Privacy Policy

Last Updated: July 7, 2026

At YONT, we care deeply about your privacy and believe your data is none of our business. Our core principle is to provide a powerful service without requiring or collecting your personal information.

1. Information Collection and Use

YONT is a local-first application. Any "prompt" data, categories, or settings you create are stored entirely on your device using SwiftData.

• Personal Data: We do not require you to create an account, provide an email address, or set a password to use the app.
• Your Data: All your saved prompts remain in your device's secure local storage.
• AI Features (Hybrid Model): We offer two options for AI-powered features:
  • Apple Intelligence (Local): By default, tasks are processed using Apple's on-device models. Your data never leaves your device.
  • OpenAI (Cloud): Users can optionally provide their own API Key to use OpenAI services. In this case, data sent is governed by OpenAI's privacy policy.
  • Automatic Secret Protection: Before any content is sent to cloud AI, it is scanned on-device; detected API keys, passwords, and similar secrets are redacted from the text before transmission.

2. iCloud Synchronization and Backups

The app uses Apple's CloudKit private database to sync data across your devices. This data lives in your personal iCloud storage, encrypted by Apple in transit and at rest. We have no access to it.

You can also create manual backups of your library. Backup files are written only to your personal iCloud Drive; to protect your storage, the newest 5 backups are kept and older ones are pruned automatically. Only you can access your backups.

3. Clipboard Privacy

YONT offers advanced clipboard isolation features to ensure the security of your sensitive prompt content:

• Local-Only Copy: By default, copied content is kept local to your device, preventing it from leaking to your other devices via iCloud Universal Clipboard.
• User Control: If you wish to share your clipboard across devices, you must explicitly enable this feature in the application settings ("Security & Privacy").

4. Custom Keyboard and "Full Access"

The YONT Custom Keyboard extension communicates with the main app's local database (via App Groups) so you can access your saved prompts anywhere. Due to iOS restrictions, this requires 'Full Access'.

• No Keystroke Logging: Our keyboard is absolutely not a keylogger. It does not track, record, or store what you type.
• No Internet Access: The Full Access permission is never used to transmit data over the internet; the keyboard extension operates completely air-gapped without any network capabilities.
• Clipboard Access: The keyboard only accesses the clipboard when you explicitly utilize a prompt containing the {clipboard} or {pano} variable to paste the current clipboard value.

5. Technical Data Access & Justifications

In compliance with Apple's privacy standards, we transparently declare the purpose of specific system APIs used by our application:

• UserDefaults (CA92.1 / 1C8F.1): Used to store your in-app preferences (theme selection, language, etc.) and App Group extension settings exclusively on your device.
• File Timestamps (C617.1): Used to accurately display the creation and modification dates of your saved prompts and library backups.
• Disk Space (E174.1): Used to ensure there is sufficient space on your device for the SwiftData database and backup operations to function correctly.
• System Boot Time (35F9.1): Used to measure relative elapsed time for app animations, session duration, and cache validity.

6. Third-Party Services and Analytics

To improve app performance, optimize user experience, and resolve stability issues, we use Firebase (Google Analytics & Crashlytics). The following data is processed anonymously through these services:

• System Data: Device model, OS version, and crash logs.
• Usage Analytics: Anonymous actions such as screen transitions, prompt copying, or creation.
• Estimated Demographics (Google Signals): With user consent, anonymous estimates for age group, gender, and region provided by Google's ecosystem (these insights are provided to us in aggregate/statistical form, not individually).

Firebase services DO NOT have access to your saved prompts or personal content. You can turn analytics off entirely at any time via the in-app switch in Settings → Privacy (crash reports remain, and contain no personal content). Additionally, data transmission to OpenAI only occurs with the user's explicit consent and manual configuration (API key setup).

6.1 Website (yont.dzirambola.com)

This website uses Vercel Web Analytics to analyze visit statistics. This system:

• Is cookieless: No cookies are placed in your browser. GDPR and KVKK compliant — no consent banner required.
• Collects no personal data: No IP addresses, user identifiers, or browser fingerprints are retained. Counting is done with daily-rotated hashes.
• No third-party trackers: This site contains no advertising networks, tracking pixels, social media widgets, or other trackers.
• Counting only: Anonymous aggregate metrics — page views, device types (mobile/desktop), referring sites.

Other browser storage (localStorage) used for internal purposes: theme preference, language selection, email notification form state. These are not cookies and are never transmitted to our servers.

Email forms: If you use the launch-notification or feedback forms on this site, the email address you provide (and, for feedback, your message) is processed solely for that purpose. Both forms use double opt-in: if you don't click the verification link sent to your inbox, the record/message is automatically deleted within 24 hours. Verified records are stored in a secure database (Upstash Redis); verification and notification emails are delivered via Resend. Your address is never shared with third parties or used for advertising; you can request deletion at any time by writing to yont@dzirambola.com.

External resources: The site loads fonts from Google Fonts and icons from cdnjs (Cloudflare). When these load, your browser makes a standard request to those providers (your IP address is technically visible to them); we transmit no personal data to these providers.

6.2 Explore Content (Hugging Face)

The Explore feature downloads open-source prompt datasets from Hugging Face servers and from our own content endpoint (yont.dzirambola.com). During these downloads — as with any internet request — your device's IP address is visible to the serving host; no identity, account, or personal data is ever attached to these requests. Search and filtering happen entirely on your device — your search queries are never sent to Hugging Face or to us.

7. PREMIUM FEATURES and Payments

In-app purchases and subscriptions (PREMIUM FEATURES) are processed via the Apple App Store. We do not see or store your payment information (credit cards, etc.). These transactions are governed by Apple's privacy policy.

8. Children's Privacy

Our Service does not knowingly collect personally identifiable information from anyone under the age of 18 (as we do not collect personal data from anyone).

9. Your Rights (GDPR / KVKK)

By design, we hold no dataset that could identify you; your prompt data lives on your device and in your personal iCloud. Your rights under GDPR and KVKK nevertheless remain intact:

• Analytics opt-out: Instantly, via the in-app switch in Settings → Privacy.
• Deletion: Deleting the app removes all on-device data; iCloud data is managed from your iCloud settings. Website form records can be deleted on request by email.
• Information requests: You can always write to us about the (limited, anonymous) data processed.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at yont@dzirambola.com.