Privacy Policy · privacy-2026-08-v3

Privacy Policy

Effective August 2026

1. Scope

This Privacy Policy describes information handled through the HYiYH website, account system, iPhone and iPad apps, Apple Watch companion, Cloud features, support interactions, and related services. Third-party websites, Apple services, the payment provider, map providers, and other independent services have their own privacy practices.

2. Account and profile information

When you create an account, HYiYH may process your username, email address, full name, date of birth or age eligibility, account identifiers, email-verification state, policy acceptance records, subscription status, profile information, and settings. A private main Profile may contain information such as display name, bio, location, company, role, phone number, website, social links, and other fields you choose to add.

3. Content you choose to create or synchronize

Depending on the features you use, HYiYH may process folders, projects, inputs, reminders, calendar information, saved places, map coordinates, travel plans, feeds, links, account labels, messages, drawings, media references, files, images, audio, video, business information, notes, research, and other content you intentionally create or upload. Local mode can keep eligible information on your device; Cloud mode can send selected information to the configured Cloud-backed service.

4. Device, login, and security information

For authentication, fraud prevention, security, troubleshooting, session management, rate limiting, and account history, HYiYH may process device type, browser or app version, operating-system version, locale, time zone, network address, coarse location inferred from network data, request timestamps, login or password-reset events, subscription events, and security diagnostics. Passwords are transmitted for authentication but are not stored by this website in plaintext.

5. Location, camera, microphone, photos, contacts, health, and nearby-device data

Native app features can request access to sensitive device capabilities only when required by a feature and subject to Apple permission controls. Location may support maps, places, weather, travel, transport, and nearby context. Camera, microphone, photos, contacts, Health data, and nearby-device permissions are used only for features that request those capabilities. You can change permissions in Apple system settings, though doing so can disable related functions.

6. Payments and subscriptions

the payment provider processes payment-card and billing information on secure hosted Checkout and customer-portal pages. HYiYH receives identifiers and billing state such as the payment provider customer ID, subscription ID, selected membership tier, billing interval, status, renewal or period-end information, and cancellation state. HYiYH does not store full payment-card numbers in the Vapor application or Cloud user record.

7. Local Gemma and external integrations

When you choose an AI or third-party integration, prompts, attachments, URLs, or other selected information may be sent to that provider to perform the requested action. Provider API credentials that the native app supports are intended to use secure device storage where implemented. External websites, RSS publishers, maps, Apple services, AI services, and other destinations process information under their own policies.

8. How information is used

HYiYH uses information to create and authenticate accounts; provide Personal and Professional workspaces; save and synchronize eligible content; process memberships; enforce plan limits; personalize the interface; operate maps, calendar, chat, AI, profile, and companion-device features; protect accounts and infrastructure; prevent abuse and payment fraud; diagnose failures; provide support; maintain records required by law; and improve reliability and product experience.

9. No sale of personal information

HYiYH does not sell, rent, or trade personal information to third parties for money or other consideration, does not operate as a data broker, and does not use your private project content as a product for sale. Where a privacy law defines "sale," "sharing," "targeted advertising," or similar terms more broadly than an exchange for money, HYiYH will honor applicable opt-out or limitation rights for processing that falls within those definitions. Any advertising or analytics integration that materially changes this practice should be disclosed before it is enabled.

10. Service providers and disclosures

Information may be processed by service providers that help operate hosting, Cloud service, payments, email, security, infrastructure, crash diagnostics, analytics if enabled, mapping, AI functions you select, and support. HYiYH may also disclose information at your direction; to complete a transaction you request; to investigate fraud, abuse, or security incidents; to protect users or legal rights; during a lawful business transaction; or when disclosure is required by applicable law, court order, or valid government process.

11. Cookies and website sessions

The website uses a secure session cookie to maintain authenticated state and CSRF protection. The cookie is HTTP-only and configured with security attributes appropriate to the environment. The website may also use browser local storage for non-sensitive interface preferences such as the selected Personal or Professional dashboard mode. Third-party pages opened from HYiYH can use their own cookies and tracking technologies.

12. Retention

Retention depends on the information type, storage mode, account status, subscription state, security needs, backup practices, provider behavior, and legal obligations. HYiYH may retain limited records when reasonably necessary for fraud prevention, security, billing, tax, accounting, dispute resolution, legal compliance, and enforcement. Local data can remain in device or system backups after it is removed from an active app database. Cloud file deletion can require both object deletion and protected-file cleanup.

13. Security

HYiYH uses safeguards designed for the type of service involved, including TLS in production, private Cloud access controls where configured, authenticated sessions, CSRF protection, secure cookies, rate limiting, signed the payment provider webhook verification, server-side Price ID selection, idempotency controls, security headers, protected file workflows, and Apple Keychain or platform security features in native apps where implemented. No system can guarantee absolute security, and you should use a strong unique password and protect devices that remain signed in.

14. Your choices and privacy rights

You can manage account settings, choose eligible Local or Cloud storage, change Apple permissions, control optional notifications, manage billing through the payment provider, edit or remove eligible content, log out, and request account assistance. Depending on where you live, you may have rights to access, know, correct, delete, restrict, object to certain processing, obtain portability, withdraw consent, opt out of certain sale/sharing/targeted-advertising processing, limit certain uses of sensitive information, or appeal a privacy decision. Identity and authority may be verified before a request is completed.

15. Children

HYiYH account creation is intended for adults age 18 or older. The service is not directed to children. If you believe a minor provided personal information in violation of this policy, contact support so the request can be investigated and handled as required by applicable law.

16. International processing

Information may be processed in the United States and other locations where HYiYH or its service providers operate. Applicable contractual, organizational, and legal safeguards may be used where required for cross-border transfers. Privacy protections and government-access rules can differ by jurisdiction.

17. Business transfers

If HYiYH is involved in a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, information may be reviewed or transferred as part of that process subject to this policy, applicable law, and any required notice or choice.

18. Public Profiles, Sponsors, Products, and Marketplace listings

Information you deliberately mark public—such as a public marketplace Input, seller or service description, public profile, sponsor presentation, product listing, price, location, media, or contact method—can be displayed to other users or the public as indicated by the feature. Marketplace categories can include people offering services, places or real estate, tangible things, and ideas or events. Before publishing, review the information carefully and do not include sensitive personal information that you do not want others to see. HYiYH may moderate, restrict, unpublish, or preserve limited evidence of listings when reasonably necessary for safety, fraud prevention, disputes, legal compliance, or enforcement.

19. Search, RSS, links, maps, directions, and immersive media

HYiYH does not use private web-search terms to create an advertising profile. A search can be sent directly to the selected external search provider, which processes it under its own policy. Saved links and RSS sources are stored only when you choose to save them. Map, route, distance, and multi-stop direction features may send addresses or coordinates to external mapping services. Browser-based 360-degree images, video, motion, camera, orientation, or location features operate only when the browser and your permissions allow them.

20. Support communications and email delivery

Contact, bug, help, and privacy requests are stored in a private support queue associated with your account. When email delivery is configured, the request may also be transmitted through HYiYH's business email provider so support personnel can respond. Do not submit passwords, payment-card numbers, health records, government identifiers, or other unnecessary sensitive information in a support message.

21. Receipts, transaction records, and administrator access

After a verified App Store or the payment provider transaction, HYiYH may maintain a private account-linked receipt record containing transaction identifiers, product or membership identifiers, payment channel, purchase date, price display, recurring status, and membership term. These records support access control, customer support, fraud prevention, tax or accounting obligations, and dispute handling. Authorized administrators can receive feature access for testing, support, operations, or account administration without a consumer subscription; administrator status does not make private user content public.

22. Changes and contact

HYiYH may update this policy as services, providers, law, or data practices change. Material updates may be presented on the website, in the app, by email, or through another reasonable notice mechanism. Privacy questions and rights requests can be sent to contact@hyiyh.com.