Privacy Policy
1. Who we are
The controller of personal data described here is Yoob AI Ltd., 11 Hayachasut St., Beer Sheva 8470912, Israel. Contact: privacy@yoob.com. Data protection questions and requests go to the same address.
For data an SDK customer processes in its own application, that customer is the controller and we act as its processor under our data processing agreement.
2. The short version
The SDK sends us no audio, no video, no transcripts and no rendered frames, because rendering happens on the device. The exception is Yoob voice: if an app uses it, microphone audio goes through our voice relay to OpenAI to generate the reply, and we meter the minutes. The Companion sends what you say to our conversation backend, because that is where its model runs. We do not sell personal data.
3. What we collect, why, and for how long
| Data | Product | Purpose | Legal basis (EU/UK) | Retention |
|---|---|---|---|---|
| Conversation text and audio | Companion | Generating replies; safety (crisis detection) | Contract; vital interests for crisis response | Until you delete it or close your account; then deleted within 30 days |
| Microphone audio through Yoob voice | SDK apps using Yoob voice | Relayed to OpenAI to generate speech; minutes metered | Processor for the SDK customer | Not stored by us after relay; OpenAI per its API data policy |
| Text and audio sent to the voice APIs (Overtone, Undertone, Duotone, Truetone) | Voice APIs | Returning the result; usage metering | Contract; processor for the API customer | Truetone audio is never stored. Other request content is not kept after the response, apart from usage records and up to 30 days of abuse logs |
| Name, email, sign-in identifiers | Both | Account, sign-in, support | Contract | Life of the account plus 30 days |
| API keys, app bundle id, session and licence records | SDK | Licence validation, abuse prevention | Contract; legitimate interests | 24 months |
| Conversation seconds and balance | SDK | Billing | Contract; legal obligation | As tax law requires (7 years in Israel) |
| Payment and tax details | Both, paid | Collected and held by Paddle as merchant of record; we see the outcome, country and last card digits | Contract | Per Paddle’s policy; our records as tax law requires |
| Crash diagnostics | Both, opt-out | Fixing crashes | Legitimate interests | 90 days |
| Support emails | Both | Answering you | Legitimate interests | 24 months |
| Website visits | yoob.com | Counting visits, without cookies | Legitimate interests | Aggregated only |
What we never collect
- Camera or photo access. There is no camera in these products.
- Rendered frames, or any video of a user.
- SDK end-user conversation content when the app brings its own voice or model. It never reaches us.
We do not use personal data for automated decisions with legal or similarly significant effects.
4. Who we share it with
We do not sell personal data and do not share it for cross-context behavioural advertising. We share it with the service providers on our subprocessor list, only to run Yoob; with Paddle, our merchant of record, to take payments; with authorities when the law requires it; and with a buyer if Yoob is sold, under this policy. If you opt into a frontier cloud model or a cloud voice in the Companion, your request goes to the provider you chose, and we name it before you switch it on.
5. International transfers
We and our providers process data in the United States and other countries. For transfers from the EU, the UK and Switzerland we rely on the European Commission’s Standard Contractual Clauses (with the UK addendum), or on a provider’s certification under the EU-US Data Privacy Framework where it has one. Ask us for a copy of the safeguards.
6. Your rights
Depending on where you live, you can ask to access, correct, export or delete your data, object to or restrict processing, and withdraw consent. Email privacy@yoob.com; we verify the request and answer within 30 days. Deleting your account deletes your conversation history. You can complain to your local data protection authority. If you use an app built with the SDK, contact that app’s developer first; we will help them answer.
7. California and other US states
In the last 12 months we collected the categories in section 3: identifiers, commercial information (purchases), internet activity (session and licence records), and audio (Companion and Yoob voice). We use them for the purposes in section 3. We do not sell or share personal information as the CCPA defines those terms, and we do not use sensitive personal information to infer characteristics. You have the right to know, delete and correct, and not to be discriminated against for using these rights. An authorised agent may make a request for you.
8. Children
The Companion is for adults aged 18 and over, and Yoob is not directed at children under 13. If we learn that a Companion user is under 18, we close the account and delete its data. SDK customers whose apps are used by children are responsible for the consents those apps need.
9. Cookies
yoob.com sets no advertising or tracking cookies. See the cookie notice.
10. Security
Data is encrypted in transit, access is limited to staff who need it, and model bundles are signed. No system is perfectly secure; see Security for what we do and do not have yet. We notify affected users and regulators of a personal data breach as the law requires.
11. Changes
We will post changes here and, for material ones, email account holders at least 30 days before they apply.
Last updated 21 October 2026. Questions about this document: team@yoob.com.