Privacy Policy
Effective: October 8, 2026
This policy explains how gi2t Labs LLC ("we") handles personal information when you use Yooha: the app, the cards people share through it, the messages it sends, and this website.
What we collect
Account information. Your name, the email address you sign in with, your language and time zone, and the sign-in methods you set up, such as a passkey.
What you put into Yooha. The things you ask Yooha to help with, the cards you send, the answers you give, your messages, and the people and groups you coordinate with.
What other people give us about you. When someone sends you a card or adds you to a group, they give us your name and your email address or mobile number. We use these only to deliver what they sent and to let you respond.
If you answer a card without an account. We keep your answer and, only if you choose to give them, a name and a way to reach you.
Technical information. Records of the messages we deliver (we store the recipient's address only in a protected, coded form, not as the address itself), basic device and app information, and short measurements of how fast pages load.
Cookies and similar technologies. We use cookies and local storage only to keep you signed in, keep Yooha secure, remember your settings and recognize repeat answers to a card from the same device. We do not use advertising trackers, and we do not let other companies collect information about your activity across sites or apps through Yooha. Because we do not track you across sites, we handle every visit the same way whether or not your browser sends a Do Not Track signal.
How we use it
We use your information to run Yooha for you: to deliver cards and messages, keep track of what has been answered and done, remind you when you ask us to, secure your account, prevent spam and abuse, and fix problems.
Yooha uses AI to sort, summarize and draft. Nothing it suggests is sent, paid or decided without your confirmation. Yooha's AI features run on infrastructure we operate, or that our hosting provider runs for us under our own account.
Things we do only with your permission
Some features need more of your information than the rest of Yooha. We offer each of them as a separate choice, explain what it uses before you turn it on, and let you turn it off at any time without affecting the rest of Yooha. For example:
- reading your phone's contacts to find people you know on Yooha;
- sending your information to an outside AI provider;
- connecting what you do in one organization or app that uses Yooha with what you do in another;
- trust or reputation signals about you that other people can see;
- using your information to choose sponsored content or offers for you.
Before we launch a feature like these, we will update this policy.
Yooha's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
What we never do
We do not sell your personal information, and we do not share it with other companies for their advertising.
We do not give anyone a universal social score. Signals we use to stop spam and abuse are used only for that.
We do not use the data of organizations that use Yooha to compete with them.
We do not share mobile numbers or consent to receive text messages with third parties or affiliates for their marketing or promotional purposes. Text messaging opt-in data and consent are never shared with any third party.
If you use Yooha through an organization or another app
Organizations, such as a church, a business or a club, and apps built on Yooha decide how Yooha is used in their own spaces. In those spaces, the organization's administrators can see what is shared there and may keep or delete it under their own rules, and the organization's or app's own privacy policy also applies. For that content, we act on the organization's instructions. Your account, your sign-in and our delivery records stay under this policy.
One Yooha account can belong to several organizations. An organization cannot see what you do in another one, and we do not combine your activity across organizations for anything other than running your own account, unless you allow it.
How we protect it
Every kind of data in Yooha is classified by how sensitive it is, from public to highly sensitive (such as health, religious or children's information) and regulated (such as credentials). The class decides how the data is encrypted, who may see it, how long it is kept, and whether AI may read it. Highly sensitive data and credentials are never sent to an outside AI service. Information about children that adults share with us, for example for a group activity, is treated as highly sensitive.
Data is encrypted at rest and whenever it travels over a network, including to our service providers. Once a text message or email leaves us, it travels through mobile carriers and email providers, which may not encrypt it end to end.
Our staff do not access your content, except in an emergency to keep Yooha running or secure, or when the law requires it. Every such access is recorded, and the organization concerned can see it.
Who processes it for us
We use a few service providers, each only for the service it provides to us, under contract, and required to protect your information at least as well as this policy does: Amazon Web Services (hosting, AI models run under our own account, our own mail server and text-message delivery), Cloudflare (network, security, the pages you open from a shared card, and encrypted backups), Supabase (database and sign-in), and Apple and Google (notifications to your phone; Apple also for sign-in, if you choose to use your Apple account).
If you allow a feature that uses an outside AI provider, we will first tell you who the provider is, what it receives and how long it may keep it. It receives only what a request needs and must never use your data to train its models.
When we share information
We share information only:
- with the people and organizations you coordinate with, as part of what you send and share;
- with our service providers, as described above;
- when you ask us to;
- when the law requires it, for example in response to a valid legal order;
- if gi2t Labs LLC is part of a merger, acquisition or sale of assets. Your information would remain under this policy, and we would tell you before it became subject to a different one.
How long we keep it
We keep your content while your account is active and while the coordination it belongs to needs it. Message delivery records are kept for 30 days. Records of consent to receive text messages are kept for five years. Encrypted backups are kept for up to about a year.
When you delete your account, we destroy the keys that protect your content, which makes it unreadable in our systems, including in backups. Copies already delivered to other people, such as emails and text messages, are outside our control.
Your answers and messages in cards and groups started by other people also become unreadable; they may still see that you answered.
After deletion we keep only what we must: pseudonymous facts, such as that a card was answered, without your content or identity, until their retention period ends; and records the law requires us to keep, such as records of consent to receive text messages.
Your choices and rights
You can ask to see, correct, receive a copy of, or delete your information, and you can withdraw any consent you gave, including consent to text messages (reply STOP). To do this, write to support@gi2t.com. If you have no account, we verify the request through the email address or mobile number you gave us. We answer within 30 days.
Depending on where you live, for example in California or another U.S. state with a privacy law, you may have further rights. We do not treat you differently for using them.
Children
Yooha is not meant for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, write to us and we will delete it.
Where your data is stored
We store data in the United States. Each person's and organization's data has a home region; only references and the minimum that is needed move between regions. Some providers, such as our network and notification providers, may handle data in other countries to deliver it.
Changes to this policy
If we change this policy in a way that matters, we will tell you in the app or by email before the change takes effect. We will not use information we already have in a materially different way without your permission. The date at the top shows the current version.
Questions about privacy: write to support@gi2t.com, or to gi2t Labs LLC.
- Operated by
- gi2t Labs LLC
- support@gi2t.com