privacy policy

yanto (“yanto”, “we”, “us”) is a personal memory service for the content you save. You send us links over iMessage, SMS, Instagram, or TikTok; we analyze them and build you a private, searchable library. This policy explains what we collect, why, and the choices you have. It applies to our messaging bots, the web app at yanto.app, our API, and our MCP endpoint.

what we collect

• Contact and account info: your phone number and/or your Instagram or TikTok username when you message our accounts, your name if you share it, and account linking codes used to connect your channels to one library.
• Messages you send us: the texts, links, and images you send to the yanto number or our bot accounts, and our replies to you.
• Content you save: for each link you share we retrieve the publicly available content and derive a transcript, summary, tags, extracted facts, a thumbnail, and search embeddings. This becomes part of your private library.
• Memory and profile data: to make the assistant useful we store preferences and facts you share in conversation (for example your city or interests), along with conversation history used to answer your questions.
• Technical data: standard logs (timestamps, request metadata, error traces) needed to operate and secure the service.

what we use it for

• Processing the links you send and building your searchable library.
• Answering your questions and sending replies, reminders, and digests you configure.
• Generating your private Spaces and taste profile from your own saves.
• Operating, debugging, and improving the service.

We do not sell your personal data, and we do not use your private library content for advertising.

third-party services we rely on

We share data with service providers only as needed to run yanto: messaging delivery (Blooio / Sendblue for iMessage), AI processing (Anthropic, OpenAI), hosting and storage (Railway, Vercel, Neon Postgres, Upstash Redis, Cloudflare R2). Each provider processes data on our behalf under their own security commitments. When you connect yanto to an AI client via our MCP endpoint, that client can read your saves and memories using your personal access token.

platform content

When you share a link from a platform such as TikTok, Instagram, YouTube, or X, we access only the content at that link in order to build your save. We use platform APIs where we have access to them and honor platform policies. Content remains the property of its creators and its platform; your saved entries are for your personal use.

retention and deletion

We keep your data for as long as you have an account so your memory keeps working. You can delete individual saves at any time, and you can delete your entire account and all associated data — see data deletion instructions. Deletion requests are honored within 30 days, including from backups on their normal expiry cycle.

security

Data is encrypted in transit, access to production systems is restricted, dashboard access uses per-user tokens, and API rendering endpoints are HMAC-signed. No system is perfectly secure, but we treat your library as private by default — nothing you save is visible to anyone else unless you explicitly share a Space.

children

yanto is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has used the service, contact us and we will delete the data.

your rights

You can request a copy of your data, correct it, or delete it by texting the bot or emailing us. Depending on where you live you may have additional rights under laws such as the CCPA or GDPR; we honor access, correction, deletion, and portability requests for everyone.

changes and contact

We will post any material changes to this policy on this page and update the date above. Questions or requests: hello@yanto.app.