Privacy Policy

How we collect, use, and protect your personal information

Overview

At YBee, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.

YBee is operated by Amirhossein Ghasemi Moroodi, who is the controller responsible for the processing of personal data described in this policy.

Last Updated: September 9, 2026

Effective Date: September 9, 2026

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

  • Register for an account
  • Use our app creation tools
  • Contact us for support
  • Subscribe to our newsletter
  • Participate in surveys or promotions

This information may include:

  • Name and email address
  • Account authentication identifiers (email address, user identifier; password credentials and authentication tokens are processed directly by our identity provider, Firebase Authentication, and are never received or stored in plaintext by YBee)
  • Profile information
  • Payment information (processed securely by third parties)
  • Communication preferences

Automatically Collected Information

When you use our services, we may automatically collect:

  • Device information (type, operating system, browser)
  • Usage data (features used, time spent, interactions)
  • Log data (IP address, access times, pages viewed)
  • Cookies and similar tracking technologies

Device & Push Notification Data

When you grant permission to receive notifications on your device, we collect and process:

  • Unique push notification tokens generated via platform notification services (Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM))
  • Device platform metadata (such as operating system and platform type: iOS, Android, macOS, or Web)
  • Associated device registration and update timestamps

We use this data strictly to deliver operational notifications, including background build completions, publishing updates, and important service alerts. Push notifications are optional; you can enable or disable them at any time in your device system settings. When you log out of your account on a device, that device's push notification token is unregistered and removed from our active notification system.

App Creation Data

When you create apps using YBee, we collect:

  • App content and configurations
  • Project files and assets
  • Publishing preferences
  • Publishing metadata, public URLs, provider identifiers, and app analytics where that feature is enabled
  • Natural language prompt inputs, voice prompts, and specifications provided for app/game generation.

Reports and Moderation Data

When an app is reported, appealed, reviewed, restricted, or removed, we may collect:

  • The reported URL, category, explanation, and supporting information
  • The reporter's name and contact email, which are optional across all report categories under EU DSA Article 16 unless voluntarily provided for status updates
  • IP address, user agent, submission time, and abuse-prevention signals
  • Communications with the reporter and publisher
  • Review notes, decisions, reasons, evidence, and appeal outcomes

Legal Bases for Processing

  • Contract: To create accounts, generate projects, publish apps, provide subscriptions, and deliver requested support.
  • Legitimate interests: To secure YBee, prevent abuse, improve reliability, investigate reports, enforce our Terms, and establish or defend legal claims.
  • Legal obligations: To respond to lawful orders, handle legally sufficient content notices, keep required financial records, and comply with applicable law.
  • Consent: For optional website analytics, marketing communications, or another purpose where we specifically ask for consent.

You may withdraw consent at any time without affecting processing that was lawful before withdrawal. Where we rely on legitimate interests, you may object as described below.

Published Apps and Creator Responsibilities

Published apps are publicly accessible. App code, assets, names, descriptions, icons, public URLs, and related metadata may be delivered to anyone who visits the app.

The creator of a published app is independently responsible for personal data that the creator's app collects or sends to external services. Creators must provide their own appropriate privacy information and lawful basis where their app collects personal data. YBee remains responsible for processing that YBee performs for its own platform, security, publishing, and moderation purposes.

How We Use Your Information

We use the collected information for various purposes:

  • Service Provision & AI Generation: To provide and maintain our services, including processing your prompts to automatically generate your custom apps and games.
  • Account Management: To create and manage your account
  • Communication: To send you updates, support responses, and marketing communications
  • Personalization: To customize your experience and recommend relevant features
  • Analytics & Service Improvement: To understand how our services are used and analyze aggregated, anonymized prompt logs to refine our app generation engine, improve runtime reliability, and optimize overall product quality.
  • YBee Model Evaluation and Training: We may use data that has been irreversibly anonymized or aggregated to evaluate, improve, and train YBee models and systems. YBee does not use identifiable or pseudonymized prompts, project content, feedback, or generated output to train its own models.
  • Security: To protect against fraud, abuse, and security threats
  • Legal Compliance: To comply with applicable laws and regulations

Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties, except in the following circumstances:

Service Providers

We may share information with trusted third-party service providers who assist us in:

  • Cloud hosting and data storage
  • Published-app hosting and content delivery, including providers such as Surge or here.now when configured
  • Payment processing
  • Analytics and performance monitoring
  • Customer support
  • Marketing and communication services
  • AI Models, API Aggregators, and Large Language Model (LLM) Providers: Providers such as OpenRouter, OpenAI, Anthropic, or other providers selected by YBee may process prompts, specifications, generated output, and related technical metadata to provide app and game generation. We transmit this information securely and, where reasonably possible, minimize or remove directly identifying information.

AI Provider Retention and Model Training

We may select, route between, add, or replace AI models, model versions, API aggregators, and AI providers as the Service evolves. Their retention and data-use practices are not identical. Depending on the provider, model, account configuration, and available privacy controls, an AI provider may retain or use submitted prompts, specifications, generated output, or technical metadata for safety and abuse monitoring, service improvement, or model training. YBee cannot guarantee that every provider offers zero retention or excludes submitted data from training.

We seek to use appropriate contractual and technical safeguards and privacy-protective settings where reasonably available. We do not authorize providers to use personal data beyond the applicable agreement, disclosed purposes, and lawful basis. If a materially different use requires consent or another notice under applicable law, we will request that consent or provide that notice before enabling the use. Do not include confidential, regulated, sensitive, or unnecessary third-party personal data in prompts.

Legal Requirements

We may disclose your information if required by law or in response to:

  • Court orders or legal processes
  • Government requests
  • Protection of our rights and safety
  • Investigation of fraud or security issues

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, including providing the Service, maintaining security, resolving disputes, and meeting legal obligations. Retention is determined using the following criteria:

  • Account and project data are generally retained while the account or project remains active and then removed or anonymized subject to backups and legal obligations.
  • Published content and publishing metadata are retained while the app is live and for a limited period afterward where necessary for recovery, abuse prevention, or legal claims.
  • Reports, moderation evidence, and appeals may be retained after resolution where necessary to demonstrate compliance, address repeat abuse, or establish or defend legal claims.
  • Security and technical logs are retained for a limited operational period unless an incident requires longer preservation.
  • Irreversibly anonymized or aggregated evaluation and training data may be retained because it no longer identifies an individual.
  • Financial and transaction records are retained for statutory accounting and tax periods.

When data is no longer required, we delete or anonymize it. A legal hold, unresolved dispute, or binding legal requirement may extend an otherwise applicable retention period.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

  • Encryption: Data is encrypted in transit and protected using storage safeguards appropriate to the service
  • Access Controls: Limited access to personal information on a need-to-know basis
  • Regular Audits: Security practices are regularly reviewed and updated
  • Secure Infrastructure: We use industry-standard security protocols
  • Employee Training: Staff are trained on data protection practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

Access and Portability

  • Request access to your personal information
  • Receive a copy of your data in a portable format

Correction and Updates

  • Update or correct inaccurate information
  • Complete incomplete information

Deletion

  • Request deletion of your personal information
  • Close your account and remove associated data

Restriction and Objection

  • Restrict processing of your information
  • Object to certain types of processing
  • Opt-out of marketing communications
  • Withdraw consent where processing is based on consent

Complaints

You have the right to lodge a complaint with the data-protection supervisory authority in the EU Member State of your habitual residence, place of work, or the alleged infringement. We encourage you to contact us first so we can try to resolve your concern.

To exercise these rights, please contact us at [email protected].

International Data Transfers

Your information may be transferred to and processed in countries other than your own. Where data-protection law requires a transfer mechanism, we use an applicable safeguard such as:

  • Adequacy decisions by relevant authorities
  • Standard contractual clauses
  • Binding corporate rules
  • Certification schemes

Children's Privacy

Our services are not intended for children under 13 years of age. Where consent is the applicable legal basis, users below the relevant digital-consent age, including users under 16 in the European Economic Area unless local law provides otherwise, require authorization from a holder of parental responsibility. We may take reasonable steps to verify that authorization.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected].

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will:

  • Post the updated policy on this page
  • Update the "Last Updated" date
  • Notify you of significant changes via email or app notification
  • Provide a summary of key changes

We process personal data in accordance with the applicable legal bases set out in this Policy. Material changes to our data processing activities will be communicated through advance notices, email, or in-app updates, and consent will be requested where required by applicable data protection laws.

Questions About Privacy?

If you have any questions about this Privacy Policy or our data practices, please contact our privacy contact.

Email: [email protected]