Privacy Policy

Yarneen Digital LTD operates Yarneen AI and is the controller of the personal data described here. You can reach us about privacy at support@yarneen.com.

We collect the following categories of data:

• Account data — name, email address, your password (stored only as a salted one-way hash, never in readable form), account status and settings, marketing-email preference, and two-factor authentication settings (the authenticator secret is stored encrypted). If you sign in with Google, we receive your Google email address, whether it is verified, and your profile picture link.
• Consent records — which document or confirmation you accepted, its version, your choice, the date, a fingerprint (hash) of the exact wording, a keyed hash of your IP address and your browser’s user-agent string.
• AI Character data — see section 4.
• Other content you create — prompts and settings you enter in the Studio, the images generated for you, and, for the Models feature, the training images you upload and the private model trained from them.
• Creator OS data (if enabled for you) — creator profiles, content briefs and plans, captions, hashtags, schedules, approval decisions, feedback and notifications.
• Connected social account data — see section 6.
• Billing data — see section 7.
• Affiliate data (only if you join the affiliate program) — your affiliate code, referrals, commissions and payout details (stored encrypted). When someone visits through a referral link we record a keyed hash of their IP address, the landing page and the referring website’s host name.
• Moderation data — when automated checks block or flag a prompt or text, we record the decision, the policy category and policy version. We do not store the blocked text in that record.
• Technical and security data — sign-in sessions, rate-limit counters based on keyed hashes of IP addresses, server and error logs, and an audit log of security-relevant actions (for example sign-ins, account changes, deletions and staff actions).

We use personal data only for these purposes (the legal basis under EEA/UK law is shown in brackets):

• To provide the Service you ask for — accounts, character creation, model training, image generation, scheduling and publishing (performance of our contract with you).
• To process payments and keep accounting records (contract; legal obligations).
• To keep the Service safe — content moderation, preventing abuse and fraud, securing accounts, and investigating violations of our Terms (our legitimate interests in a safe, lawful service; legal obligations).
• To provide support and send service messages such as security alerts, receipts and account notices (contract; legitimate interests).
• To send marketing emails, only if you opted in (consent — you can withdraw it at any time).
• To set the affiliate referral cookie, only if you accept it (consent).
• To operate and improve reliability using usage, cost and error statistics (legitimate interests).

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

We do not use your uploads, prompts, characters, character models or generated images to train AI models for other users or general-purpose models. Images you provide or approve for a character are used only to build and run that character for your account.

Automated checks may block a prompt or a piece of content that appears to break our rules. These checks do not otherwise produce legal or similarly significant effects for you. If you think something was blocked by mistake, contact us.

Creating and using an AI Character involves the following data, all private to your account:

• The character’s name, type, description and settings, and the prompts you write (including optional advanced or negative prompts where offered).
• Reference images you upload to start a character, where that option is offered. You must have the rights to them, and if they show a real person you must confirm that it is you or that you have that person’s explicit permission, and that they are at least 18.
• Candidate images generated for you, the image you choose and lock as the character’s identity (the “anchor”), and the reference and dataset images generated from it, with captions and automated quality results.
• The character model trained for your character (for example LoRA weights), its versions, and validation images and results.
• Generation records — the stage and model used, the full instruction sent to the model (we may combine your prompt with our own templates), seed, size, status, errors, timestamps and credits charged.

Training images uploaded for the Models feature are deleted automatically after successful training (currently 7 days after training by default; the period that applies to you is shown in Settings → Privacy). You can delete them sooner.

Our staff can access character data only where needed to operate the Service, provide support you request, or investigate safety issues, under role-based access controls; staff actions are recorded in the audit log.

We use the following providers to run the Service. They process data on our behalf and receive only what they need for their task:

• Vercel — application hosting and scheduled tasks.
• Neon — managed PostgreSQL database.
• An S3-compatible cloud object storage provider — stores uploaded and generated files.
• Resend — delivery of account and service emails (your email address and the message).
• Modal and Baseten — GPU computing for image generation and character model training. They receive the prompts and settings of a job and time-limited links to the images that job needs, and write the results back to our storage.
• Only when the related feature is enabled: Google (“Sign in with Google”); Stripe (payments, section 7); Higgsfield (character image generation and identity features — receives prompts and character reference images through time-limited links, and may keep an identity profile for your character on its side); OpenAI and Anthropic (optional AI text assistance for Creator OS content planning — may receive the creator profile, a character summary and your content brief, never passwords or payment data); Sentry (error reports, with secrets, prompts and email addresses removed); Instagram/Meta (publishing you request, section 6).

We may also disclose data when required by law or a valid legal request, to protect the rights, safety and security of our users, the public or the Service, in connection with a merger or sale of our business (subject to this Policy), or with your consent.

Creator OS can publish content you approve to your own social accounts. Instagram is the first supported platform. Instagram is a third-party service operated by Meta; it is not operated by us, and its own terms and privacy policy apply to your use of it.

How connecting works: you are sent to Instagram to sign in and grant permissions. We never ask for, see or store your Instagram password. Only Instagram Professional accounts (Business or Creator) can be connected. We request these permissions: instagram_business_basic (identify the account), instagram_business_content_publish (publish the posts you approve) and instagram_business_manage_insights (show how those posts perform).

What we receive and store:

• Your Instagram-scoped user ID, username, account type and the permissions you granted.
• An access token and its expiry. Tokens are encrypted on our servers (AES-256-GCM), are used only by our servers to call Instagram on your behalf, and are never sent to your browser.
• For posts published through the Service: the Instagram media and container IDs, the post link, the caption, the publish time and the result or error.
• Insights for those posts — views, reach, likes, comments, saves and shares — refreshed periodically for posts published in the last 30 days.

We do not collect your Instagram password, your direct messages, your followers’ personal data, or posts you did not publish through the Service.

Why: to publish the content you approve at the time you choose, to show you the status of each post, and to show you how your posts perform.

Publishing approval modes. Each creator has an approval mode that you choose: “I post myself” (we prepare content; you download and post it yourself, or press Publish now); “Publish what I approve” (only content you approved is published at its scheduled time); and “Publish unless I object” (content that passes automated checks is approved automatically about one hour before its scheduled time unless you reject it first). The last mode is off by default, is available only where your plan includes it, and applies only to creators for which you turn it on.

Disconnecting in Yarneen (Creators → Connections → Disconnect): we delete the stored access tokens immediately and cancel scheduled posts that have not been published. We keep the account record (Instagram-scoped ID and username) and the history of posts already published, with their links and collected insights, as part of your content history until you delete your Yarneen account. We do not currently revoke access on Instagram’s side when you disconnect; you can also remove the app in Instagram (Settings → Apps and websites).

Removing our app in Instagram (deauthorization): Instagram notifies us and we do the same as a disconnect.

Instagram data deletion request: if you ask Instagram to have us delete your data, Instagram notifies us. We then delete the access tokens, cancel unpublished posts, erase the stored username, account type and permissions, and delete all insights collected for that account. We keep the Instagram-scoped ID, the IDs and links of posts already published (so we can answer takedown or abuse requests about them) and a record of the deletion with its confirmation code. You can check the status, while signed in, at the link Instagram shows you (/creators/connections?deletion=CODE).

Deleting your Yarneen account: all social access tokens are deleted, unpublished posts are cancelled, stored usernames, account types, permissions and collected insights are erased, and post captions in our records are replaced with “[deleted]”. Post IDs of already published posts are kept for the reason above.

When paid plans are available, payments are processed by Stripe. Stripe collects your card details directly; we never receive or store your full card number or security code.

We receive and store: Stripe customer, subscription, checkout, payment and invoice identifiers; amounts, currency, status and refunds; the receipt link; a failure reason if a payment fails; and the credits granted. We send Stripe your email address to create the checkout. Stripe’s own privacy policy applies to the data it collects.

We do not use analytics or advertising cookies, and we do not load third-party tracking scripts. We use:

• Session cookie (__Host-session) — keeps you signed in; lasts up to 30 days by default. Essential.
• Email-verification cookie (__Host-verify-binding) — links an email confirmation to the browser that signed up; 24 hours. Essential.
• Sign-in-with-Google cookie (oauth_google) and social-connection cookie (yarneen_social_oauth) — protect a sign-in or account connection against forgery; 10 minutes. Essential.
• Cookie-choice cookie (consent) — remembers your cookie choice; 180 days. Essential.
• Affiliate referral cookie (ref_attr) — records which partner referred you, for the attribution period (30 days by default). Set only if you choose “Accept all”, unless the affiliate program is configured not to require consent.

We also use your browser’s session storage (cleared when you close the tab) to keep a pending referral for the current visit and to resume a running generation.

Our providers may process data in the United States and other countries outside your own, including outside the EEA, the UK and Israel. Where the law requires a transfer mechanism, we rely on those offered by our providers, such as the European Commission’s Standard Contractual Clauses.

We keep data only as long as needed for the purposes above. Specifically:

• Account data — while your account exists. When you delete your account (section 12) it is anonymised after the grace period.
• Training images (Models) — deleted automatically after successful training (7 days by default) or when you delete them. Uploads that were never completed are removed after about 24 hours.
• Generated images — until you delete them, or your account.
• Characters — until you delete the character. Deleting a character removes its candidate, reference and dataset images and its character model files from our storage; the character and its locked identity record are kept in a deleted state for integrity and audit, and their text is erased when you delete your account.
• Copies held by AI providers — providers that ran a job may keep inputs or outputs for a period under their own retention terms. Where a provider stored a character identity on its side and supports deletion, we request deletion when you delete the character or account; we cannot guarantee deletion of copies outside our control.
• Connected social accounts — see section 6.
• Payments, invoices and the credit ledger — kept as long as accounting and tax law requires, including after account deletion, linked to the anonymised account.
• Audit logs, consent records and moderation records — kept to protect the Service and our users and to meet legal obligations. They currently have no automatic deletion period; we review them and delete what is no longer needed.
• Sessions — expire after 30 days by default and are removed 7 days after they expire.
• Backups — deleted data may remain in backups kept by our infrastructure providers until those backups expire.

In the Service you can, at any time: download a copy of your account data (Settings → Privacy → Download my data); delete individual images, models, characters and training images; disconnect social accounts; and delete your account. The download is a JSON file that includes your profile, consents, characters and models, jobs, credit and payment history; images can be downloaded from the Gallery, and you can ask us for any other data, such as Creator OS data, by email.

Depending on where you live, you also have the following rights. To use them, contact us at the address in section 15; we will verify your request and respond within the time the law requires.

• EEA and UK — access, correction, deletion, restriction, data portability, objection to processing based on legitimate interests, and withdrawal of consent at any time. You may also complain to your local data-protection authority.
• California and other US states with privacy laws — to know what personal information we collect, use and disclose; to correct and delete it; and not to be discriminated against for using these rights. We do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you. You may use an authorised agent.
• Israel — to inspect personal data held about you and to ask for it to be corrected or deleted under the Protection of Privacy Law. You may also contact the Privacy Protection Authority.

• Delete your account: Settings → Privacy → Delete account. Deletion is scheduled after a grace period (currently 7 days by default, shown on that page), during which your account is read-only and you can cancel. After that, your files are deleted and your account is anonymised; records described in section 10 are kept.
• Delete specific content: delete images in the Gallery, and models or characters from their pages.
• Delete Instagram data: disconnect the account in Creators → Connections, and/or remove the app in Instagram (Settings → Apps and websites) and request data deletion there. See section 6 for what each option removes.
• By email: write to support@yarneen.com from your account email address.

We protect data with encryption in transit, encryption of credentials and tokens at rest (AES-256-GCM), salted password hashing, optional two-factor authentication (required for staff for sensitive actions), private file storage reached only through short-lived signed links, role-based staff access and audit logging. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you and the authorities where the law requires.

The Service is only for adults (18+). We do not knowingly collect data from anyone under 18; if we learn that we have, we delete it.

Every person depicted in images you upload or generate — and every character — must be an adult (18+). Content involving minors is prohibited and blocked, and we may report illegal content to the relevant authorities.

We may update this Policy. The version and date at the top show when it last changed. If changes are material, we will notify you before they take effect.

Questions, requests or complaints: Yarneen Digital LTD, support@yarneen.com.