Privacy Policy

Who we are

Yubi and yubichan.ai are run by International Design LLC (インターナショナルデザイン合同会社), Tokyo, Japan, represented by Carlos Lastres. For questions or requests about your data, write to [email protected].

This website

yubichan.ai has no sign in and no forms. It collects the following.

• Google Analytics 4. We use two Google Analytics properties, one for Yubi and one we use across our own websites. They set first party cookies (_ga and _ga_*) and send Google the pages you view, the referring site, your device and browser type, and an approximate location derived from your IP address. We use this to see which pages people read, never for advertising.
• Downloads. Downloading the app is an ordinary file request to our host. We do not ask for your name or email address to download it.
• Hosting logs. The site is served by Cloudflare. Like any web host, Cloudflare processes your IP address, browser user agent and the address you request in order to deliver the page and block abuse.

If you visit from Europe, analytics cookies stay off until you choose Accept. Your choice is stored in your browser, and you can change it at any time with Cookie settings, which is also in the footer of every page.

The Yubi app on your Mac

Your voice stays on your Mac. Dictation is transcribed on the Mac by Apple's speech framework, or by whisper.cpp if you installed it yourself. No audio is uploaded. The first time you use a language, macOS may download Apple's speech model for it.

What the app keeps on your Mac:

• your dictation history, up to 200 entries, which you can turn off and clear in Settings
• a Sent list with the full text of every screen help and AI cleanup request sent to our server, up to 100 entries, which you can clear
• a technical log of events such as app names, labels of controls she pressed and error messages. Since version 0.8.1 it holds no dictated or requested text, and it trims itself once it passes 1 MB
• your settings, custom vocabulary and learned words
• your sign in token, stored in the macOS Keychain

No analytics in the app. The app contains no analytics, no crash reporting and no automatic updater.

When the app sends data

The app talks to one server, api.yubichan.ai, which we run on Cloudflare. It sends data only in these cases.

• Account. To sign in you give your email address. We send you a sign in link through Resend, our email provider.
• Screen help. Setup turns it on, and you can turn it off in Settings. It reads nothing until you hold the screen help key and ask something. Then the app reads the accessibility text of the front window: the app name, the window title, and the role, label and text of its controls, including text in fields. Password fields are masked and password managers are never read. It never takes screenshots or records the screen. This text and your spoken request go to our server, which forwards them to Anthropic's Claude models to work out the answer. By default you confirm the first send of each request. The rereads that follow each step are sent without asking and appear in the Sent list. If you ask her to merge PDFs, the file names and folder path are sent too.
• AI cleanup, off until you turn it on. The dictated text and your custom vocabulary go to our server and on to Anthropic to tidy the wording.
• First run practice. The practice task during setup reads Yubi's own tour window and is sent without an account.
• Every request carries a hashed identifier of your Mac, the app and macOS version and, when you are signed in, your sign in token. Your IP address reaches our server as with any connection.

Our server passes the content of these requests through to Anthropic and does not store it. It keeps counts and metadata instead, listed below.

What our server stores

• your email address, plan, subscription status and Stripe customer ID
• how many times you signed in, and when you were first and last seen
• a hashed identifier of each Mac you use, with the app and macOS version and the IP addresses it was first and last seen from
• for each task: the time, the number of model calls, the cost, whether it was free, your IP address (removed after 90 days) and the hashed Mac identifier
• monthly usage counts
• sign in requests: email address, a one time code, IP address and hashed Mac identifier, deleted after one day
• operational logs at Cloudflare with your account ID, task ID, token counts, cost, IP address and part of the hashed Mac identifier; an error line can include up to 300 characters of an error message returned by the AI provider

It does not store your dictation, your requests or what was on your screen.

Payments

Paid plans are bought in the app through Stripe. You enter your card details on Stripe's page, and we never see them. We give Stripe your email address and receive a customer ID and your subscription status.

Who receives data

• Cloudflare hosts this website, our server, its database and its logs.
• Google provides website analytics, only with your consent if you are in Europe.
• Anthropic processes screen help and AI cleanup requests.
• Stripe processes payments.
• Resend sends sign in emails.
• Apple supplies the speech models macOS downloads.

These providers may process data outside Japan, including in the United States. We do not sell personal data.

How long we keep it

Account data is kept while you have an account. When you delete your account in the app, we cancel your subscription, delete your customer record at Stripe, and delete your email address, sessions, usage counts, sign in records, the link between your account and your Macs, and any Mac only your account used. Two things stay without your account, email or IP address, so that free plan limits per Mac keep working: this month's task records (paid tasks also lose the Mac identifier), which are deleted when the month ends, and a marker that your Mac has used its one practice task. Signup records (time, hashed Mac identifier and, for one day, IP address) are kept for 30 days to limit new accounts per Mac and per network. Every day we also delete sessions unused for 90 days and Macs that never signed in after 90 days. Stripe keeps its own records of past payments as the law requires. Logs at Cloudflare are kept according to Cloudflare's retention settings.

Your choices and rights

You can turn screen help off in Settings, and AI cleanup stays off until you turn it on. In the app you can export everything we hold about you, together with what the app keeps on your Mac (Settings, Privacy, Export), and delete your account at any time (Settings, Account). To have your data corrected, or for anything the app does not cover, write to [email protected].

If you are in the European Economic Area, the United Kingdom or Switzerland, you can also object to or restrict processing and complain to your data protection authority. We rely on your consent for website analytics, on our contract with you for your account and paid plans, and on our legitimate interest in preventing abuse for the limits per Mac and per network.

Children

Yubi and this website are not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us data, write to us and we will delete it.

Changes

When this policy changes, we update this page and the date at the top.