YMI Privacy Policy
Effective 2026-10-22
1. What we collect
Account information: your username (made from the part of your email address before the @, shown in your account page); your email address if you sign in by email code; for Google or Apple sign-in, the unique account identifier the provider gives us. With Google, we receive your email address only when Google confirms it. We never receive your Google or Apple password, and we do not read other data in your account.
Content: your chats with characters; pictures you send in chats; the memories and relationship stages characters form from them; the characters you create, the avatars and pictures you upload, your Wiki contributions and votes.
Public credit: your nickname is shown beside the characters you make public and the Wiki content you add, and follows when you change it; when you delete your account the credit is deleted too, and the Wiki content you added stays without a name.
Purchases: Ymi offers purchases of rice-grain virtual currency and subscriptions. Payments are processed by the payment service provider identified at checkout through its checkout and customer portal. We receive and store information needed to associate a transaction with your Ymi account, verify purchases and refunds, credit rice grains, and provide or manage subscription access. This includes transaction and subscription identifiers, product and purchase status, and related account and entitlement records. Payment card details are handled by the payment service provider identified at checkout; Ymi does not receive or store your full card number or card security code.
Device information: your Expo push token and device platform, used to send notifications to devices where you enabled them and to troubleshoot compatibility issues.
Operational data: usage statistics for each AI model call (time, purpose, token count, no chat content).
Website: the Ymi website (ymi.app) uses Google Analytics to measure visits (pages, device type, rough location). It stores cookies in your browser. The app itself includes no third-party analytics or advertising SDK.
2. How we use it
To provide chat, memories, relationships and proactive messages; to send sign-in codes and push notifications; to prevent abuse (for example by limiting sign-in attempts); and to measure usage and improve the service. We do not sell your personal information or use your chats for advertising. Information from Google and Apple is used only for sign-in (see section 8).
3. Sharing with third parties
To provide the service, some information is handled by these providers: AI model providers, including OpenRouter (they process chat content to generate replies and memories); Google and Apple (sign-in verification); Expo and the Apple and Google push services (a push notification includes the character's name and the start of the message); The payment service provider identified at checkout (processing payments for rice-grain purchases and subscriptions, and providing checkout and subscription management; it handles your payment details, while Ymi receives transaction and subscription records needed to fulfill purchases); the email provider Resend (sending sign-in codes); the network provider Cloudflare (DNS, content delivery and protection; requests pass through it, including your IP address); and, on the website only, Google Analytics. Beyond this, we share your information only when the law requires it.
4. Storage and security
Data is stored on our servers, which are backed up, and sent over HTTPS. Sign-in credentials and codes are stored only as hashes; a code expires after 10 minutes, and a sign-in session expires after 30 days without use. We do not use your data to train our own models.
5. Your rights
You can view, edit and delete what a character remembers at any time. Deleting a character also deletes your chats, memories and relationship with it. You can delete your account in Me: this deletes your account, sign-in methods, characters, chats, memories and relationships, and, cancels subscriptions through the applicable subscription-management process. Original chat text is removed from our servers for good in later regular clean-ups; backup copies of the database and chat records are overwritten within about two weeks, and backup copies of pictures are not deleted automatically for now. Model usage records (no chat content) are kept for operations, but once your account is deleted the account number in them no longer refers to any account.
6. Children
Ymi is not for children under 13, and we do not knowingly collect their personal information. Users under 18 must use Ymi with the consent and guidance of a parent or guardian (see the Terms of Service). If we learn that we have collected information from a child under 13, we will delete it promptly.
7. Updates to this policy
When this policy changes, we will publish the new version in the app and on the website. Questions? Email support@ymi.app.
8. Google user data
From Google we receive only the unique identifier for your Google account and, when Google verifies it, your email address. The app sends an ID token to the Ymi API for sign-in. After verifying it, the API stores only the account identifier and verified email, if provided. We do not store your Google password, profile photo, or other Google account data. We use this information only to verify your identity, create and maintain your Ymi account, and make your username.
Ymi’s use of Google API data complies with the Google API Services User Data Policy, including its Limited Use requirements. We do not use it for ads, sale, profiling, or training general-purpose AI models; we do not send it to AI model providers; and we disclose it to no third party except as needed for sign-in verification or as required by law. Google APIs are used only for account sign-in, never to generate AI content or images. Ymi prohibits creating, uploading, or distributing AI-generated non-consensual intimate imagery (AI NCII).
YMI Terms of Service · English · 简体中文 · 繁體中文