Privacy Notice

YAFOY is designed around privacy: your messages and emails are captured and stored on your phone, not on our servers. Cloud sync is off by default. When you use YAFOY Insight, only a redacted excerpt of recent messages — with phone numbers, email addresses, codes, and banking alerts removed — is sent to the AI model to produce your summary.

On Android, your phone's own Google backup can keep a private, encrypted copy of YAFOY in your Google account, so your chats and Memory come back automatically if you reinstall the app. This copy never goes to YAFOY's servers, and you can turn it off in your phone's backup settings.

Account data: your email address and sign-in credentials, used to create and secure your account (legal basis: contract performance).

Subscription data: your plan, trial status, and usage counters (for example, how many Insights you used today), used to provide the plan you chose (legal basis: contract performance).

Device data: a device identifier, app version, and the names of the apps you connected, used to keep the Service working on your phone and to apply plan limits (legal basis: legitimate interests in operating and improving the Service).

Support data: messages you send us when you ask for help (legal basis: legitimate interests).

Payment data: payments are handled entirely by our payment provider, Stripe; we never see or store your card details.

We do not store the content of your messages or emails on our servers. We do not sell your data. We do not use your messages to advertise to you.

Service providers that help us run the Service: cloud hosting and database (our backend provider), and the AI model provider that generates YAFOY Insight from redacted excerpts.

Stripe, our payment provider, for the sale of paid plans, subscription management, payments, tax compliance, and invoicing.

Professional advisers (legal, accounting) and authorities where required by law.

We keep account and subscription data while your account is active. Usage counters reset automatically. Undelivered YAFOY-to-YAFOY messages are deleted after 30 days. When you delete your account, your server-side data is removed; residual copies in encrypted backups expire within about 7 to 28 days. Data that is no longer needed is deleted or anonymised.

Depending on your country, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can delete your account and all server-side data yourself at any time from Settings or at yafoyinbox.com/delete-account. For anything else, contact us via the Help page and we will respond within one month.

We use appropriate technical and organisational measures, including encryption in transit, access controls, and on-device processing by default. YAFOY-to-YAFOY messages are end-to-end encrypted.

The website uses only essential cookies and local storage needed to keep you signed in and remember your preferences (such as language). We do not use advertising or tracking cookies.

Questions about privacy: contact OUATTARA BAMADOU, trading as YAFOY via the Help page in the app or the website.