Yula Privacy Policy
Yula ("Yula", "we", "our", or "us") helps users turn dream descriptions into AI-generated comic panels. This Privacy Policy explains what information we collect, how we use it, when we share it, and the choices available to users.
1. Information We Collect
We may collect the following categories of information:
- Account information: name, email address, sign-in provider, profile photo, and authentication identifiers.
- Profile information: birth date, birth time/location, zodiac and birth-chart information, optional gender, and settings preferences if the user provides them.
- User content: dream descriptions, generated comic prompts, generated comic images, journal entries, and feedback messages.
- Device and app information: app version, device type, operating system, language, push notification token, and analytics events related to app usage.
- Subscription information: subscription tier, entitlement status, billing period metadata, renewal state, purchase validation results, and dream-credit balances/transactions. Apple or Google handles store payments; Yula does not receive full payment card details.
- Support and communications: messages sent to support, bug reports, and any attachments or diagnostics voluntarily shared by the user.
2. How We Use Information
We use collected information to:
- create and manage user accounts;
- authenticate users and secure access to their data;
- generate dream interpretations and comic content;
- save, sync, and display comics, journal entries, and settings;
- provide customer support and respond to requests;
- send push notifications and reminders if enabled by the user;
- measure feature usage, diagnose crashes, and improve product quality;
- detect abuse, fraud, unauthorized access, or policy violations;
- administer subscriptions and enforce plan limits.
3. AI Processing
Creating a comic or requesting a dream interpretation requires an explicit AI-processing choice in the app. For these requested features, Yula's backend sends dream text, selected feelings, the selected language/style and relevant optional profile context, such as zodiac information or selected gender, to Google Gemini to generate text and images. Raw birth date and age are not included in the current generation requests. Consent is recorded with the account. Keeping a journal entry without requesting an AI feature does not submit that entry to Gemini.
Voice input uses the device's speech-recognition service. Microphone audio may be processed on the device or by its operating-system provider, depending on the device and settings. Yula receives recognized text as a dream draft. The current in-app dictation feature does not use OpenAI. If the user later chooses an AI feature, the recognized dream text is processed as described above.
Google and operating-system providers apply their own processing and retention policies. Yula cannot promise that provider processing is exclusively on-device or that all provider copies are immediately erased.
Users should avoid submitting highly sensitive personal information in free-text fields unless necessary.
4. Legal Bases for Processing
Where applicable, we process information based on one or more of the following legal grounds:
- performance of a contract, including providing the app and requested features;
- user consent, such as for notifications or optional profile fields;
- legitimate interests, including security, analytics, support, and service improvement;
- compliance with legal obligations.
5. How We Share Information
We do not sell personal information. We may share information with:
- Google Firebase for account authentication, account-linked cloud storage/database records, analytics and messaging, and Google Gemini for requested AI features;
- RevenueCat for subscription entitlements and dream-credit balances/transactions. Yula uses the Firebase account identifier as the RevenueCat customer identifier; backend billing requests use this identifier and purchase/credit metadata rather than dream text or journal content;
- Apple App Store or Google Play for store payments and subscription management, and the operating-system speech service for voice input;
- customer support and error monitoring providers;
- legal authorities or other parties when required by law or necessary to protect rights, safety, or the service.
Saved journals, comics and uploaded profile photos are associated with the user's account. Exported files and shared images or download links can become accessible to recipients; anyone who receives a usable download link may be able to open it. These providers process information according to their applicable terms and privacy policies. We do not claim that user information is never shared with service providers.
6. Data Retention
We retain data for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain security and business records.
In-app account deletion removes the Firebase authentication account, the user's account and nested cloud records (including journal, comic and generation-job records), preferences, and uploaded comic/profile-photo files after server cleanup succeeds. If a generation is still stopping, or cleanup fails, the app asks the user to retry rather than confirming completion.
Deletion does not cancel store subscriptions or erase copies already exported/shared. RevenueCat/store purchase records, provider processing records, infrastructure logs, backups and limited deletion-status/security records may remain under separate retention rules or legal obligations. We have not established a fixed purge schedule for every provider log or backup, and do not guarantee immediate erasure from every system. Contact us if further privacy assistance is needed.
7. User Controls and Rights
Depending on the user’s location, users may have the right to:
- access their personal data;
- correct inaccurate data;
- delete their data;
- object to or restrict certain processing;
- withdraw consent where processing depends on consent;
- request a copy of their data, where applicable.
Users can also:
- delete their account from Settings -> Delete Account, with recent sign-in when required;
- choose journaling without AI processing, or stop using AI features; contact us about withdrawing recorded consent or deleting previously processed data;
- disable notifications in device or in-app settings;
- contact us to request privacy assistance.
8. Children
Yula is not directed to children under the minimum age permitted by applicable law to use the service without parental consent. We do not knowingly collect personal information from children in violation of applicable law.
9. International Transfers
Information may be processed and stored in countries other than the user’s own. When required, we use reasonable safeguards for cross-border transfers.
10. Security
We use reasonable administrative, technical, and organizational measures to protect data. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date and, where appropriate, by providing additional notice.
12. Contact
For privacy questions or requests, contact:
- Support email: vebestostudio@gmail.com
- Privacy requests: vebestostudio@gmail.com