Privacy Policy
The short version
- Your voice never reaches our servers. There is nothing on our side to store.
- Transcripts stay on your phone. They are written to the device and are never uploaded. Delete them in the app, or delete the app.
- There is no account to fill in. No name, no email, no password, no phone number, no social login. Your account is a random identifier and a cryptographic key held by Apple's hardware.
- No tracking, no advertising, no profiles. No analytics SDK, no advertising identifier, no cookies on this website.
- We sell nothing, and share nothing for advertising. Ever, to anyone, for any price.
This box is a summary and is not the policy. The numbered sections below are.
- 1Who we are
- 2Everything we capture
- 3Yomita Translator
- 4Yomita Tutor
- 5This website
- 6Yomita Studio
- 7Where it is stored
- 8How long we keep it
- 9Who else processes it
- 10What we never do
- 11Your choices and rights
- 12Children
- 13Changes, and contact
1Who we are, and what this covers
Yomita builds voice AI for the moments you look up from the screen. This policy covers everything we operate under the Yomita name:
- Yomita Translator, the iOS app — a real-time two-way voice translator.
- Yomita Tutor, the iOS app — spoken language classes.
- yomita.ai, this website, including the blog.
- Yomita Studio, an image and video generation service reached over MCP, described in section 6.
Yomita is a product of Aissistant Inc., a Delaware corporation, which is the data controller for everything described here:
Aissistant Inc.651 N. Broad St., Ste 201
Middletown, DE 19709
United States
hello@yomita.ai
You can reach us at that address at any time, and section 13 says what we will do about each kind of request.
We have written this to be read rather than to be survived. Where a sentence could be vaguer and safer, it is not.
2Everything we capture, in one table
This is the whole list. If something is not in this table, we do not have it — and the second column is the part worth reading, because most of what the apps handle is captured on your phone and never travels to us at all.
| What | Where it goes | Do we store it? | Why it exists |
|---|---|---|---|
| Microphone audio | From your phone directly to the AI model that translates or teaches. It does not pass through our servers. | Never. We never receive it. | Translating or teaching, in real time. |
| Transcripts and lesson results | Produced on your phone by the model's reply and written to the phone's own storage. | Never. They are not uploaded. | Your history, your scores, your progress. |
| Device attestation | Apple's App Attest key identifier and its public key, sent to our server once, when the app first runs. | Yes. | Proving the app is the genuine app, so the credentials it is handed cannot be minted by anything else. |
| Account identifier | A random identifier our server generates. It is not derived from anything about you or your device. | Yes. | Holding your balance and your purchases. |
| Session settings | What you chose before you started: the languages, the voice, which lesson. | Yes. | Configuring the session and re-opening it if the connection drops. |
| Usage metering | When a session opened and closed, and how many minutes it used. | Yes. | Your balance. One credit is one minute, and the ledger is how that arithmetic can be checked. |
| A line you ask to hear again | Its text — not your voice — passes through our server so it can be spoken aloud. | No. It is used and discarded. | Hearing again something you missed. |
| Purchases | Apple's transaction identifier, which product, the price, the time. Apple takes the payment. | Yes. | Crediting what you bought, and refunding it if something went wrong. |
| IP address | Seen by our server on every request, as it is by every server on the internet. Held in memory for rate limiting, and written to our load balancer's access log. | In logs only, for 90 days. | Stopping abuse. Nothing joins these logs to an account. |
What we do not capture at all
No name. No email address. No password. No phone number. No contacts, no photos, no calendar, no location, no health data, no advertising identifier. We do not ask your age, your gender or your country. There is no sign-up form in either app because there is nothing we would put in it.
How this maps to Apple's App Privacy label
The label on the App Store listing declares Audio Data (app functionality, not linked to you, not used for tracking) because audio does leave your device, even though it leaves it for the model and not for us; and Identifiers → User ID (app functionality, linked to you, not used for tracking), which is the random account identifier above. Nothing is declared under tracking, because nothing tracks you — the apps have no advertising identifier, no analytics SDK and no third-party tracking code in them, which is also why you are never shown an App Tracking Transparency prompt.
3Yomita Translator: what happens to your voice
Two people, one phone. Your voice is used to translate what is being said, as it is being said, and for nothing else. It is not recorded, and it is not stored on our servers.
The transcript stays on the phone. It is written to the device as the conversation goes, and it is never uploaded — so it is not ours to read, to lose or to hand over. You can delete one conversation by swiping it, or all of them from the History page, and deleting the app takes the lot.
What does reach us is in section 2, and it is bookkeeping: which languages and voice you chose before you started, how many minutes the session ran, and what you bought.
4Yomita Tutor: what happens in a lesson
The same rule. Your voice is used to run the lesson while it is happening, and for nothing else. It is not recorded, and it is not stored on our servers.
Your results stay on the phone — what you got right, what to fix, whether you passed. We do not know which lessons you have taken, how you scored, or how often you practise. What our server holds is that an account registered for a course, which is the purchase and not the performance.
The tutor asks for the microphone and nothing else. iOS will tell you so the first time, and you can withdraw it afterwards in Settings.
5This website, and the blog
No cookies. yomita.ai sets none — not for analytics, not for preferences, not for anything. There is no cookie banner because there is nothing to consent to.
No analytics and no tracking pixels. We do not run Google Analytics or any equivalent. We do not know who you are, how you got here, or where you went next.
One third party: Google Fonts. The pages load their
typefaces from fonts.googleapis.com and
fonts.gstatic.com, so Google's servers see your IP address and
browser version as part of serving the font files. That is the only
external request any page on this site makes; the site's own content
security policy permits no others.
Server logs. Our load balancer records the ordinary details of each request — time, URL, status, IP address, user agent — and deletes them after 90 days. We read them to answer questions like which search crawlers fetch the site. They are not joined to anything else.
6Yomita Studio
Studio generates images and short video, and it has no app: it is reached over MCP from an AI assistant such as Claude or ChatGPT. It is off by default and is available only to Yomita operators, who sign in with Google. If you have not been given access, none of this applies to you.
Where it is on: a prompt is sent to the provider that generates from it — OpenAI, Google or Krea. The result is stored in our own bucket and handed back as a link that expires after 24 hours, because the providers' own URLs cannot be opened without our key. Prompts are not kept in a database. The operator's Google email address is recorded with any administrative action they take, so that a correction to the ledger says who made it.
7Where it is stored, and who can reach it
Everything in the "yes" column of section 2 lives in one database, run by
Amazon Web Services in the United States (region
us-west-1). Generated media and server logs are in S3 buckets
in the same account and the same region.
In transit everything is encrypted: HTTPS to our API, HTTPS or DTLS from your phone to the provider. At rest the database and the buckets use the storage encryption AWS applies by default. Our provider API keys are held in AWS Secrets Manager and are read only by the server process that needs them; no key is ever written into either app's code or shipped inside a download — a check in our build pipeline fails if one appears.
Access is limited to the people who operate the service, through the operator console on a separate domain that requires a Google sign-in on an allow-list. The console can read balances and ledgers. There is nothing in the system it could read that would tell it your name, because your name is not in it.
If you are in the EEA, the UK or Switzerland: the transfer of the data in section 2 to the United States relies on the standard contractual clauses in our agreements with AWS and with each AI provider named in section 9.
8How long we keep it
| What | Kept for | Then |
|---|---|---|
| Audio | Not kept — never received | — |
| Transcripts, lesson results | On your phone, until you delete them | Gone when you delete them, or when you delete the app |
| A repeated line of text | The length of the request | Discarded. Never written down |
| Account, device credential | While the account exists | On deletion the credentials are revoked immediately and nothing can sign in as the account again |
| Session and usage records | While the account exists | Retained after deletion as part of the ledger below |
| Purchases and credit ledger | Seven years | Kept for tax and refund obligations. It is a financial record of money that moved; it holds no name, email or password, because the system has none |
| Generated media (Studio) | Links expire after 24 hours | Objects are deleted when they are no longer referenced |
| Server access logs | 90 days | Deleted automatically |
Deletion is a soft delete of the account and a hard revocation of its keys. We say so plainly rather than claiming to erase everything: the ledger row stays, because a financial record with rows torn out of it is not a record. What goes is every way of authenticating as that account. Nothing left behind identifies a person.
9Who else processes it
These are everyone. We add no processor without updating this list.
- OpenAI and Google — the AI models behind translating and teaching.
- Krea — video generation for Yomita Studio only. Nothing from either app reaches it.
- Apple — takes your payment and proves the app is genuine. We never see a card number.
- Amazon Web Services — hosting for everything in section 7.
Each of them processes data only on our instructions, under a written agreement, to a standard no weaker than this policy. We have not agreed to let any of them train a model on what you say, and the terms we are on say that content sent to them is not used to train their models.
Worth being exact about the shape of that: your voice reaches the AI model and never reaches us. The transcript the model gives back is kept on your phone and nowhere else.
10What we never do
- We do not sell your data. Not to anyone, at any price, in any form. We have never done it and the business is not built to need it.
- We do not share it for advertising and we run no advertising of our own inside either app.
- We do not track you across apps, sites or devices. There is no advertising identifier, no fingerprinting, no cross-app linkage. Under California law this means we do not "sell" or "share" personal information, and there is nothing for a Do Not Track or Global Privacy Control signal to switch off.
- We do not build a profile of you. We hold no preferences beyond the ones you set on your own phone, which stay there.
- We do not listen outside a session. The microphone is open while a conversation or a lesson is running, and iOS shows its own indicator the whole time it is. Nothing records in the background.
- We do not read your transcripts, because we do not have them.
11Your choices, and your rights
What you can do yourself, right now
- Revoke the microphone. iOS Settings → the app → Microphone. The app cannot work without it, and it asks for nothing else.
- Delete your transcripts. In Yomita Translator, the History page: swipe a conversation to delete one, or use Delete all.
- Delete your account, from inside the app. Yomita Translator, Settings, at the bottom: Delete account. It asks once and then does the whole thing — the account is deleted and this device is revoked on our side immediately, and your remaining minutes, your purchase history and every saved conversation go with it. It cannot be undone, and you do not have to write to us or wait for us. The app opens a new account the next time you use it.
- Delete everything on the device. Deleting the app removes the transcripts, the lesson results, the saved preferences and the credential in the Keychain.
What to ask us for
Everything below, and deletion too if you would rather we did it. Write to hello@yomita.ai. Because there is no name or email in our records, we identify an account only by its identifier — open Usage in the app and tap the account id to copy it, and include it in your message. Without it we have no way to find your account, and no way to be sure we are not handing somebody else's.
- Deletion. The button above is the fast way. If you ask us instead, we delete the account and revoke every credential on it within 30 days and usually the same day. Section 8 says exactly what survives and why.
- A copy of what we hold. We will send you the whole of it: the account record, the session and usage rows, the purchases, the ledger.
- Correction of anything in it that is wrong.
- Objection, restriction, or a complaint. If you are in the EEA or the UK you may also complain to your national data protection authority; we would rather you came to us first, but it is your right either way.
We charge nothing for any of this and we will not ask you why. Our legal basis for the processing in section 2 is the performance of the contract you entered by using the app, plus our legitimate interest in preventing abuse for the logs and the rate limiting.
12Children
Yomita is not directed at children under 13, and we do not knowingly collect anything from one. The apps have no chat, no user-generated content, no social features and nothing to post to. If you believe a child has used the app and you would like the account removed, write to us and we will remove it without asking for anything further.
13Changes, and how to reach us
When this policy changes we will change the Effective date at the top, and for anything that materially affects what we capture or who receives it we will say so in the app's release notes as well. The previous wording stays in our public repository's history, so a change is a thing somebody can read rather than a date that moved.
For anything in this document — a question, a request, an objection, or a sentence you think is wrong: hello@yomita.ai. A person reads it.