriptions you enter when creating stories

2.2 Camera and Photo Data

Yasso requests camera access for one specific purpose:

• Child profile photo: You may optionally take a photo or select one from your gallery to set as your child's profile picture. This photo is used only to personalize the in-app experience (showing your child's avatar in the story library).

How the photo is handled:

• Stored securely in your account on Firebase Cloud Storage
• Accessible only to your authenticated parent account
• Never shared with third parties, never used to train AI models, never used for advertising
• You can change or remove the photo at any time from the child profile settings
• Deleted within 30 days when you delete the child profile or your account

2.3 Voice Recording for Family Voice Cloning

Yasso requests microphone access for one specific purpose:

• Voice cloning: You may optionally record a short voice sample (typically 30 seconds to a few minutes) so that Yasso can narrate stories in your own voice. This is the Family Voice Cloning feature.

How voice samples are handled:

• The voice sample is sent to a third-party voice cloning provider (currently ElevenLabs or Google Cloud Voice) to generate your personalized voice model
• The original voice sample is not stored on our Firebase servers — only the voice model identifier returned by the provider is stored
• Voice samples are processed solely to create your voice clone and are not used for any other purpose
• You can delete your voice clone at any time from the voice settings; this also requests deletion from the third-party provider
• Voice cloning is opt-in — the App functions fully without it

2.4 Information Collected Automatically

• Usage analytics: We use Firebase Analytics to understand how the App is used (e.g., which features are popular, session duration). This data is aggregated and anonymized
• Device information: General device type, operating system version, and app version for troubleshooting and compatibility
• Subscription data: Your subscription status is managed by Apple App Store or Google Play. We receive confirmation of your subscription tier but never access your payment details

2.5 Information We Do NOT Collect

• We do not collect personal data directly from children — all data is provided by parents
• We do not collect precise location data
• We do not collect contacts, browsing history, or other sensitive device data
• We do not access photos in your gallery beyond ones you explicitly select for the child profile
• We do not record audio in the background or outside of the voice cloning feature
• We do not use advertising trackers or serve ads

3. Children's Privacy (COPPA Compliance)

3.1 Verifiable Parental Consent

To comply with the Children's Online Privacy Protection Act (COPPA) and the EU General Data Protection Regulation for Kids (GDPR-K), Yasso requires verifiable parental consent before any child profile data is collected or any feature involving the child is used.

How we obtain consent:

• Age gate at signup: When you create a Yasso account, you must confirm that you are 18 years of age or older and that you are the parent or legal guardian of any child whose profile you create
• Parent-only account creation: Children cannot create accounts. All accounts are created by an adult through Apple Sign-In, Google Sign-In, or email registration
• Explicit consent for sensitive features: Before enabling features that involve the child (creating a child profile, taking a profile photo, recording a voice sample for cloning), the App will display a clear notice and require the parent's explicit "I consent" action
• Withdrawing consent: Parents may withdraw consent at any time by deleting the child profile, voice clone, or account from the in-app Settings, or by emailing support@yasso.ai

If at any point we discover that a user who created an account is under 18, we will suspend the account and delete all associated data within 30 days.

3.2 COPPA Practices

We take the following additional measures to comply with COPPA:

• No personal information is collected from children under 13
• All account creation and management is handled by the parent/guardian
• Story prompts entered by children under parental supervision are processed solely to generate story content and are not used for profiling or marketing
• AI-generated content is filtered for age-appropriateness and child safety
• We do not enable children to publicly share personal information

If you believe we have inadvertently collected personal information from a child, please contact us immediately at support@yasso.ai and we will promptly delete it.

4. How We Use Your Information

We use the information we collect to:

• Create and manage your Yasso account
• Generate stories, illustrations, and narration based on your prompts
• Process and manage your subscription
• Improve the App's features and performance through aggregated analytics
• Provide customer support
• Ensure the security and integrity of our services

We do not use your data for advertising purposes. We do not sell your personal information to third parties.

5. AI Story Generation & Data Handling

When you create a story, the text prompt you provide is sent to our AI service to generate story content, illustrations, and narration. Important details:

• Only the story prompt text is sent to the AI — no personal user data accompanies it
• Prompts are not stored by the AI service beyond the generation session
• Generated stories are stored in your account library for your access
• We may use anonymized, aggregated data about prompt themes to improve our service quality

6. Third-Party Services

We use the following trusted third-party services. Only the data necessary for each service to function is shared, and no personally identifying parent or child information (name, email, photo) is sent to AI providers.

6.1 Infrastructure & Account Services

• Firebase (Google): For authentication, database storage, file storage (including child profile photos), analytics, and cloud functions. Firebase Privacy Policy
• RevenueCat: For managing in-app subscriptions across platforms. RevenueCat Privacy Policy
• Apple App Store & Google Play: For payment processing and subscription management. Yasso never directly handles payment information

6.2 AI Providers (Story Text, Illustrations, Narration, Voice Cloning)

To generate stories and narrations, we send your story prompt (and, for voice cloning, your voice sample) to one or more of the following providers. No account information, child name, child photo, or any personally identifying data is sent to these providers:

• Google Gemini: Used to generate story text. Google Privacy Policy
• OpenAI (ChatGPT): Used to generate story text. OpenAI Privacy Policy
• LaoZhang AI: Used as an AI gateway provider for text generation. LaoZhang Privacy Information
• ElevenLabs: Used for voice cloning and AI voice narration. Your voice sample is processed by ElevenLabs to create your voice model. ElevenLabs Privacy Policy
• Google Cloud Voice: Used as an alternative voice cloning and text-to-speech provider. Google Cloud Privacy Notice

These providers process your data solely to generate the requested content and are contractually bound not to use it for training their models or for advertising purposes.

7. Data Storage & Security

Your data is stored securely using Google Cloud / Firebase infrastructure. We implement industry-standard security measures including:

• Encrypted data transmission (TLS/SSL)
• Secure authentication via Apple and Google Sign-In
• Access controls limiting who can access stored data
• Regular security reviews of our infrastructure

While no system is 100% secure, we take every reasonable measure to protect your information.

8. Data Retention

We retain your data for as long as your account is active. Specifically:

• Account data: Retained until you request account deletion
• Child profile data (name, age, photo): Retained until you delete the profile or your account
• Voice clones: Retained on the third-party voice provider (ElevenLabs / Google Cloud Voice) until you delete them from the App. Original voice samples are not stored on our servers
• Stories and content: Retained in your library until you delete them or your account
• Analytics data: Aggregated analytics are retained for up to 14 months (per Firebase Analytics defaults)
• Subscription data: Retained as long as needed for billing purposes

When you delete your account, we will delete your personal data (including child profile photos and voice clones) within 30 days. Some anonymized, aggregated data may be retained for service improvement purposes.

How to request account or data deletion: See Section 9: How to Delete Your Yasso Account and Data below for full instructions.

9. How to Delete Your Yasso Account and Data

This section explains how users of Yasso: AI Stories for Kids (developed by Eslam Osama) can request deletion of their account and the personal data associated with it.

9.1 In-App Deletion (Recommended)

The fastest way to delete your account is from inside the Yasso app:

• Step 1: Open the Yasso app and sign in.
• Step 2: Go to Settings → Account.
• Step 3: Tap "Delete Account".
• Step 4: Confirm the deletion. You will be signed out and your account plus associated data will be queued for deletion.

9.2 Email Request (Fallback)

If you cannot access the app (lost device, account locked, uninstalled), email support@yasso.ai from the email address associated with your Yasso account with the subject line "Delete my account". Include your account email or user ID. We will process the request within 30 days and send confirmation when complete.

9.3 What Gets Deleted

The following data is deleted immediately upon request:

• Your profile (name, email, avatar)
• Children profiles you added
• Your generated stories, images, and audio
• App preferences and settings
• Voice clones (if any) — we also request deletion from our voice provider (ElevenLabs / Google Cloud Voice)

9.4 What Is Retained and Why

For legal or operational reasons, the following data may be retained after account deletion:

• Purchase and billing records: up to 7 years (tax and accounting law)
• Anonymized usage analytics: indefinitely (cannot be linked back to you)
• Support correspondence: up to 2 years (for dispute resolution)
• Data required by law enforcement orders, if any

9.5 Retention Period Before Full Erasure

Full erasure of deletable data completes within 30 days of the request. Some backups may persist up to 90 additional days before being overwritten on our standard backup rotation.

9.6 Cancel Your Subscription First

Important: If you have an active Yasso subscription, cancel it through Google Play (Android) or the App Store (iOS) before deleting your account. Deleting the Yasso account does not cancel store-managed subscriptions, and you may continue to be billed.

10. Your Rights

Regardless of where you live, you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate information
• Delete your account and all associated personal data
• Export your stories and data in a portable format

To exercise any of these rights, contact us at support@yasso.ai. We will respond within 30 days.

11. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, withdraw at any time

Our legal basis for processing your data is: (a) contractual necessity (to provide the service), (b) legitimate interests (to improve the service), and (c) consent (where applicable).

12. CCPA Rights (California Users)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know: What personal information we collect and how we use it
• Right to delete: Request deletion of your personal information
• Right to opt-out: We do not sell personal information, so this right does not apply
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights

To exercise your CCPA rights, contact us at support@yasso.ai.

13. Cookies

Our website uses minimal cookies:

• Essential cookies: Cookie consent preference storage
• Analytics cookies: Firebase Analytics to understand website traffic (aggregated, anonymized)

The App itself does not use cookies. You can manage your cookie preferences through your browser settings or our cookie consent banner on the website.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes:

• We will update the "Last updated" date at the top of this page
• For material changes, we will notify you via email or an in-app notification
• Continued use of Yasso after changes constitutes acceptance of the updated policy

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

• Email: support@yasso.ai

We aim to respond to all inquiries within 30 days.