YuiTalk Privacy Policy
Effective: 20 August 2026
YuiTalk is made by Shanghai Minute Technology Co., Ltd. (上海米努特科技有限公司), and this policy explains what the app does with your information. It applies to the international edition of YuiTalk and to yuitalk.com.
The mainland China edition (yuitalk.cn) runs on separate servers with a separate policy. If you downloaded YuiTalk from the App Store outside mainland China, this is the policy that applies to you.
Your recordings never leave your device. Speaking practice needs a microphone, but speech recognition runs locally on your phone. We do not upload, receive or store your voice. Only the recognised text leaves the device. Section 3 explains this in full.
Please read this policy before using YuiTalk, particularly the clauses set in bold.
1. Who we are
- 1.1The controller of your personal data is Shanghai Minute Technology Co., Ltd. (上海米努特科技有限公司), a company registered in Shanghai, People's Republic of China.
- 1.2You can reach us about anything in this policy at the address below. We answer privacy requests within 30 days.
- Company
- Shanghai Minute Technology Co., Ltd. (上海米努特科技有限公司)
- Registered address
- 2F, 2900 Nanhanggang Road, Fengxian District, Shanghai, China
- support@yuitalk.com
2. Definitions
- 2.1Personal data — any information relating to an identified or identifiable person.
- 2.2Processing — anything done with personal data: collecting, storing, using, sharing, deleting.
- 2.3We / us — Shanghai Minute Technology Co., Ltd. (上海米努特科技有限公司), the controller described in section 1.
- 2.4You — the person who registers for and uses YuiTalk.
3. How we handle your voice
Speaking practice necessarily involves a microphone, so this gets its own section.
- 3.1Audio captured by the microphone is recognised locally on your device. It is not uploaded to our servers. We do not collect, store or transmit your voice. YuiTalk ships with offline speech recognition and speech synthesis engines; the model files are downloaded onto your phone with the app.
- 3.2Because recognition happens on-device, reading and shadowing practice keeps working with no network connection at all.
- 3.3What does leave your device is the recognised text — the sentence you said, written out, including markers for where you paused. That text is used for the AI feedback described in section 5.
- 3.4You can turn off microphone and speech recognition permissions at any time in your device settings. Speaking practice stops working; nothing else is affected.
4. What we collect
We collect only the minimum needed for the purposes set out in the table below. Anything not in this table, we do not collect.
| Category | What exactly | Why | Legal basis |
|---|---|---|---|
| Account | Email address; or, if you use Sign in with Apple or Sign in with Google, the identifier that provider gives us, whichever email you chose to share, and the name you chose to share at first sign-in | Create and authenticate your account; restore your progress on a new device | Performance of our contract with you |
| Practice records | The target sentence, your recognised text (with pause markers), whether it was judged correct, timestamps and a session identifier | Give you AI feedback, build your review schedule, show your progress | Performance of our contract with you |
| Learning content | Vocabulary you save, the custom practice scenarios you write yourself, the error types the app records | Vocabulary book, mistake review, personalised exercises | Performance of our contract with you |
| Preferences | Your interface display language (the one you pick in the app or, if you never pick one, the language derived from your device's system language — English when that language is not one we support), and your JLPT target levels (N1–N5; the default N5 until you change them) | Understand how our users break down by interface language and by level, so we can prioritise learning content and localisation | Our legitimate interest in understanding who uses the service and improving it |
| Device and log data | Your device language and region setting (until you pick an interface language in the app, read at every launch to derive the interface display language, and that derived result is uploaded as the "Preferences" row above); server access logs, which include your IP address | Show the interface in a sensible language; keep the service secure and debuggable | Our legitimate interest in operating a secure service |
We have not integrated any third-party analytics, crash-reporting or advertising SDK. We do not collect your device model, contacts, photos, precise location, messages, biometrics, payment card details, or your use of other apps.
5. Who else sees your data
Some features need third parties. We send them the minimum the feature needs.
| Recipient | What they receive | What for |
|---|---|---|
| DeepSeek | Your recognised text, the target sentence, and the practice records from the current session | Judge whether your pronunciation and phrasing were right; generate diagnostics and follow-up exercises |
| Supabase | Your account record, learning data and preferences (hosting provider) | Store your account and progress so it survives a device change |
| Apple | Sign in with Apple identifiers and whatever you chose to share | Authentication |
| Sign in with Google identifiers and whatever you chose to share | Authentication | |
| apilio (apilio.ai) | The text of a custom scenario you created, as the prompt for its cover image | Generate the cover image for that scenario |
We have no separate data processing agreement with DeepSeek or apilio; we use their services under their own published privacy policies and terms of service.
We do not sell your personal data, and we do not share it for anyone's advertising or marketing.
6. Where your data lives, and international transfers
- 6.1Your account and learning data are stored on Supabase infrastructure in the South Asia (Mumbai) region. They are not stored on, or copied to, servers in mainland China.
- 6.2We are a company established in China, so our staff access your data from China. If you are in the European Economic Area, the United Kingdom, or another region with transfer restrictions, this means your personal data is transferred outside that region.
- 6.3For those transfers we rely on the technical measures described in section 7. You can ask us for details of those measures using the contact address in section 1.
- 6.4Your recognised text, practice records, learning content and preferences are kept on our servers for as long as your account exists, so that you can pick up where you left off. After you delete your account we erase or anonymise the personal data linked to it, unless the law requires us to keep something longer.
- 6.5Files cached on your device are removed when you uninstall the app; we also clear the local cache when you sign out or delete your account.
7. How we protect it
- 7.1All traffic is encrypted in transit with HTTPS. Authentication uses signed tokens. Learning data is isolated per user — one account cannot read another's rows.
- 7.2Access by our staff is limited to what their job requires, and they are under confidentiality obligations.
- 7.3Please keep your password to yourself. No security measure is absolute; if a breach affects your rights we will notify you and the relevant supervisory authority as the law requires.
8. Your rights
Depending on where you live, you have some or all of the following rights. We honour them for everyone, wherever you are.
- 8.1Access — see what we hold about you. Most of it is visible in the app; ask us for a full copy and we will prepare one for you.
- 8.2Rectification — correct anything wrong. Write to us and we will make the correction for you.
- 8.3Erasure — have all of your data deleted at once by deleting your account. To delete particular items, write to us and we will delete them for you.
- 8.4Portability — ask us for your learning data in a structured, machine-readable file; we prepare and send it.
- 8.5Objection and restriction — object to processing based on our legitimate interests, or ask us to pause it.
- 8.6Withdraw consent — revoke microphone and speech recognition permission at any time in your device settings. This does not affect processing carried out before you withdrew.
- 8.7Complain — if you think we have got this wrong, tell us first, and you may also complain to your local data protection authority.
- 8.8To exercise any of these, email support@yuitalk.com from your registered address so we can verify who you are. We reply within 30 days and there is no charge.
9. Children
- 9.1YuiTalk is not directed at young children and we do not knowingly collect personal data from them.
- 9.2If you are under 16 (or under the age of digital consent where you live, which may be as low as 13), please use YuiTalk only with a parent's or guardian's permission.
- 9.3If we learn that we have collected a child's data without the necessary permission, we delete it promptly. Parents and guardians can contact us at support@yuitalk.com to review or delete a child's data.
10. Changes to this policy
- 10.1When the app or our processing changes, we update this policy and the date at the top.
- 10.2If a change materially affects how we use your data, we will tell you in the app before it takes effect, and ask for fresh consent where the law requires it.
- 10.3The current version always lives at this address.