🔒 Yo Life⁺ Privacy Policy

Last Updated: July 11, 2026

Welcome to Yo Life⁺ ("the Application"). We are deeply committed to protecting your personal privacy and securing your data. This Privacy Policy helps you understand how we handle your personal data. Please read the following sections carefully:

1. Core Principle: Offline-First Architecture

Yo Life⁺ utilizes a robust Offline-First privacy protection model:

All core lifestyle records, including inventory assets, space organization, calendars, scheduling logs, financial bookkeeping, and local notes, are 100% stored locally on your physical device.
We do not operate central servers to collect, monitor, or harvest your private life records. Data integrity and access control remain entirely within your hands.

2. Dual AI Assistants & Data Transfers

To provide advanced smart agent capabilities, we run dual assistant architectures with strict transmission guidelines:

Command Assistant (On-Device AI):
- Powered by a local Gemma model, running 100% offline without network connectivity.
- All voice recording analysis and local records editing take place locally on your phone's processor (NPU/GPU), ensuring no data leakage.
Chat Assistant (Cloud LLM Integration):
- When using advanced AI features (such as macro nutrient analysis, chemical ingredients checks, or magic leftovers recipes), the application securely transmits anonymous text or image snippets via encrypted APIs to secure models (like Google Gemini).
- These transmissions do not include any personally identifiable information (PII). Cloud servers process the data instantly and wipe temporary logs immediately.

3. Account Login & Cloud-Assisted Services

The Application's core lifestyle data is 100% stored on your device. However, the following features are opt-in services you actively choose to enable; enabling them transmits the minimum necessary account-identification data to our servers:

Account Login (Google / Apple Sign-In): If you choose to sign in with a Google or Apple account, we obtain your account identifier (Firebase UID) via Firebase Authentication (a third-party identity service provided by Google), used for cross-device identity confirmation and linking your points/top-up records. We never obtain your account password.
Push Notifications: If you grant notification permission, we record your device's push token (FCM Token) together with the account identifier above on our server, solely to deliver reminders you configured within the app (e.g. scheduled command results, expiry reminders).
Multi-Device Sync (Optional): If you enable multi-device sync, certain schedule/habit data is synchronized across your authorized devices via our server, used solely for that synchronization purpose and no other.

4. Decentralized Peer-to-Peer Encryption

Our built-in private chat room utilizes peer-to-peer (P2P) direct connection protocols.
Messages transit directly between the two users' devices, bypassing central database servers entirely and leaving zero footprints in the cloud.

5. Device Permissions Usage

To deliver advanced IoT and safety features, we request specific hardware access with your explicit consent:

Camera: Used solely for scanning barcodes/QR Codes, capturing leftovers inside refrigerators, or scanning cosmetics/food chemical ingredients.
Microphone: Used solely to receive your voice recordings for hands-free voice commands, scheduling, and bookkeeping logs.
NFC Sensor: Used solely to read and write physical NFC tags for custom "one-touch shortcut" automation.
Location Services (GPS & Background Location): We request access to both approximate and precise location data. This telemetry is strictly utilized for the following core lifestyle features:
- Cosmetics Management & Pharmacy Map: Automatically calculates distances and routes between your location and the nearest pharmacies or cosmetics counters for rapid medical prescription refills and direct store navigation.
- Diet & Dining Map: Recommends nearby safe ingredient procurement locations, healthy restaurants, or community surplus food hubs based on your real-time vicinity.
- Background Geofencing Spoken Reminders: When you bind tasks to geographical coordinates inside your smart calendar (e.g., "Remind me to buy milk when arriving at the supermarket"), the application utilizes background location tracking. When your device crosses the designated coordinate threshold (geofence), Yo Assistant automatically broadcasts a warm spoken notification.
- Safety & Anonymity Commitment: All coordinates comparison, geofence threshold triggers, and distance sorting are computed strictly locally on your physical device (On-Device). We do not collect, stream, transmit, or store your real-time location telemetry or tracking history on any cloud database, nor do we share it with third parties. Your coordinates privacy remains 100% secure.

6. Medical & Health Disclaimer

Analysis of food and cosmetic ingredients provided by this application is based on public databases (such as TFDA, European Union EFSA, US FDA, etc.) and product labels entered by users. It is for daily lifestyle information reference only and does not constitute any medical diagnosis, prescription advice, or guarantee of therapeutic effect.

【Special Declaration on Allergen Comparison Feature】
The ingredient comparison and logging features of this application only cross-reference product packaging labels entered by the user against the user's own custom record list. This is an information display service, not a medical judgment. Please note:

1. Cross-Contamination Risks: This application cannot detect, and does not guarantee against, any cross-contamination risks that may occur during the manufacturing, processing, or transportation of products.
2. Inaccurate Labeling Disclaimer: The application cannot verify and is not liable for any errors, omissions, or misrepresentations on product packaging labels.
3. Accuracy of Local Records: The contents of the user's personal record list (such as custom ingredients) are entered and maintained solely by the user. This application makes no warranty regarding their accuracy or completeness.
4. Seeking Professional Advice: If you or anyone under your care has a known food allergy, drug allergy, or other health conditions, please read the product packaging labels carefully yourself. In case of any doubt, consult a professional physician, pharmacist, or nutritionist. You should not rely solely on the comparison results of this application as the basis for decision-making.

All content and information provided by this application are for educational and informational purposes only and should not be viewed as a substitute for professional medical advice, diagnosis, or treatment plans. If you experience physical discomfort or have health concerns, please seek professional medical advice immediately.

7. Third-Party Services & Data Processors

To deliver complete functionality, we rely on the following third-party services, which may process portions of your data under their own privacy policies:

Google Sign-In / Firebase Authentication (account login)
Firebase Cloud Messaging (push notifications)
Google Gemini API (cloud AI diet/ingredient analysis, as described in Section 2 — anonymized content only)

We transmit only the minimum data necessary for each function, and require/confirm that these services do not use your data for any purpose beyond the stated ones.

8. Your Rights

Under applicable personal data protection laws, you have the following rights regarding the personal data we hold about you:

Query or request access
Request a copy
Request correction or supplementation
Request that we stop collecting, processing, or using your data
Request deletion

You can go to Settings → Delete Account within the app to choose exactly which data to delete: you may delete specific categories only (e.g. diet logs, life calendar), or choose "Account itself" — the latter immediately deletes all lifestyle data on your device, clears the push token and service records tied to your account on our server, and signs you out. This action takes effect immediately and cannot be undone.

Points/top-up transaction records are retained for the period required by applicable financial and accounting regulations and are not included in the deletion above; we do not otherwise retain copies of your personal data. For any query, correction, or other request, please contact us via the details in Section 11 — we will respond within 15 business days.

9. Children's Privacy

The Application is not specifically designed for children under the age of 13. If you are a parent or guardian and discover that your child has provided personal data to us without your consent, please contact us via the details in Section 11 and we will take prompt action to remove the relevant data.

10. Policy Updates

We may update this Privacy Policy from time to time. For material changes (e.g. new categories of data collected or new purposes of use), we will update the "Last Updated" date on this page and, where appropriate, notify you prominently within the app. We recommend checking this page periodically for the latest information.

11. Contact Us

If you have any questions regarding this Privacy Policy or your data safety, please contact us via our official channels:

Service Provider: Yo Life⁺
Email: [email protected]
Official Website: https://cherma.tw
LINE Customer Support: @ltu9564s
Instagram & Threads: @yo.up.tw
YouTube Official Channel: @yo_tw