Privacy Policy YES AI Studio

Preamble and Applicability

This Privacy Policy (“Policy”) applies to all websites and mobile applications operated by YES AI Studio (“we,” “our,” or “the Company”) (collectively, the “Services”).

For the purposes of this Policy, “personal data” means any information relating to an identified or identifiable individual, and “processing” includes any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.

This Policy governs all processing activities carried out within the Services, including but not limited to those involving third-party tools and platforms such as Google AdSense, Google Analytics, and Firebase.

We utilize Google Consent Mode v2 to transmit and manage users’ consent preferences across Google’s services in compliance with applicable privacy regulations.

1. Categories of Personal Data Collected

We may process the following categories of data when you interact with our Services:

• Test Responses: Processed locally on your device and not stored on our servers.
• Information Collected Directly via Contact Forms: Name, email address, and inquiry content.
• Technical Data Collected via Third-Party Services (Google Analytics and Firebase):
  • IP addresses (collected in anonymized form)
  • Device and system information (browser type, operating system, screen resolution)
  • Approximate geolocation (country or regional level only)
  • Page views, session duration, and interaction patterns
  • Service error and performance data (including Crashlytics)
• Cookies and Tracking Technologies: Used for analytics, advertising optimization, and user experience enhancement via Google Analytics and related ad services.

2. Purposes of Processing Personal Data

• To generate and display personalized test results;
• To receive and respond to user inquiries via contact forms;
• To analyze aggregated usage data and service performance statistics;
• To improve, optimize, and personalize content delivery and user experience;
• To enhance mobile app functionality and ensure stable service operation;
• To monitor app performance and usability for continuous improvement.

3. Data Retention and Duration of Processing

We retain and process personal data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by applicable law. Specifically:

• Test Responses: Processed locally within the browser and not stored on our servers.
• Contact Form Information: Name, email address, and inquiry content are retained for the purpose of responding to user inquiries in accordance with our service policies.
• Website Usage Logs: Not retained on our servers; may be temporarily processed or stored by our hosting or CDN providers in accordance with their operational and security policies.
• Analytics Data: Retained for up to 14 months as permitted under Google Analytics policies, after which it is anonymized or deleted in accordance with our data minimization practices.
• Firebase Data: Processed in accordance with Google's policies. For further details, please refer to the Google Privacy Policy.
• Advertising Cookies (Google AdSense): Managed in accordance with Google's advertising policies. For further details, please refer to the Google Privacy Policy.

All processing activities are carried out on the basis of the user's consent, performance of a contract with you, or our legitimate interests in maintaining, analyzing, and improving the Services.

4. Delegation of Personal Information Processing

To ensure efficient service provision and management, we entrust certain personal information processing activities to specialized external service providers as outlined below.

When entering into outsourcing agreements, we comply with applicable laws and regulations, including the Personal Information Protection Act. Such agreements stipulate prohibitions on processing personal information for purposes beyond the intended service, implementation of technical and administrative safeguards, and restrictions on further subcontracting. We also supervise and monitor all entrusted parties to ensure ongoing compliance.

5. Disclosure of Personal Data to Third Parties

We do not share, sell, or otherwise disclose personal data to third parties without the user's explicit consent, except in the following limited circumstances:

• Where disclosure is required by applicable law, court order, or other legal process.

We entrust certain personal information processing tasks to external service providers to operate our Services. For detailed information about these delegated processing activities, please refer to Section 4 (Delegation of Personal Information Processing).

Transfers of personal data to Google LLC constitute cross-border data transfers. We implement appropriate safeguards to ensure that any data transferred outside your jurisdiction receives an adequate level of protection. For further information, please review the Google Privacy Policy.

6. Use of Cookies

We use cookies and similar tracking technologies for the following purposes:

• To analyze user behavior and service performance via Google Analytics;
• To deliver personalized advertising and measure effectiveness through Google AdSense, including the use of advertising IDs, pixel tags, and behavioral targeting mechanisms;
• To improve user experience, interface responsiveness, and overall usability of the Services.

7. Cookie Consent and Management (CMP & Consent Mode)

For users located in the European Economic Area (EEA), the United Kingdom, and Switzerland, we utilize a Google-certified Consent Management Platform (CMP) to collect and manage consent for advertising and analytics cookies in compliance with regional data protection laws.

• Advertising and analytics cookies remain disabled until the user provides explicit consent.
• Users may review, modify, or withdraw their consent at any time by clicking the "Cookie Settings" button located in the website footer or by visiting the Cookie Policy page.
• Consent preferences are integrated with Google services through Consent Mode v2 to ensure lawful data processing.
• Note: Cookie consent banners may not appear in regions where such consent is not legally required.

8. Use of Google Analytics and Firebase

Our Services use Google Analytics and Firebase to collect and analyze aggregated usage data, monitor app performance, and process user inquiries for both web and mobile applications.

• Data Collected: Page views, session duration, device and browser type, approximate geolocation (country or region), app performance metrics, service error and performance data (including Crashlytics), and inquiry form information (when Firebase is utilized).
• Purpose: To analyze usage trends, optimize user experience, improve service functionality, and process user inquiries.
• Retention Period: Google Analytics data is retained for up to 14 months in accordance with our settings; Firebase data is processed in accordance with Google's policies.
• Data Processing: Conducted in accordance with the Google Privacy Policy and applicable data protection laws.

To learn more about how Google processes analytics and Firebase data, please review the Google Privacy Policy.

Users who wish to opt out of Google Analytics tracking may install the Google Analytics Opt-Out Browser Add-on.

9. Children’s Privacy and Age Restrictions

Our Services are intended for general and adult audiences and are not designed or directed toward children under the age of 16.

• No personally identifiable information is directly collected. Test responses and usage data are processed locally on the user’s device and are not stored on our servers.
• For EEA, U.K., and Swiss residents, we do not knowingly collect personal data from individuals under the age of 16.
• For users under 13 years of age, we do not knowingly collect personal data without verifiable parental consent.
• Parents and guardians are encouraged to monitor their children’s use of online services to ensure safe browsing practices.
• For inquiries regarding children’s data or privacy concerns, please contact us at [email protected].

10. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data. These may include:

• The right to access, correct, or delete your personal data;
• The right to restrict or object to certain types of processing, or to request data portability;
• The right to withdraw consent for analytics or advertising cookies, or to adjust your cookie preferences at any time.

Residents of the EEA, the United Kingdom, Switzerland, California, and other regions with comprehensive privacy laws may have additional rights under applicable regulations.

• Users in these regions may manage or withdraw cookie consent directly through the Cookie Policy page or via the "Cookie Settings" option available throughout the website.

11. Data Protection Officer and Contact Information

Last Updated: October 27, 2025