Privacy Policy

Welcome to Yoyes (yoyes.ai) (the "Site" or "we"). We value your privacy and data protection. This Privacy Policy explains how we collect, use, store, share, and delete your personal information, and applies to all services provided by the Site (including AI-based image generation services, accounts, membership purchases, and Gems — our in-app virtual currency).

1. Information We Collect

Depending on how you use the Site, we may collect the following information:

• Basic Account Information: If you log in through Google / Facebook third-party authentication, we obtain your nickname, email, and avatar according to their authorization scope; you can cancel this association at any time in Google / Facebook's "Apps and Websites" settings, which will not affect your original data stored on Facebook. Or the Email you provide when registering through the Site's email registration;
• Authentication Information: When you register using email + password, we save your Email and password hash (see "Password Encryption" section for details);
• User Uploaded and Generated Images: Images you upload for generation and images generated and provided to you by the Site (see "Image Processing and Retention" below for details);
• Purchase/Payment and Gems Information: Membership level, purchase status, purchased Gem pack records, Gem ledger entries (granted, spent, refunded, expired) (*payment card information is not saved*);
• Usage and Log Data: IP addresses, timestamps, browsing behavior, error logs, and other anonymous or de-identified data used for security and statistical analysis;
• Install / Anti-fraud Fingerprint: When you tap "Install the App" to claim the install reward, we compute a non-identifying device fingerprint (a SHA-256 hash over your browser's reported User-Agent, screen size, time zone, language, and canvas rendering output) solely to prevent the same device from claiming the reward multiple times under different accounts. The fingerprint cannot be used to identify you individually, is never shared with third parties, and is retained alongside the install reward record only.

2. Password & Authentication

If you choose to register using the Site's email + password:

• We do not store your password in plain text. The Site uses the Bcrypt hashing algorithm (bcrypt) for irreversible encryption of passwords, using random salt and reasonable work factors (e.g., cost = 12 or higher) to enhance security;
• During authentication, we only compare hash values; the Site cannot (and will not) directly read or recover your plain text password.

3. Image Processing & Retention

The Site provides AI-powered image generation/style conversion services. Regarding your uploaded and generated images:

• Not Used for Training: User uploaded images will not be used to train or retrain models; we only use them for generation/processing and to provide services to you;
• Storage Period: User uploaded images and results generated by the Site are stored in our storage, default retention period is 180 days, and will be automatically deleted after expiration; if you request deletion in advance, we will process it within 7 business days after receiving a valid deletion request;
• Processing Method: To provide services, we may pass images to the models or model hosting services used for processing on the server side (see "Third-Party Services" below);
• Ownership: Images generated by the Site belong to users, unless otherwise agreed in writing; users have the right to download, retain, or request deletion of these images;
• Content Restrictions: You must not use this service to generate defamatory, pornographic, or privacy-infringing content (especially deepfake/non-consensual content targeting minors).

4. AI Models & Third-Party Services We Use

To provide image generation and style conversion features, the Site may use the following models or services:

• Stable Diffusion (locally deployed or third-party hosted implementation);
• Google Gemini (through APIs/services provided by Google);

When calling third-party APIs (such as Google), some request data (e.g., images or parameters used for generation) may be sent to that third party for processing; we strive to only send data necessary to implement functionality and follow the privacy constraints and terms of use of third-party services. We do not use user uploaded data for third-party model training unless explicitly stated in writing and with user consent.

5. Payments, Purchases & Gems

• Payment Channels: The Site uses third-party payment channels to process payment transactions, currently Stripe. Additional regional payment providers may be added in the future and disclosed here. These payment services handle sensitive payment data such as card information and payment credentials;
• Payment Card Information Not Saved: The Site does not directly save users' credit cards or complete payment information. Payment credentials/transaction records are retained in our system for accounting and reconciliation purposes, but sensitive card data is securely stored by payment channels;
• Membership Rules: Membership purchases are one-time payments that grant access for a fixed duration (e.g., 30 days or 90 days, as displayed at purchase). No automatic renewal is performed. When a membership expires, tier-gated features become unavailable, but any remaining Gems are preserved in your wallet;
• Gems Rules: Gems are an in-app virtual currency used to pay for AI generations. Gems do not have a fixed expiry date and are not deleted when a membership expires. However, if an account shows no qualifying activity (login, generation, or purchase) for 12 consecutive months, any remaining Gem balance may be cleared via an automated maintenance process. Gems have no cash value and cannot be transferred between accounts or redeemed for fiat currency;
• Refunds: All sales are generally final once AI generation has started. As a goodwill policy, a full refund may be requested within 7 days of purchase if and only if no Gems from that order have been spent. Forced refunds via payment-processor disputes (e.g., Stripe chargebacks) will result in immediate forfeiture of any Gems granted by that order and may lead to account suspension. Full refund terms are in our Cancellation & Refund Policy.

6. Information Sharing and Disclosure

Except in the following circumstances, we will not sell or provide your personal information to unauthorized third parties:

• Third parties necessary to complete services and authorized by you (e.g., payment channels, cloud storage, and model hosting services);
• Compliance with laws, court orders, or regulatory requirements;
• To protect the legitimate rights and interests and safety of the Site, users, or others.

7. Data Retention Policy

• User uploaded and generated images: Default retention of 180 days with automatic deletion; if you wish to immediately delete your account and all associated Google / Facebook user data, please follow our Data Deletion Guide (Data Deletion Page) or contact support@yoyes.ai, and we will process it within 7 business days.
• Account data (such as Email, hashed passwords, purchase and credit records): Retained for necessary periods for service provision and compliance purposes; after user deletion requests are completed, we will delete or anonymize related data, and data that cannot be deleted by law will be retained with minimal necessary information according to law;
• Logs and security data: For security and abuse prevention purposes, certain logs may be retained for longer periods (de-identified or with restricted access).

8. User Rights

Depending on your location, you may have the following rights:

• Right of Access: Access your personal data;
• Right of Rectification: Correct or update inaccurate personal data;
• Right of Deletion: Request deletion of your personal data (see Data Deletion Page for details);
• Right to Object: Object to or restrict data processing;
• Withdraw Consent: Withdraw consent you previously gave (withdraw third-party login authorization in Google / Facebook permission management);
• Data Portability: Obtain your data in a structured, commonly used format;
• Opt-out of Marketing Communications: Choose to opt-out of marketing emails;
• California Resident Rights: Under CCPA, you have the right to opt-out of "sales" of personal data (we do not sell data).

To exercise these rights, please contact us: support@yoyes.ai. We will respond and process within 7 business days after receiving a valid request (complex cases may require more time, and we will inform you promptly).

9. Security Measures

We employ common security technologies and administrative measures (HTTPS, encrypted storage, access control, etc.) to protect user data security, but please note that no network service can guarantee 100% security. Please choose a strong password for your account and keep it safe.

10. Minors

The Site does not provide services to minors under 18 years old, nor do we intentionally collect information from minors. If we discover accidental collection, we will immediately delete the relevant data. For more details, please see our Underage Policy.

11. International Data Transfers

Your data may be processed in Hong Kong and other jurisdictions. For EU data transfers, we adopt appropriate safeguards (such as standard contractual clauses) to ensure data security.

12. Third-Party Links and Services

The Site's pages may contain third-party services or links. Third-party services have their own independent privacy policies, and the Site is not responsible for their conduct. Third-party services we use include:

• Google Privacy Policy (for login and Analytics)
• Meta Privacy Policy (for Facebook login)
• Stripe Privacy Policy (for payment processing)

13. Cookies and Similar Technologies

We use cookies to implement basic functionality, analytics, and performance optimization. For detailed information, please see our Cookies Policy. You can manage cookie preferences through browser settings or our consent banner.

14. Contact

If you have questions about this Privacy Policy, need to submit deletion requests, or exercise other rights, please contact:
Email: support@yoyes.ai
Website: https://yoyes.ai

You can also visit our Legal Policy Center to view all related documents.