The short version: Yori is built local-first. Your cycle data never leaves your device. We collect only anonymous, non-identifiable usage statistics. No personal data is sold, shared, or uploaded to any server. This policy explains exactly what we do and don't collect, and why.
1. Who we are
Yori is developed and published by Yori Ltd, a company registered in England and Wales (Company Number 17105944). We are the data controller for any personal data processed in connection with the Yori app and website.
Contact: yoriapp@pm.me
2. What data Yori stores — and where
The Yori app is designed to be local-first. All cycle data, profile information, notes, period logs, and observations you enter are stored exclusively on your device using encrypted local storage. This data is never transmitted to our servers, never uploaded to any cloud service, and never accessible by us.
Specifically, Yori does not upload or transmit:
- Period dates or cycle history
- Notes or mood observations you log
- Profile names or relationship information
- Condition information selected during setup
- Any personally identifiable information
All locally stored data is encrypted at rest using AES-256 encryption.
3. What we do collect
Yori collects a small amount of anonymous, non-identifiable usage data to help us understand how the app is being used and improve it over time. This data is collected via our analytics infrastructure and includes:
- Anonymous install identifiers (randomly generated, not linked to any person or device identity)
- Feature usage events (e.g. "AI insight was generated", "period was logged") — without any associated personal data
- App version number
- Country code derived from IP address at the time of the event (IP address is not stored)
- Timestamp of events
This data cannot be used to identify you, linked to your device, or combined with any other data to identify you. It is used solely to understand how Yori is being used in aggregate.
4. AI insights
Yori's daily AI insights are generated by sending a prompt to a third-party AI service (Anthropic). This prompt contains:
- The current cycle phase and day number
- Any notes or observations you have logged (summarised, without names or identifying details)
- Condition information you have selected
- Your relationship type (e.g. partner, father)
Prompts do not contain names, dates, or any information that would identify you or the person you are supporting. The prompt is processed by Anthropic's API and the response is returned to your device. Anthropic's data handling is governed by their own privacy policy. We do not store the content of AI prompts or responses on our servers.
5. Lawful basis for processing
Under UK GDPR, we process data on the following lawful bases:
- Legitimate interests — anonymous usage analytics to improve the app, where this does not override your rights
- Contractual necessity — processing necessary to provide the app features you have requested (e.g. generating AI insights)
- Consent — where you have explicitly agreed to data processing via the in-app consent gate
6. Data retention
Local data (cycle logs, notes, profiles) is retained on your device for as long as you use the app. When you uninstall Yori, all local data is permanently deleted. There is no server-side copy and no recovery option.
Anonymous analytics events are retained for up to 24 months for the purpose of understanding usage trends, after which they are deleted.
7. Third parties
Yori uses the following third-party services:
- Anthropic — AI insight generation. Prompts are anonymised before transmission. See anthropic.com/privacy.
- Cloudflare — infrastructure and DNS. See cloudflare.com/privacypolicy.
- Google Play — app distribution. Subject to Google's policies for app developers.
We do not sell, rent, or share your data with any other third parties.
8. Your rights under UK GDPR
You have the right to:
- Access any personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing based on legitimate interests
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
Because cycle data is stored only on your device, the primary way to exercise your right to deletion is to uninstall the app. For any other requests, contact us at yoriapp@pm.me.
9. Children
Yori is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.
10. Changes to this policy
We may update this policy from time to time. Significant changes will be communicated via the app. The current version is always available at yoriapp.co.uk/privacy.html. Continued use of the app after any change constitutes acceptance of the updated policy.
11. Contact
For any privacy-related questions or to exercise your rights, contact us at yoriapp@pm.me. We aim to respond within one calendar month.