Privacy policy for families

Effective September 11, 2026. This policy covers the current consumer Yuna app on iPhone, iPad and Android, whether downloaded from the Apple App Store, Google Play or another app store, and yunasworld.com.

The short version

No adverts, data sales, cross-app tracking or child-to-stranger chat. A parent can review their child's Yuna activity and delete the family account. Chat, photo and voice features stay locked until the signed-in parent approves the current disclosure and verifies the account email with a time-limited code.

What the app collects

Parent account email and credentials; the child nickname, age, optional profile photo and interests entered by the parent; child messages and Yuna replies; photos deliberately chosen for Chat, Snap, Homework or a profile; creations, learning progress and feature-usage counts; and technical security information such as device name, account-scoped device identifier and IP address. Apple's Speech service may process microphone audio and Yuna receives the resulting transcript. The Animal Mirror camera feed stays on the device.

Animal Mirror and TrueDepth

With camera permission, Animal Mirror uses Apple’s TrueDepth camera and ARKit face-tracking APIs on supported devices to detect facial expressions and head movements, such as blinking, smiling and turning the head. This information is used only to animate the animal character in real time.

Camera images and face-tracking data are processed on the device. Yuna does not record or persistently store this data, send it to its servers, or share it with third parties. Face tracking stops when you leave Animal Mirror, and camera permission can be withdrawn in the device’s Settings.

If you choose to save a picture, only the animated animal character is saved to your photo library—not the camera image or underlying face-tracking data.

Parent approval and withdrawal

We record the disclosure version, approved processing scopes, verified parent email and approval date. The parent can withdraw in Grown-ups dashboard → Account → Privacy. Child AI, photo and voice features then stop until approval is given again. Account deletion removes the family account and cloud data within 30 days, except records we must retain by law.

Optional Family Safety location

Family Safety location is separate and off by default. Yuna collects this child device’s precise location, including in the background, and stores it separately in Yuna’s secure cloud so only signed-in grown-ups in this family can view it. You can switch sharing off at any time. Switching it off, withdrawing parent permission or deleting the account stops reporting and deletes the saved location.

Yuna Explore

Explore is off by default and can only be enabled by a parent or carer. It records the child profile's search terms and the URLs, hosts, titles and times of pages opened or requested so the child can revisit searches and the parent can supervise activity. Before anything is shown, Yuna downloads a bounded copy without website cookies or credentials and checks the page for the active child's age. We retain the page URL, host, title, age band, safety result, permitted capabilities and a content fingerprint. Search and page history is kept for 30 days unless a grown-up clears it sooner. Full page text is not added to the family account. Safe screened image bytes may remain in a transient in-memory cache for up to one hour and are not persistently stored as family content. Exact-page approval records contain the URL, fingerprint and approval time; they stop applying when the checked content changes.

Every page, link and redirect remains covered until its scan and loaded-page verification succeed. Unsafe or unavailable pages cannot be approved. Sign-ins, messaging, forms, purchases, downloads, uploads, unsupported media and access to location, camera or microphone are blocked. The parent can clear Explore history and saved pages from the dashboard.

Service providers

Yuna's AI, through Yuna's secure cloud, processes approved text, limited profile context and deliberately chosen photos to generate and safety-check replies. A grown-up-selected profile photo may be processed there for its safety check. When a grown-up uses Ask Yuna to plan, Yuna's AI processes the grown-up's planning messages and recent planning conversation, the child's nickname, the current weekly lesson schedule and completion status, and candidate next skills through Yuna's secure cloud. For curated image search, Yuna's AI processes the search subject and up to six candidate thumbnails fetched by Yuna so unsafe or irrelevant results can be removed. For Explore, Yuna's AI receives the active age band and a bounded page title and text extract, or screened image candidates, through Yuna's secure cloud only to classify whether the content is suitable. It also receives Yuna's reply text to generate Yuna's spoken audio. Raw microphone recordings are not sent to Yuna's AI or Yuna's secure cloud. Apple provides Sign in with Apple, purchases, subscriptions, speech recognition, push notifications and maps. Google provides optional grown-up sign-in. Those sign-in providers return an adult account identity token and, where supplied, the grown-up's name or email; child profile data is not sent to them for sign-in. Pixabay supplies licensed SafeSearch image results. Resend delivers parent verification and service email. DigitalOcean, Cloudflare and our account service provide hosting, delivery and sign-in. Help & Support messages are handled within Yuna's secure support service and may be reviewed by Yuna support staff. Please do not include passwords, payment-card details or one-time codes. Providers are restricted to supplying the requested service; Yuna does not use family data for adverts or model training.

How the app uses information

To generate age-appropriate replies and creations, run safety and Explore page checks, provide supervised search and browsing history, enforce plan limits, sync family profiles and progress, show the parent activity and safety views, provide optional Family Safety, process Apple purchases and respond to support requests.

Website and waitlist

We collect the email address you enter into the waitlist form, along with the date you joined. This site sets no advertising cookies and uses no advertising trackers.

We use your email to send the launch announcement and early invites as testing spots open. We never sell your email or use it for advertising.

Press enquiries and downloads

To download press files, we ask for your name, email and publication or organisation. You may also provide your role and website. We store these details in Dockie, our internal team dashboard, with your privacy acknowledgement, the notice version, your optional press update preference, and the files and dates you request. The email you provide is not verified by this form. Download records show requests, not confirmed publication of our assets.

We use these records to provide the requested files, manage press enquiries and understand interest in Yuna. We retain them while needed for that press relationship, or until you ask us to remove them. Only authorised team members can view or export the records. Contact privacy@yunasworld.com to request access, correction or deletion, or to withdraw a press-update preference. We may ask you to verify that you control the email address before acting.

Press updates are a separate, optional choice and are not required to download. Downloading does not sign you up to the family waitlist. The press form uses Cloudflare Turnstile to prevent abuse and a secure, essential access cookie that expires within 24 hours. Short-lived hashed request counters help limit abuse; the press contact record does not include your IP address or browser fingerprint. Yuna does not sell these contact details.

Your controls and contact

The Parent Dashboard lets the parent review chats, creations, safety alerts and activity; switch location off; withdraw parent permission; and delete the family account. To request access, correction, export or deletion, email privacy@yunasworld.com. We may verify that you control the parent account.

Security and changes

Data is encrypted in transit, credentials and sensitive device values are protected, and the parent area uses a PIN. If processing changes materially, Yuna will show the new disclosure and require fresh parent approval where needed.