Privacy Policy

Effective date: September 14, 2026

Yevli follows data-minimisation principles. Detailed Apple Health, cycle, illness, medication, meal, workout and InBody records remain on your device by default. We do not use health information for advertising or cross-app tracking, and we do not sell it to data brokers.

Data we process

• On-device health records: Records you enter and Apple Health data you allow Yevli to read. Yevli writes only water and manual weight entries that you choose to save.
• Member account: Firebase Authentication processes the Apple user identifier and any name or email Apple chooses to provide when you use Sign in with Apple.
• Plus cloud features: Subscription status, push tokens, reminder schedules, challenge totals, de-identified numeric aggregates and AI reports. The cloud may store reminder schedules, including medication reminder times and scheduled dates/times for cycle reminders, but does not store medication names, dosages, medication intake records or raw cycle records.
• Photo recognition: Nutrition-label, InBody and workout-plan photos are processed temporarily on your device with Apple Vision. Original photos are not permanently stored and are not sent to Firebase or OpenAI. Yevli keeps only values you confirm.

Service identifiers and diagnostics

Account identifiers, purchase history, and device identifiers needed for notifications support account, subscription, and push features and may be linked to your account. Firebase services also process other diagnostic data for analytics and app functionality, and other data types for analytics, without linking those categories to your identity. These data are not used for cross-app tracking.

Purpose and retention

We process data only to provide requested features, verify Plus access, send enabled reminders, explain health trends, protect the service and prevent abuse. Plus de-identified numeric summaries may be sent through Firebase to OpenAI. By default, OpenAI may retain API inputs and outputs for up to 30 days for abuse monitoring, except where legal or security requirements apply. API data is not used for model training unless the API account explicitly opts in to sharing data for that purpose. Photos are not part of that process. Subscription-notification deduplication records are retained for up to 180 days, and text-summary quota records are automatically removed after their reset period. Unless otherwise stated, account-associated cloud data is retained while the account is in use or for as long as needed to provide the features. When you delete your account in the app, related cloud data under Yevli’s control is deleted. Apple may retain App Store purchase records under its own policies.

Your choices

You may deny or revoke Apple Health and notification access, export or delete local Yevli records, and delete your member account and related cloud data in the app. Deleting Yevli data does not delete samples already written to Apple Health.

Age and health notice

Yevli is intended for people aged 13 or older. It is not a medical device and does not provide diagnosis, treatment or emergency services.

Contact

Data controller: Xuan-Yu Teng
Privacy and support email: kynehsiehbts@gmail.com