Privacy Policy

Effective date: February 14, 2026
Last updated: February 14, 2026

Overview

This Privacy Policy explains how YlanAI collects, uses, stores, protects, shares, and discloses personal information while providing products and services.
This policy applies to the YlanAI website, related pages, and feature services. If a specific feature has separate rules or a supplementary agreement, that rule or agreement applies to that feature first.

When you access, register for, or use the Service, you are deemed to have read and understood this policy. If you do not agree, please stop using the Service.

Collection And Use Of Personal Information

We follow the principles of lawfulness, legitimacy, necessity, and good faith, and process personal information only within the scope necessary to achieve service purposes. Common processing scenarios include:

1. Account and identity management

• We may collect: email address, login identifiers, and basic account information.
• Main purposes: registration and login, identity verification, account security, notices, and service management.

2. Analysis service and conversation interaction

• We may collect: the questions you submit, background information, including birth information you choose to provide, preference settings, and related context.
• Main purposes: generating analysis results, improving interaction quality, and maintaining feature availability.

3. Payment and settlement

• We may collect: order information, payment status, and records of subscription and analysis allowance changes.
• Main purposes: billing and settlement, bill reconciliation, after-sales support, and dispute handling.

4. Operations, maintenance, and security risk control

• We may collect: device information, access logs, error logs, IP address, timestamps, and similar data.
• Main purposes: troubleshooting, stability maintenance, security auditing, and risk identification.

The legal bases for our processing include, but are not limited to:

• what is necessary to perform the service contract between you and us
• what is necessary to fulfill legal obligations
• what is necessary to maintain service security and normal operation
• processing carried out with your consent

Important notes:

• We do not use background information you choose to provide, including birth information, question content, or conversation records for model training.
• We do not sell your personal information.
• We do not share your personal information with third parties for their independent marketing purposes.

How We Use Cookies And Similar Technologies

We may use cookies, local storage, and similar technologies to ensure normal operation of the Service, mainly for:

• necessary functions: maintaining login status, session continuity, and basic security controls
• preference memory: language, display, and interaction settings
• security and performance: abnormal access detection, basic performance analysis, and problem tracing

You may manage or clear cookies through your browser settings.
If essential cookies are disabled, some features may become unavailable or the user experience may degrade.

Information Storage

We determine storage scope, method, and retention period under the principle of minimum necessity:

• By default, we do not store personal inputs or conversation content for the long term.
• You may delete conversation records or clear history through in-product features.
• For information such as orders, billing, risk control, and security logs, we may retain data for the period necessary to achieve the processing purpose or meet legal obligations.

After the storage purpose is reached or the retention period is no longer necessary, we will delete or anonymize the information within the scope permitted by law.
If you close your account, and subject to legal and regulatory requirements, we will stop providing services to that account and process or delete the related information.

Information Security

We take reasonable and practical security measures to protect personal information, including but not limited to:

• protection during transmission and storage
• access control, minimum permissions, and identity verification
• security monitoring, auditing, and anomaly alerts
• internal management systems and personnel security training

Please understand that the internet environment is not absolutely secure.
If a personal information security incident occurs or is likely to occur, we will take response measures under applicable law and regulations and provide notice and reports when necessary.

Delegated Processing, Third-Party Sharing, And Public Disclosure

1. Delegated processing

We may engage cloud service providers, payment providers, technical support providers, and security service providers to process necessary information, and require them by agreement to process only within the delegated scope and to fulfill confidentiality and security obligations.

2. Sharing with third parties

We share information only when necessary under the following circumstances:

• with your explicit authorization and consent
• where necessary to perform a contract or provide service functionality
• where necessary to fulfill legal obligations or respond to lawful requests from competent authorities
• where necessary to protect the life or property of users or the public

3. Public disclosure

We publicly disclose information only with your separate consent or where expressly required by law and regulation.

4. Business changes

If a merger, division, asset transfer, or similar event involves transfer of personal information, we will require the successor to remain bound by this policy. If the processing purpose changes, we will obtain any required authorization again according to law.

5. Cross-border transfer

If cross-border processing or transfer is necessary for service operations, we will take the required protective measures under applicable law and fulfill related obligations.

Your Rights

Under applicable laws and regulations, you generally have the following rights regarding your personal information:

• inquiry and access
• correction and supplementation
• deletion
• withdrawal of consent
• account closure
• obtaining an explanation of processing rules and feedback on processing results

You may submit rights requests through in-product features or by contacting us via email.
To protect account security, we may verify your identity first and complete processing within the period required by law or within a reasonable period.
If you disagree with the outcome, you may request further review by contacting us again.

Changes

We may update this policy based on product iteration, compliance requirements, or business changes.
The latest version will be published on this page with the update date. If a change may materially affect your rights and obligations, we will notify you through reasonable means such as in-product notice.

Continued use of the Service after the update takes effect means that you accept the updated Privacy Policy.

Protection Of Minors

The Service is more suitable for users with independent judgment.
Minors should use the Service under guardian guidance, and the output should not be the sole basis for major decisions.

If we discover processing of a minor's information that does not comply with legal requirements, we will take measures such as deletion, correction, or restriction of processing as required by law.
If a guardian has questions about the processing of a minor's information, they may contact us using the contact method in this policy.

Contact Us

If you have any questions about this policy, personal information processing rules, exercise of rights, or complaints and suggestions, you can contact us at:

• Email: support@ylan.ai