YESHI PRIVACY POLICY

1. Eligibility

Yeshi is intended for individuals 18 years of age or older.

We do not knowingly collect personal information from individuals under 18. If we learn that we have collected such information, we will delete it.

2. Information We Collect

We collect the following categories of information:

A. Account Information

• Name (if provided)
• Email address
• Login credentials
• Subscription status
• Customer support communications

B. Journal & User Content

• Journal entries you create
• Messages you send to the AI
• Reflections and responses
• Uploaded content (if applicable)

You retain ownership of your journal entries.

C. Technical & Usage Information

• IP address
• Device type and operating system
• App version
• Interaction timestamps
• General usage analytics
• Crash logs and diagnostic data

We do not collect precise geolocation data.

D. Payment Information

Subscription payments are processed through third-party providers (such as Apple App Store or Google Play).

Yeshi does not store full payment card details.

3. How We Collect Information

We collect information:

• When you create an account
• When you write journal entries
• When you interact with the AI
• When you contact customer support
• Automatically through system logs and analytics tools

We do not purchase personal data from data brokers.

4. How We Use Your Information

We use personal information to:

• Provide and operate the Services
• Generate AI responses
• Personalize your experience
• Improve system performance and reliability
• Provide customer support
• Maintain security and prevent abuse
• Process subscriptions
• Comply with legal obligations

We may use anonymized and aggregated data to improve our Services.

We do not sell your personal information.

We do not use journal content for advertising.

5. AI Processing & Journal Privacy

Automated Processing

Journal entries are processed automatically by artificial intelligence systems to:

• Generate responses
• Provide contextual reflections
• Improve personalization
• Maintain continuity in your journaling experience

Yeshi uses OpenAI’s API services to generate AI responses.

This processing is automated.

No Human Review of Journals

Yeshi does not permit employees, contractors, or third parties to read user journal entries in the ordinary course of business.

Access to journal content is:

• Restricted
• Logged
• Limited to rare circumstances such as:

• Security investigations
• Technical troubleshooting
• Legal compliance requirements

We do not monitor journals for content.

We do not manually review journal entries for advertising or marketing purposes.

AI Model Training

Yeshi does not use your journal entries to train public AI models.

We use OpenAI’s API services under agreements that restrict submitted data from being used to train public models.

Journal content is used only to provide and personalize the Services to you.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your information, including:

• Encryption in transit
• Encryption at rest
• Secure cloud infrastructure
• Access controls
• Internal data protection policies

While no system can guarantee absolute security, we design Yeshi with privacy and data protection as core principles.

End-to-end encryption is not currently implemented.

7. Data Retention

We retain personal information only as long as reasonably necessary to:

• Provide the Services
• Fulfill contractual obligations
• Comply with legal requirements
• Resolve disputes
• Enforce agreements

If you delete your account, we will delete or anonymize your personal information unless retention is required by law.

8. How We Share Information

We do not sell personal information.

A. Service Providers

With trusted third-party vendors who help us operate the Services (such as hosting providers, analytics providers, and payment processors).

These providers are contractually required to safeguard your information.

B. Legal Compliance

If required by law, subpoena, court order, or governmental request, or if necessary to protect the rights, safety, or security of users or the Company.

C. Business Transfers

If Yeshi is involved in a merger, acquisition, financing, or asset sale, your information may be transferred as part of that transaction.

9. Sensitive Information

Journal entries may include sensitive emotional or mental health information. We treat such information with heightened care.

However, Yeshi is not a healthcare provider and is not subject to HIPAA.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion
• Restrict or object to processing
• Opt out of sale (we do not sell data)
• Limit use of sensitive personal information

California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, correct, and opt out of certain data uses.

To exercise your rights, contact: privacy@yeshi.com

We will not discriminate against you for exercising your rights.

11. Third-Party Links

The Services may contain links to third-party websites. We are not responsible for the privacy practices of those sites.

12. International Users

If you access Yeshi outside the United States, you understand that your information may be processed and stored in the United States.

13. Changes to This Policy

We may update this Privacy Policy from time to time.

If material changes are made, we will notify users through the app or via email. Continued use of the Services constitutes acceptance of the updated policy.

14. Contact Information

Yeshi Life Corp.

Email: info@yeshi.com