Privacy Policy

This policy describes Yoori, its website at cairn-ai.tech, and related services (the “Services”). Yoori is operated by Wang Wenrui as an individual; “we,” “us,” and “our” refer to Wang Wenrui. For privacy questions or requests, contact [email protected].

The Terms of Service also apply to your use of Yoori. The Services may contain links to third-party services with their own privacy policies.

Information you provide. We receive the messages, notes, photos, recordings, and other content you choose to share. Depending on the features you use, you may also enter a name, preferences, reminders, meals, sleep, mood, activities, cycle, medication, financial or other personal records. Your content may contain sensitive information about you or others.

Health information. If you choose to connect a device health service and grant the relevant permissions, Yoori can read the health categories you allow, such as activity, exercise, sleep, weight, and cycle information, for synchronization and the features you enable. Yoori asks separately before enabling health synchronization and associated AI processing.

App usage time (bedtime nudge). If you turn on the bedtime nudge on Android and grant Usage Access, your phone counts how long you use other apps that night, excluding Yoori and the home screen. When the total reaches 15, 30 or 60 minutes, Yoori sends the level reached and the time to our servers, stores it with that night’s nudge, and includes it in the AI context so the companion can write a reminder. Which apps you used and per-app details are counted on your phone and are not sent to us. Yoori explains this and asks you to agree before the nudge first turns on. On iOS, Screen Time data stays on your device and is never sent to us. You can turn the nudge off at any time and withdraw Usage Access in your system settings.

Account and device information. Yoori can create a guest account without a phone number or email address. We use an account identifier and a device credential to maintain your session. We may also receive app and operating-system versions, device information, IP address, time zone, diagnostic information, and notification tokens when needed to operate the Services.

Optional sign-in. If you link Apple or Google sign-in, we process the provider identifier, authorization data, and any name or email address the provider returns to authenticate and connect your account. Guest access does not require third-party sign-in.

Website and support. If you join the website waitlist or contact us, we receive your email address and any other information you choose to send, together with technical information needed to process and protect the request.

• Provide your account, conversations, reminders, records, and other features you request.
• Use relevant conversation history, records, preferences, and memories to make responses and suggestions more useful.
• Synchronize information across the Services where the feature is available and you choose to use it.
• Protect users and the Services, investigate errors, respond to requests, and meet legal obligations.
• Understand and improve the Services through usage and diagnostic information, subject to the choices available in the app.
• Send notifications you enable and reply to support or waitlist requests.

When you enable AI processing and use an AI feature, Yoori sends the input and context needed for that request to its AI service provider. Depending on the feature, that context can include your messages, selected conversation history, life records, the bedtime nudge’s app usage levels described above, memories, and information used to find relevant memories. It can include sensitive information you have chosen to share. AI responses may reproduce or refer to that information.

Yoori uses Google Gemini for AI processing. Our primary app infrastructure is in Singapore; this does not restrict where Google or other providers process a request. Some structured questions use TypeSafe's Jev. Voice features may send the relevant audio or text to ElevenLabs for speech recognition or voice output. Processing locations and practices of other providers can differ. Do not share information that you do not want processed for the requested feature.

You can withdraw AI processing permission in Settings → Data & Privacy. This stops new AI processing; it does not automatically delete existing records. You can separately turn off health synchronization. Yoori is not a medical professional or emergency service.

We share information with providers only as needed for the features and operations involved, including:

• Google Gemini for AI requests and the relevant input and context described above.
• TypeSafe (Jev) for structured question processing, using the information needed for that request.
• ElevenLabs for voice features, using the audio or text needed for the requested operation.
• Apple and Google for optional account sign-in and authorization.
• Infrastructure providers, including Supabase and Oracle Cloud, for application hosting, databases, storage, and related operations.
• Google Firebase Cloud Messaging and Apple Push Notification service for push notifications, including device tokens and notification delivery information.
• PostHog and Sentry, when enabled, for product usage measurement and error diagnostics. The overseas app is configured to use their United States endpoints. When usage statistics are enabled, PostHog may derive an approximate location from your IP address. Diagnostic reports may include information associated with an error.
• Cloudflare for website hosting and related network services.

We may also disclose information when required by law, to protect rights and safety, or in connection with a business transaction. Third-party providers may process information in locations different from Yoori’s primary infrastructure. We do not treat the location configured for one provider as a promise about all providers.

You can manage AI consent and health synchronization in the app’s Data & Privacy settings, manage notification and device permissions in your system settings, and use available in-app controls to review or change records. Usage statistics can be turned off in the app’s settings.

You can request account deletion in Settings → Account → Delete account, including when using a guest account. A deletion request deactivates the account and starts a retention and review period before records are purged. Some information may need to be retained for legal, security, or operational reasons. Contact us if you need help with a request or want to ask about access, correction, deletion, or other rights that apply where you live.

Guest access is tied to the credential on your device. Until another recovery method is available and linked, deleting the app, losing the device, or losing its credentials may prevent you from accessing that account again. A user number alone is not proof of account ownership.

Yoori’s primary app infrastructure is in Singapore. Service providers may process or store information in other locations, including where their systems or support teams operate. Contact us for information about the safeguards applicable to a particular international transfer.

We retain information for as long as needed to provide the Services, handle requests, protect the Services, and comply with applicable requirements. Retention can vary by type of information, deletion status, backups, and legal obligations. We use safeguards appropriate to the information and services, but no online system can guarantee absolute security.

Where applicable law requires a legal basis, we process information to provide the Services you request, with your consent, for legitimate operational interests, or to meet legal obligations. You may have rights to access, correct, delete, receive a copy of, restrict, or object to processing of your information, and to withdraw consent. The rights available and any exceptions depend on applicable law. We may need to verify a request before acting on it.

Yoori can process sensitive conversations and health information. A parent or guardian should review the Services with a child or teenager and provide permission where required by applicable law. If you believe a child has provided information without required permission, contact us so we can review the request and take appropriate action.

We may update this policy as the Services or our practices change. We will update the date above and provide additional notice when required. Questions and privacy requests can be sent to [email protected].