Privacy Policy

We collect information from you, from your device, from your use of the Services, and from third parties you choose to connect.

If a Service supports third-party login, payments, cloud storage, analytics, or app marketplace features, we may receive limited information from those providers according to your settings and their policies.

We do not intentionally request sensitive personal information. If you choose to provide it, we use it only for the purpose for which it was provided or as required by law.

• Account and contact details such as email address, user ID, display name, authentication identifiers, preferences, and support details
• AI workflow content such as prompts, uploaded images, video, audio, text, project settings, generated outputs, exports, and creative history
• Purchase and entitlement records such as subscription status, product IDs, receipts, renewal state, refund status, credit balances, and app marketplace confirmations
• Device, log, and diagnostics data such as IP address, device identifiers, operating system, browser, app version, crash reports, timestamps, and interaction events
• Communications such as support emails, feedback, attachments, survey responses, and other messages you send to us
• Security and abuse-prevention signals such as API requests, rate-limit events, fraud indicators, session metadata, and moderation records

We use personal information to provide the Services, secure them, support users, improve reliability, and meet legal obligations.

We may use aggregated, anonymized, or de-identified information for analytics, capacity planning, safety, and product improvement where it cannot reasonably identify you.

• Create, authenticate, administer, and secure accounts and app sessions
• Process AI prompts, uploads, generation requests, previews, exports, credits, and related product workflows
• Provide support, respond to questions, send service messages, and communicate about account or policy changes
• Validate purchases, subscriptions, refunds, entitlements, billing records, taxes, and app marketplace requirements
• Monitor uptime, debug errors, measure feature performance, prevent fraud, and protect users and systems
• Comply with laws, court orders, platform rules, contractual duties, accounting needs, and regulatory requests

AI features may send prompts, uploaded media, settings, or generated outputs to infrastructure providers or model providers so we can deliver the requested result.

We do not use your personal information or uploaded content to train general-purpose AI or foundation models without separate, explicit consent.

AI outputs can be inaccurate, incomplete, or unsuitable for a particular use. You are responsible for reviewing outputs before relying on them.

Where a legal basis is required, the basis depends on the specific activity.

• Contract performance, when processing is needed to provide requested Services or paid features
• Legitimate interests, including security, reliability, support, fraud prevention, safety, and product improvement
• Legal obligations, including tax, accounting, consumer protection, app marketplace, lawful request, and compliance duties
• Consent, for optional features, marketing, cookies, integrations, or any model-training use that requires consent

We share information only when reasonably needed for the Services, legal compliance, security, or user-directed integrations.

We require service providers that process information for us to protect it and use it only for authorized purposes.

• Cloud hosting, storage, AI infrastructure, analytics, customer support, communications, security, and operations providers
• Google Play, Apple App Store, payment processors, and marketplace partners for purchases, subscriptions, refunds, receipts, and entitlements
• Professional advisers such as lawyers, accountants, auditors, insurers, and consultants subject to confidentiality duties
• Authorities, courts, regulators, or law-enforcement agencies when required by law or valid legal process
• Business transaction parties in connection with a merger, acquisition, financing, restructuring, or asset transfer
• Third-party services or integrations when you ask us to connect or transmit information

We may use cookies, local storage, pixels, SDKs, and similar technologies for essential functions, authentication, security, saved preferences, analytics, diagnostics, and optional communications.

You can control many browser technologies through browser or device settings. Blocking some technologies may affect login, security, availability, or product features.

We keep personal information for as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or allowed by law.

Retention periods vary based on account status, product needs, backup cycles, payment and accounting requirements, fraud-prevention needs, legal duties, disputes, and investigations.

When information is no longer needed, we delete it, anonymize it, or isolate it according to our retention and disposal practices.

No internet-connected system can be guaranteed perfectly secure. You are responsible for protecting your account credentials, devices, and access methods.

• Encryption in transit and appropriate protections for stored information
• Access controls, authentication safeguards, least-privilege practices, and internal need-to-know limits
• Monitoring, logging, backups, incident response, vulnerability management, and provider diligence
• Operational controls designed to maintain confidentiality, integrity, and availability

We may process information in the United States and in other countries where we, our app marketplace providers, cloud providers, AI infrastructure providers, or service providers operate.

Those countries may have privacy laws that differ from the laws where you live. Where required, we use appropriate safeguards such as contractual protections and security controls.

The Services are not directed to children under 13 or to anyone below the minimum age required by applicable law.

We do not knowingly collect personal information from children without appropriate consent. If we learn that we have done so, we will take reasonable steps to delete it.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, object to, or withdraw consent for certain processing.

We may need to verify your identity before responding. We may decline or limit a request where law permits or requires us to do so.

• Request access to personal information we maintain about you
• Request correction of inaccurate or incomplete information
• Request deletion of your account or personal information, subject to lawful exceptions
• Request a copy or export of certain information where technically available
• Object to or restrict certain processing where applicable law allows
• Withdraw consent where processing depends on consent

This section explains how users can request deletion of an Alyaya account and what information may be deleted or retained.

Where an account is available, Alyaya apps provide a self-service deletion feature in the account, profile, or settings area. Menu names may change as products evolve, but account deletion remains part of the account management flow where accounts are offered.

To delete your account, open the Alyaya app, go to the account, profile, or settings area, choose the account deletion option, review the deletion notice, confirm the request, and complete any identity verification or confirmation step shown in the app.

After a confirmed deletion request, we delete or de-identify account personal information, subject to lawful exceptions for billing, tax, accounting, marketplace records, security, fraud prevention, dispute handling, backups, or compliance.

We aim to process deletion requests within a reasonable period after verification. Some records may take longer to disappear from backups, logs, analytics systems, or marketplace records.

If you cannot access the in-app deletion feature, contact support and include enough information for us to verify your identity and locate the correct account.

• Information generally deleted: account profile data, non-essential settings, user projects, prompts, media records, generated creative history, and authentication records no longer needed to operate or secure the Services
• Information we may retain: billing, subscription, refund, tax, app marketplace, accounting, security, fraud-prevention, abuse, dispute, backup, legal compliance, and enforcement records
• Support contact for deletion help: support@ai-yaya.net

• California residents may have rights to know, access, delete, correct, opt out of certain sharing, and avoid discrimination for exercising privacy rights
• Virginia and other U.S. state residents may have rights to access, correct, delete, obtain a copy, or opt out of certain targeted advertising, sale, or profiling activities
• We do not sell personal information and do not share personal information with data brokers for their independent advertising purposes

We may update this Privacy Policy to reflect product, legal, technical, operational, or business changes. Material changes will be identified by updating the date above and providing additional notice where required.

• Website: https://www.ai-yaya.net
• Email: support@ai-yaya.net
• Company: Mondragon Portable Toilet L.L.C.
• Address: Mondragon Portable Toilet L.L.C., 7776 County Road 106 S, Alamosa - 81101-9727, United States (US)