Privacy Policy

This Privacy Policy ("Policy") applies to all websites and mobile applications (collectively, the "Services") provided by YES AI Studio ("Company", "we", "us", or "our").

We prioritize user privacy and minimize data collection by implementing cookie-less analytics (Umami). Furthermore, we securely manage member data through Cloudflare and provide authentication services via Google Login.

This Policy applies to all personal data processing activities within the Services, including the use of third-party services such as Google AdSense, Firebase, Umami Analytics, and Cloudflare.

We utilize Google Consent Mode v2 to integrate and communicate the consent status of advertising services with Google's systems.

We process the following categories of personal data to provide and improve our Services:

• Account and Authentication (Cloudflare and Google Login): Email address, Google profile name, profile picture, and Google Unique Identifier (UID).
• Donations (Ko-fi and PayPal): Nickname, donation message, and email address provided during the donation process. Note: Financial information, such as credit card numbers, is processed directly by the respective payment service providers and is never stored on our servers.
• Service Responses: Data is processed locally on the user's device and is not stored on our servers (except for users utilizing authenticated cloud storage features).
• Inquiry Form Information: Name (nickname), email address, and the content of the inquiry.
• Technical Data via Third-Party Services (Umami, Firebase, etc.):
  • Anonymized non-identifiable IDs and device information (browser type, OS, screen resolution).
  • Approximate geolocation (country or region level only).
  • Page views and interaction patterns (via cookie-less anonymous analytics).
  • Service error and performance data (e.g., Crashlytics).
• Cookies and Local Storage: Used for Google AdSense advertising services and maintaining login sessions (e.g., __Host-session).
}

• Account Management and Authentication: Processing Google account logins, managing sign-ups and identification, preventing duplicate registrations, and handling account deletions.
• Service Provision: Providing test and analysis results, and managing individual service usage records.
• Donor Management and Recognition: Identifying donors, displaying donor recognition (e.g., nicknames on a 'Thanks To' page), and responding to donation-related inquiries and operational support.
• Customer Support: Receiving and verifying user inquiries, contacting users for fact-finding or notifications, and providing resolutions to inquiries.
• Service Statistics and Optimization: Analyzing non-identifiable visitor statistics via Umami to enhance User Experience (UX) and optimize navigation.
• Mobile App and Performance Management: Monitoring app performance, tracking crashes, and improving usability through Firebase.
• Marketing and Advertising: Delivering personalized advertisements and content via Google AdSense.

Personal data is processed and retained as follows:

• Service Response Data: Processed locally within your browser and is not stored on our servers.
• Website Usage Logs: Processed anonymously via Umami. For service delivery and security, data may be temporarily processed or stored by hosting or CDN providers (e.g., Cloudflare) in accordance with their respective policies.
• Firebase Data: Processed in accordance with Google's policies. For further details, please refer to the Google Privacy Policy.
• Advertising Cookies (Google AdSense): Managed according to Google's advertising policies. For further details, please refer to the Google Privacy Policy.
• Member Account Information (Google Login Data): Retained until account withdrawal. Data is completely deleted 14 days after the withdrawal request. If you log in again within 14 days of the request, your account and data will be automatically restored.

Personal data processing is based on user consent, performance of a contract, or our legitimate interests.

To ensure efficient service provision and management, we entrust certain personal data processing activities to specialized external service providers as outlined below.

When entering into entrustment agreements, we comply with applicable laws and regulations. Such agreements stipulate prohibitions on processing personal data for purposes beyond the specified scope, implementation of technical and administrative safeguards, restrictions on further subcontracting, and regular supervision of the entrusted parties.

We do not share, sell, or otherwise disclose your personal data to third parties for their own marketing purposes without your explicit consent. Disclosure may only occur in the following limited circumstances:

• To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
• To protect the rights, property, or safety of the Company, our users, or the public as required or permitted by law.

For the efficient operation of our Services, we entrust certain data processing tasks to external processors. Please refer to Section 4 (Entrustment of Personal Data Processing) for detailed information on these activities.

The transmission of data to Google LLC, Cloudflare, Inc., Ko-fi, and PayPal involves the cross-border transfer of personal data to countries outside of your residence (e.g., the United States). We take necessary measures to ensure that your personal data receives an adequate level of protection. For more details, please refer to the privacy policies of our respective partners: Google, Cloudflare, Ko-fi, and PayPal.

We utilize cookies and similar technologies to ensure efficient service operation and to analyze usage patterns as follows:

• Umami Analytics: To prioritize user privacy, we collect anonymized visitor statistics without the use of cookies.
• Google AdSense: Cookies are used to personalize advertisements and measure their effectiveness. For further details, please refer to Google’s Advertising Policy.
• Strictly Necessary Cookies (Authentication): We use the __Host-session cookie to maintain user login sessions (retained for 7 days).
• Functionality Cookies: These are used to remember user preferences and enhance the overall service experience.

Users have the right to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline them if you prefer. However, this may prevent you from taking full advantage of the Services.

For users located in the European Economic Area (EEA), the United Kingdom, and other regulated regions, we utilize a Google-certified Consent Management Platform (CMP) to collect and manage consent for advertising cookies in compliance with regional data protection laws.

• Personalized advertising cookies remain inactive until the user provides explicit consent.
• Users may modify or withdraw their consent at any time by clicking the "Cookie Settings" button in the website footer or by visiting the Cookie Policy page.
• Consent preferences are integrated and communicated with Google services through Google Consent Mode v2.
• Technical Note: Umami Analytics operates without the use of cookies; therefore, it may collect anonymized statistics regardless of cookie consent status, in accordance with privacy-by-design principles.
• Notice: Consent banners may not be displayed in regions where such requirements are not legally mandated (e.g., Korea, Japan).

Our Services utilize Umami for usage analysis and Firebase for app performance monitoring and inquiry processing.

• Data Collected:
  • Umami: Anonymized page views, device/browser information, and approximate geolocation at the country or regional level (operated without cookies).
  • Firebase: App performance metrics, service error logs (Crashlytics), and information submitted via inquiry forms.
• Purpose: To analyze usage trends, optimize user experience, improve service functionality, and monitor app stability through error tracking.
• Retention and Policies:
  • Umami: Data is stored as non-identifiable statistics and does not track individual users. For more details, please review the Umami Privacy Policy.
  • Firebase: Data is processed in accordance with Google's terms. For more details, please review the Firebase Privacy Center.

Umami Analytics does not use cookies and cannot personally identify individual users. For further information regarding Google's data processing practices, please refer to the Google Privacy Policy.

Our Services provide content suitable for all ages. We take special care to protect the privacy of children and minors in accordance with the laws of their respective jurisdictions.

• Compliance with Regional Age Standards: We respect the legal age for children as defined by the laws of the user's residence, including but not limited to children under 14 in South Korea and under 16 in the European Economic Area (EEA).
• Restriction on Data Collection and Use: We do not knowingly collect personal data from children for marketing or advertising purposes, nor do we sell or share such data. For minors using Google Login, only the minimum information necessary for service provision (e.g., email, profile name) is processed.
• Parental Rights: Parents or legal guardians may request access to, correction of, or deletion of their child's personal data at any time. For such requests, please contact us at contact@yesaistudio.com.
• Remedial Action upon Awareness: If we become aware that we have collected personal data from a child without verifiable parental consent, we will take immediate steps to delete such information and close the associated account without delay.

As a data subject, you may exercise the following rights regarding your personal data:

• Access and Rectification: You may access or request correction of your personal data at any time through the Service settings or by contacting us directly.
• Account Withdrawal and Deletion: You can request to withdraw your membership and delete your data at any time via the settings menu within the Service.
• Retention Grace Period (14 Days): To prevent accidental data loss, a 14-day grace period is applied upon a withdrawal request. If you log in again with the same account during this period, your account will be automatically restored, and the deletion request will be canceled.
• Permanent Destruction: After the 14-day grace period expires, all member information and associated data stored in Cloudflare D1 will be permanently deleted and cannot be recovered.
• Donation Information Management: If you wish to delete a nickname or message published during a donation, you may submit a request via email.

Requests to exercise these rights can be submitted in writing to contact@yesaistudio.com, and we will take action without delay in accordance with applicable laws.

We have designated the following contact point to protect users' personal data and handle inquiries or requests regarding your rights.

• Data Controller: YES AI Studio
• Contact Email: contact@yesaistudio.com

Response Timeline: In accordance with applicable laws (such as the PIPA and GDPR), we will acknowledge and provide a status update on your request within 10 days of receipt, and deliver a final response within 30 days. Please understand that as a solo-operated service, response times may vary depending on the complexity of the inquiry; however, we are committed to processing all requests as promptly as possible.

Policy Updates: Any amendments or updates to this Privacy Policy will be announced through our website or application prior to their effective date.