Privacy Policy

Effective: August 26, 2026

Privacy by design. YaTut'Ye uses direct peer-to-peer connections when available, keeps message history on your device, and limits server processing to the services needed to deliver messages, calls, public features, optional AI, security, and account operation.

1. Who this policy covers

This policy describes the YaTut'Ye mobile application and services available at yatutye.com. It applies to account, messaging, calling, public social, contact discovery, optional AI, and support features.

2. Information used by the service

• Account information: your chosen username, unique contact ID, password hash, public encryption keys, and optional profile information such as display name or profile photo.
• Device and delivery information: device identifiers, push notification tokens, app version, platform, and short-lived routing, presence, security, diagnostic, and abuse-prevention records needed to connect devices and deliver communications.
• Communications: direct message and call content normally travels directly between devices when a peer connection is available. Encrypted offline messages or media may be held temporarily for delivery and are deleted according to delivery and expiry rules.
• Public content: public channel, group, post, comment, reaction, report, and moderation data is stored so public features can operate.
• Support requests: information you voluntarily submit through the support form.

3. Optional AI processing and consent

YaTut'Ye asks for your explicit consent before the first AI request. When you use AI, the prompt you type, recent AI conversation context selected from local chat history, and any photo you attach are sent through the YaTut'Ye server for transient processing. YaTut'Ye does not persist AI prompts or attached AI photos on its server, and AI conversation history remains on your device.

AI requests are routed through YaTut'Ye's own infrastructure. Depending on the requested feature and service availability, request data may also be shared with DigitalOcean GenAI for text or Cloudflare Workers AI for image generation or editing. These providers act only as service processors for the requested result. YaTut'Ye requires its processors to provide the same or equivalent privacy protection described in this policy and prohibits use of this data for advertising. Do not send information you do not want processed by the selected AI service.

AI personalization is off by default. If you enable it, a compact personalization profile is created and stored locally on your device and can be included with future AI requests. Approximate city or region may be requested from ipwho.is only for enabled personalization. You can disable personalization and clear its local data in Settings. You can also revoke AI processing consent in Settings; the app will ask again before another AI request.

4. Public-content safety processing

Public posts, comments, and media may be analyzed by YaTut'Ye's internal AI-assisted moderation systems to identify prohibited or abusive content. If internal text moderation is unavailable, public text may also be processed by DigitalOcean GenAI solely for safety classification; the author's internal YaTut'Ye identifier is not sent to that processor. Automated image moderation runs on YaTut'Ye's own infrastructure. User reports and disputed or serious cases may be reviewed by a human moderator. Moderation records are not used for advertising.

5. Why information is used

Information is used to create and secure accounts, connect contacts, route peer-to-peer communications, deliver offline messages and calls, provide public channels and groups, send notifications, process optional AI requests, prevent abuse, respond to support, and maintain service reliability.

6. Sharing and processors

YaTut'Ye does not sell personal information and does not use private messages or AI requests for advertising. Information is shared only with service providers needed to operate the requested function, including hosting and database infrastructure, Apple Push Notification service, Firebase Cloud Messaging, Cloudflare, DigitalOcean, and support infrastructure, or when legally required. Each provider receives only the data needed for its role.

7. Retention and deletion

Local chat history remains on your device until you delete it, clear application data, or activate cryptographic deletion. Temporary delivery data expires or is removed after delivery. Public content and moderation records remain while needed to operate and protect public features.

You can permanently delete your account inside the app under Settings → Account → Delete account. Deletion removes the account and associated server-side data, revokes access, and cryptographically deletes local encrypted data from that device. Some limited security or legal records may be retained only where required by law or necessary to prevent abuse.

8. Your choices

• Change your password in Settings without changing your message encryption keys.
• Control profile, privacy, AI personalization, and AI consent settings.
• Report public content or block its author in the app.
• Delete individual content, clear local data, or permanently delete your account.

9. Security and children

YaTut'Ye uses encryption, authenticated device access, access controls, and peer-to-peer transport where available. No system can eliminate every risk, so protect your device and password. YaTut'Ye is not directed to children under the minimum digital-consent age applicable in their country.

10. Questions

For privacy or account questions, use the YaTut'Ye support page. This policy may be updated as the service changes; the effective date above identifies the current version.