← Back to home

Privacy Policy

Effective June 6, 2026 · Last updated June 6, 2026

This Privacy Policy explains how Tran Bao Toan ("I", "me", "my"), the individual developer of Yena, collects, uses, and protects your information when you use the Yena mobile application ("App"). By using the App, you agree to the practices described below.


1. Who We Are

Yena is developed and operated by Tran Bao Toan, an individual developer based in Ho Chi Minh City, Vietnam.

Contact: baotoan.work@gmail.com Address: BS15, Vinhomes Grand Park, Phuong Long Binh, Ho Chi Minh City, Vietnam


2. Information We Collect

2.1 Information You Provide

When you create an account, you provide:

  • Account information — your name, email address, and profile photo, obtained via Google or Apple Sign-In
  • Onboarding preferences — your chosen topics of interest and learning goals, provided during onboarding
  • App settings — appearance preferences, text size, and notification settings

2.2 Information Collected Automatically

When you use the App, we automatically collect:

  • Usage data — features used, knowledge pieces read, reading progress, learning streaks, quiz and flashcard results
  • Device token — collected solely to deliver push notifications (if you grant permission)
  • Log data — access times, app errors, and crash reports

2.3 Subscription Status

Your current subscription plan and status are managed by Apple and RevenueCat. We receive your subscription status to unlock the appropriate features. We do not store or have access to your payment card details.

2.4 Information from Third Parties

When you sign in with Google or Apple, we receive your name and email address as permitted by your authorisation with those providers. We do not receive your passwords.


3. How We Use Your Information

We use your information to:

  • Deliver personalised content — your topic preferences, interests, and reading history are used to generate knowledge tailored specifically to you
  • Authenticate your account — verify your identity and maintain your session securely
  • Manage your subscription — confirm your plan status and unlock the appropriate features
  • Send push notifications — deliver daily knowledge reminders and important updates (only if you grant permission)
  • Improve the App — analyse usage patterns and fix issues through crash reporting
  • Ensure integrity — detect and prevent fraud, abuse, and violations of our Terms
  • Respond to support — reply to your questions and support requests

We do not sell your personal information to any third party.


4. AI-Powered Personalisation

Yena uses AI to generate and personalise the knowledge content you see each day. To do this, your onboarding preferences, topic interests, and reading history are sent to third-party AI services running on our backend.

  • This data is used solely to produce personalised content recommendations for you
  • It is not used to train external AI models
  • It is not shared with third parties for their own commercial purposes
  • You can update your preferences at any time from within the App, and delete your data by deleting your account

5. Information Sharing

We share your information only in the following limited circumstances:

5.1 Service Providers

We use trusted third-party services to operate the App. Each provider has access only to the data necessary for their specific function and is required to protect it:

ProviderPurpose
Firebase AuthenticationSign-in and account management
Firebase Cloud MessagingPush notifications
Firebase StorageUser-uploaded files (e.g. profile photos)
RevenueCatSubscription management and plan status
Third-party AI servicesPersonalised content generation
AWS (Virginia, USA)Cloud hosting and data storage

5.2 Legal Requirements

We may disclose your information if required by applicable law, regulation, court order, or government request, or to protect the rights, property, or safety of users or the public.

5.3 Business Transfers

If the App is acquired, merged, or transferred, your information may be part of that transaction. You will be notified before your data becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information for any other purpose only with your explicit prior consent.


6. Data Storage and Security

Your data is stored on AWS servers in Virginia, USA (us-east-1). We implement industry-standard security measures, including:

  • Encrypted data transmission (TLS/HTTPS)
  • Secure credential storage via your device's Keychain
  • Access controls on all backend infrastructure

No method of transmission over the internet is entirely secure. While we take commercially reasonable precautions, we cannot guarantee absolute security. In the event of a breach affecting your rights, we will notify you as required by applicable law.


7. Data Retention

We retain your personal information for as long as your account remains active or as needed to provide the service. You may request deletion of your account and all associated data at any time via Settings → Danger Zone → Delete Account, or by contacting us at baotoan.work@gmail.com.

We may retain certain data for a limited period thereafter to comply with legal obligations, resolve disputes, or enforce our agreements.


8. Your Privacy Rights

Depending on where you live, you may have the following rights:

All users:

  • Request access to the personal data we hold about you
  • Correct inaccurate or incomplete information
  • Delete your account and associated data
  • Withdraw consent for push notifications at any time via device settings

EU / EEA users (GDPR):

  • Object to or restrict certain types of processing
  • Request your data in a portable, machine-readable format
  • Lodge a complaint with your local data protection authority

California users (CCPA):

  • Know what personal data we collect and how we use it
  • Opt out of the sale of personal data (we do not sell your data)
  • Non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at baotoan.work@gmail.com. We will respond within 30 days.


9. Legal Basis for Processing (GDPR)

If you are located in the EU or EEA, we process your personal data on the following legal bases:

Processing ActivityLegal Basis
Account creation and authenticationContract performance
Personalised content deliveryLegitimate interest
Push notificationsConsent
Subscription managementContract performance
Security and fraud preventionLegitimate interest / Legal obligation
Crash reporting and service improvementLegitimate interest

10. Children's Privacy

Yena is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal data without verifiable parental consent, we will delete it promptly. If you believe we have inadvertently collected such information, please contact us immediately at baotoan.work@gmail.com.


11. Third-Party Services

The App integrates with the following third-party services, each governed by their own privacy policies:

  • Apple Sign-In — apple.com/legal/privacy
  • Google Sign-In / Firebase — policies.google.com/privacy
  • RevenueCat — revenuecat.com/privacy
  • Apple App Store (payments) — apple.com/legal/privacy

We encourage you to review these policies. We are not responsible for the privacy practices of any third-party service.


12. International Data Transfers

Your data is stored and processed in the United States (AWS Virginia). If you are located in the EU or another jurisdiction with data transfer restrictions, by using the App you acknowledge this transfer. We take steps to ensure your data is protected in a manner consistent with applicable law.


13. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last Updated" date at the top of this page. For significant changes, we will provide in-app notice. Continued use of the App after changes take effect constitutes your acceptance of the updated policy.


14. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy:

Email: baotoan.work@gmail.com Developer: Tran Bao Toan Address: BS15, Vinhomes Grand Park, Phuong Long Binh, Ho Chi Minh City, Vietnam