At Yana App, S.A.P.I. de C.V. (hereinafter “Yana” or “We”) we value your privacy and that of everyone who shares their personal data with Us, including without limitation customers, data subjects, suppliers and employees (hereinafter “You” or the “Data Subject”), and we are committed to protecting it. Accordingly, Yana is the data controller responsible for the processing and protection of the Personal Data you share with us, and we therefore make this Privacy Notice (the “Privacy Notice”) available to you.
Please read this Privacy Notice carefully, since by accessing, using our Services or browsing our Platform, you acknowledge that you have read and fully understood it. If you do not agree with the entirety of this Privacy Notice, you are prohibited from using, and we ask you not to use, the Platform or our Services, since accessing or using the Platform implies your full acceptance of this Privacy Notice.
Our contact and identification details:
Legal name: Yana App, S.A.P.I. de C.V
Trade name: Yana
Mexican Tax ID (RFC): YAP170328656
Address: Av. Paseo de la Reforma #404, Piso 1, Interior B, Col. Juárez, Alcaldía Cuauhtémoc, C.P. 06600, Mexico City, Mexico.
Email: [email protected]
Platform: Our mobile application (compatible with Android and iOS), our website https://www.yana.ai, as well as any subdomain, domain linked or redirected to it.
Personal Data Controller:
Department: Yana Personal Data Department
Representative of the Personal Data Controller: Andrea Campos Guerra
Contact details: [email protected]
By using or browsing our Platform, using our Services or collaborating with Us, you expressly accept the collection and processing of your Personal Data in accordance with this Privacy Notice.
I. For what purposes will Yana use your Personal Data?
The Personal Data we collect will be used for the following purposes:
Primary Purposes. These are the purposes necessary for the existence, maintenance and fulfillment of the legal relationship between you and Yana, which consist of: (i) creating and managing your account; (ii) verifying that you meet the minimum age required to use Yana; (iii) adapting certain features and making the experience more personalized; (iv) improving Yana, its responses and its features; (v) addressing your comments, complaints and suggestions; and (vi) complying with legal and regulatory obligations and requests from competent authorities.
In addition, and only if you do not object, your Personal Data may be used for the following:
Secondary Purposes. (i) Evaluating the quality of our services; (ii) sending information about products, services, promotions, news and content related to Yana; (iii) carrying out marketing, advertising and commercial prospecting activities; (iv) running advertising and promotional campaigns; and (v) carrying out statistical analysis, market research and service improvement activities.
If you do not want your Personal Data to be processed for the secondary purposes described above, you may express your refusal by following the process described in section XXI (twenty-one) of this Privacy Notice.
II. What Personal Data does Yana collect from you?
For the purposes mentioned above, Yana may request, collect and/or have access to one or more of the following categories of Personal Data:
(i) Data necessary to create and access your account;
(ii) Technical data that may be generated or collected through the use of the Platform; and
(iii) User-generated content.
Depending on the features you use within the Platform and how you interact with Yana.
1. Data necessary to create and access your account:
Identification data:
Username.
Date of birth.
Age.
Country of residence
Sex or gender, in some cases.
Not all of this data is used in the same way. Some of it is necessary to create and manage your account, and some helps us personalize your experience.
Contact data:
Email address.
This is the data that allows us to communicate with you.
This data may be used to create, verify and manage your account, and to provide you with information related to the Service.
Once your account is created, the information you share in conversations with Yana will be unlinked from the data directly associated with your account, in order to protect your privacy and prevent such information from being directly identified with your user account.
When you first sign up for Yana, we may ask you to complete a short questionnaire that helps us learn your preferences and offer you a more personalized experience within the app. If you decide not to complete the sign-up process, Yana will not store the information you provided during that process.
2. Technical data that may be generated or collected through the use of the Platform:
Depending on the features you use and the information you choose to provide voluntarily, we may collect the following categories of data:
Usage and behavior data within the Platform: information about how you use and interact with the Platform, including preferences, navigation patterns, and frequency and duration of use. Please see section XXV (twenty-five) of this Privacy Notice.
Device technical data: technical information about the device through which you access or use the Platform, including, as applicable, device type and model, operating system and app version. Please see section XXV (twenty-five) of this Privacy Notice.
3. User-generated content:
Yana does not request health data or other sensitive data as defined by Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), nor special categories of data as defined by the European Union’s General Data Protection Regulation (GDPR).
When you use the chatbot, you can write freely and decide whether you wish to voluntarily share this type of information in a conversation. If you choose to include it, that information will remain part of the conversation history and may be processed automatically, including being stored as memory, in order to personalize your experience and detect possible crisis situations.
III. What happens to my conversations with the Yana character?
Yana’s chatbot is designed to allow open conversations. This means that you decide what you want to share. You can write personal information in a conversation, including information that may be considered specially protected, even though Yana does not ask you for it directly. While your account is active and until you request its deletion, conversations will be stored in Yana’s database.
Yana uses separation and pseudonymization mechanisms to reduce the possibility of directly associating a conversation with the information used to create your account. When they enter our systems, email addresses are automatically encrypted and activity within Yana is linked to a unique user identifier (UID). Therefore, under ordinary conditions, Yana cannot directly associate your activity within the app with your email address or identity.
IV. Can Yana know who I am?
Yana uses measures to keep your account information separate from your activity within the app. Your email address is encrypted and your activity is linked to a UID. Therefore, under normal conditions, Yana does not directly associate a conversation with your email address.
However, there are specific situations in which it may be necessary to verify your identity. Your account information may be linked to your activity within the app only when necessary to handle a specific request and with your consent, in the following cases:
The exercise of any of the rights set forth in our Privacy Notice.
Handling a technical support request when it is necessary to identify your account.
V. Does Yana use my conversations to improve the app?
Yes. We may use information derived from the use of Yana and from conversations to improve our products and services. When we use it for these purposes, the information is kept separate from your email address, and Yana will not attempt to re-identify any person from it.
VI. Who processes my Personal Data?
Yana is the data controller of your Personal Data; however, it may engage providers and third parties acting as data processors to provide infrastructure, storage, technology, support or other services necessary for the operation of the Platform, including Amazon Web Services (AWS). These providers must offer sufficient data security and protection guarantees and will be subject to confidentiality and security obligations.
Some data may be stored or processed in the United States of America, for which Yana will implement the legally applicable mechanisms and measures to protect your personal data in such transfers.
VII. What can I do so that Yana does not use my data for secondary purposes?
If you do not want your Personal Data to be processed for these secondary purposes, you may let us know at any time by following the process described in section XXI (twenty-one) of this Privacy Notice. Your refusal to allow the use of your Personal Data for secondary purposes may not be a reason for us to deny you the services you purchase from Us.
VIII. Under what principles will Yana process my Personal Data?
The processing of your Personal Data at Yana, in accordance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), is carried out in accordance with the principles of:
Lawfulness: We will process your Personal Data in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations and other applicable legal provisions, always within the limits permitted by current legislation.
Purpose: Your Personal Data will be processed only for the purposes described in this Privacy Notice. If we intend to use it for different purposes, we will first request your consent, where required by applicable law.
Loyalty: Your Personal Data will be processed giving priority at all times to the protection of your interests, limiting ourselves to using it in the manner and for the purposes stated in this Privacy Notice.
Consent: Where required by applicable law, we will request your prior consent for the processing of your Personal Data.
Quality: We will endeavor to ensure that the Personal Data we process is correct, complete, accurate and duly updated, in order to fulfill the purposes for which it was collected.
Proportionality: We will only collect and process Personal Data that is necessary, adequate and relevant to fulfill the purposes set out in this Privacy Notice.
Information: We will make this Privacy Notice available to you in a clear and accessible manner, in order to inform you about the processing of your Personal Data, the corresponding purposes and the mechanisms for exercising your rights. We will keep this Privacy Notice up to date so that you are always aware of what Personal Data we collect from you and how we process it.
Accountability: At Yana we take security measures to protect your Personal Data against damage, loss, alteration, destruction or unauthorized use, access or processing, and to ensure compliance with the principles and obligations described in this Privacy Notice.
IX. Does Yana collect Personal Data from minors?
In accordance with the laws applicable in the jurisdiction where you are located, the use of any of the Services offered by Yana is intended for persons of legal age, with the exception set out in the following paragraph.
If you are a minor but are 13 (thirteen) years of age or older, you may use Yana’s Services solely and exclusively if you have the consent of your parents or guardians, it being understood that under no circumstances may Yana interact with children under 13 (thirteen) years of age. Therefore, if you are a minor and do not have the authorization of your parents or legal guardians, or if you are under 13 (thirteen) years of age, you must refrain from using the Platform.
If you are the parent, guardian or legal representative of a minor or legally incapacitated person and you know that they have provided us with Personal Data without your consent, you may request that such data be deleted through the procedure described in section XXI (twenty-one) of this Privacy Notice.
X. Does Yana collect sensitive Personal Data?
Yana DOES NOT request or require Sensitive Personal Data to provide its Services.
As part of the Platform’s features, Yana invites you to record your mood. This record is optional and is used to personalize your experience. Likewise, as a result of your interactions and conversations with the Platform, you may, at your sole and absolute discretion, voluntarily provide information considered sensitive, the disclosure of which is your sole responsibility.
The Sensitive Personal Data you might provide as a result of your interaction with Yana includes:
a) Health data: information related to the assessment, preservation, care, improvement or recovery of past, present or future physical or mental health, as well as genetic information.
b) Ideological data: information relating to ideological, religious, philosophical or moral beliefs.
c) Data concerning sex life: information related to a person’s sexual behavior, preferences, practices, habits or activity.
You hereby acknowledge and accept that including such information in conversations with Yana is voluntary and is NOT a requirement to access or use our Services. Depending on the features you use and the information you voluntarily choose to provide, the Platform may process Sensitive Personal Data.
XI. What is pseudonymization of Personal Data and when does Yana use it?
Pseudonymization is a measure by which Personal Data is separated from the information that directly identifies a person and replaced with an identifier, such as a code or UID. The information can be linked back to the person if additional information is available.
When it is used: Yana uses measures to keep your account information separate from your activity within the app. Your email address is encrypted and your activity is linked to a UID. Therefore, under normal conditions, Yana does not directly associate a conversation with your email address. In other words, your activity within the app is associated with a UID instead of being directly linked to your email address.
In addition, Yana may generate aggregated statistics, trends and metrics that do not allow any person to be identified, and only this type of aggregated information may be shared with universities, academic institutions or research centers.
XII. Where does the personal data we collect come from?
Your personal data may come from the following sources:
Directly from you, when you create an account, complete your information, use the chatbot, record information in the emotion log or use Yana’s various features.
From third parties, when you choose to sign up or log in through services such as Google, Apple or Facebook. In these cases, Yana may receive the information that such services provide in accordance with the corresponding permissions.
Automatically, when you use Yana, through technical information related to your device, connection and use of the app, such as IP address, device type, operating system, technical identifiers, logs and cookies.
The Platform is designed to offer a supportive space where you can express yourself freely and with confidence. If you include Personal Data, information about your experiences, emotions, thoughts, relationships or other aspects of your life in your prompts or conversations with Yana, that information will be received and processed to provide the Platform’s support and personalization features. If you include personal information about other people in your conversations, that information will be received and processed by Yana as part of the Content you share, under your responsibility. Depending on the conversation and the request you make, the information you share may be used to generate the corresponding responses and, where applicable, may appear or be reproduced in whole or in part in later responses.
XIII. What happens if I use Google, Apple or Facebook to sign up?
If you choose to create your account or log in to the Platform through third-party authentication services such as Apple, Google or Facebook, we may receive from those providers certain information associated with your account, solely to enable the creation, identification and authentication of your Yana account. The information we may receive will depend on the provider you use:
Apple: we may receive your email address.
Google: we may receive your name and email address.
Facebook: we may receive your name and email address.
The information we receive from these providers will be processed in accordance with this Privacy Notice. The use, processing and protection of information by Apple, Google or Facebook will be governed by their respective privacy notices or policies, so we recommend that you review them before using their authentication services.
XIV. What is the legal basis for processing your Personal Data?
The legal basis for processing your Personal Data is:
Your consent: You may withdraw your consent at any time.
The performance of our services.
Compliance with a legal obligation: When a law requires us to use or retain certain information.
In certain cases we may use information because it is necessary for our legitimate interests, for example, to maintain security, prevent misuse or improve how Yana works.
We, Yana, as a Mexican company, are regulated by the laws of the Mexican Republic; therefore, regardless of where you are located or your nationality, by using our Platform or our services and/or entering into a relationship with Us, you agree to resolve any dispute or interpretation of this Privacy Notice before the Mexican courts and in accordance with the applicable laws in force in Mexico, waiving any other jurisdiction that may correspond to you by reason of nationality, domicile or any other present or future reason. The foregoing is without prejudice to any non-waivable rights you may have under the laws of your place of residence.
XV. What if you reside in the European Union and the GDPR applies to you?
In addition to the provisions of this Privacy Notice, if you reside in the European Union, please be advised that the processing of your personal data by Yana is subject, where applicable, to the European Union’s General Data Protection Regulation (GDPR).
Principles
Yana will process your personal data in accordance with the following principles:
Lawfulness, fairness and transparency: we will process your data lawfully, fairly and transparently.
Purpose limitation: we will collect your data for specified, explicit and legitimate purposes.
Data minimization: we will collect only data that is adequate, relevant and necessary.
Accuracy: we will endeavor to keep your data accurate and, where necessary, up to date.
Storage limitation: we will keep your data only for as long as necessary to fulfill the stated purposes.
Integrity and confidentiality: we will protect your data through appropriate security measures against unauthorized access, loss, alteration or processing.
Accountability: Yana will be responsible for compliance with these principles and will be able to demonstrate the measures implemented to ensure it.
When you exercise your rights, Yana will inform you of the action taken on your request within the period established by the GDPR, which will generally be one month from receipt. This period may be extended by up to two additional months where necessary.
International transfers
Yana uses third-party technology infrastructure to operate the app. Certain information is currently stored on Amazon Web Services (AWS) in the United States. You may request additional information about the safeguards used for an international transfer by writing to [email protected].
Your rights
You have the same rights described in this Privacy Notice. If you believe that Yana is not processing your data correctly, you can first contact us so that we can review your situation. You also have the right to lodge a complaint with the relevant data protection authority, in particular the authority of the European Union country where you live, work or believe an infringement occurred.
Personal data breaches
In the event of a personal data breach that must be notified under the GDPR, Yana will notify the competent supervisory authority without undue delay and, where applicable, within the period established by the GDPR.
XVI. Can Yana transfer your Personal Data?
Yes. In order to offer you an adequate service, Yana may transfer your Personal Data to the persons indicated below. By accepting this Privacy Notice, for as long as your Personal Data is retained, you acknowledge and accept that Yana may disclose it or provide partial or total access to it, without needing to request your authorization again, to:
A. Service Providers: third parties engaged to act on Yana’s behalf, such as: (i) administrative, legal and/or accounting services; (ii) technology service providers such as (a) artificial intelligence service providers, (b) analytics providers, and (c) cloud and infrastructure providers; (iii) developers; (iv) holding companies, subsidiaries, affiliates or companies corporately related to Yana through which Yana provides services. The information provided to these providers will be solely and exclusively what is necessary for the proper performance of the services they provide to Yana. These may include:
Amazon Web Services (AWS): infrastructure and storage.
Google: authentication and other services.
Apple: authentication.
Facebook/Meta: authentication.
Artificial intelligence providers: processing necessary for certain chatbot features.
Analytics and usage statistics providers.
Subscription management providers: management of purchases and subscriptions made through the app stores.
Other providers necessary to operate, protect and improve Yana.
B. Authorities: Administrative and judicial authorities that request information in the exercise of their powers, or when Yana, at its discretion, considers that there are sufficient grounds to suspect the commission of an offense or crime.
Yana does not sell, rent, license or commercialize your Personal Data. Nor will it communicate, transmit or assign your Personal Data to third parties other than those provided for in this Privacy Notice.
Yana will only share with third parties the information that is strictly necessary to fulfill the purposes set out in this Privacy Notice.
Your Personal Data is stored and processed on servers located in the United States of America, operated by our cloud infrastructure providers. By using the Platform from outside that country, you agree to the transfer of your data to the United States of America. For Personal Data originating in the European Economic Area or the United Kingdom, Yana implements recognized safeguards, such as the Standard Contractual Clauses approved by the European Commission.
XVII. What happens if Yana is acquired by a third party?
If Yana is acquired by a third party, the Personal Data collected will be transferred to Yana’s acquirer. In that case, the acquirer, as the new data controller of your Personal Data, will continue to maintain the administrative, technical and physical security measures necessary to guarantee the privacy and protection of the Personal Data collected against damage, loss, alteration, destruction or unauthorized use, access or processing, in accordance with this Privacy Notice. The foregoing is on the understanding that Data Subjects must accept the new privacy policies.
XVIII. What measures does Yana use to protect your Personal Data?
Yana implements technical and administrative security measures designed to protect personal data against damage, loss, alteration, destruction, and unauthorized access or processing. These measures include the following:
Access to our databases is restricted, and only previously authorized persons, systems or devices can connect to them;
Users’ email addresses are stored using encryption mechanisms, in order to reduce the risk of direct identification of users in the event of unauthorized access to the stored information;
We use encryption mechanisms to protect certain information and prevent it from being read or used by unauthorized persons, both when it is stored and when it is transmitted;
Yana maintains event logging mechanisms and security controls over its systems and services.
Your Personal Data is protected both online, through encryption, and offline, since only personnel designated to perform a specific task with the Personal Data have access to the Database. These procedures are constantly evaluated and updated by Yana. No system can guarantee absolute security. However, Yana works to reduce risks and maintain security measures appropriate to the information it processes.
XIX. How long will Yana keep your Personal Data?
We do not keep your data longer than necessary for the purposes for which it was collected, unless a legal obligation requires us to keep it for a longer period. The retention period will depend on the type of information and the purpose. For example:
your account information may be kept for as long as you maintain your account; and
conversations may be kept while your account is active or until you request their deletion.
When you request the deletion of your account, we will delete your personal data in accordance with our deletion procedures.
Where there is a legal obligation, once our relationship ends Yana will retain your Personal Data, for compliance with applicable legal obligations, for an additional period of 5 (five) years, in accordance with the retention obligations required by current legislation.
Pseudonymized conversations are still considered Personal Data; they will therefore be kept while your account is active and deleted in accordance with our deletion procedures when you request the deletion of your account.
XX. What are your rights regarding your Personal Data?
In accordance with the Federal Law on the Protection of Personal Data Held by Private Parties and its regulations, your rights are as follows:
Access: you have the right to know what personal data we hold about you and how we use it.
Example: you can ask us what information we have on record about you.
Rectification: you can ask us to correct your data when it is incorrect or incomplete.
Example: if your date of birth is incorrect, you can ask us to correct it.
Cancellation: you can ask us to stop using certain personal data.
Example: you can ask us to stop using data that is no longer necessary for the purpose for which it was collected.
Opposition (objection): you can object to certain uses of your personal data.
Example: you can object to your data being used for a particular purpose.
Withdrawal of consent: when the processing of your data is based on your consent, you can withdraw it at any time.
Example: if you agreed to receive commercial communications, you can later withdraw that consent.
Restriction of processing: you can ask us to temporarily restrict the use of your data.
Example: if you believe your data is incorrect and we are verifying it, you can ask us to limit its use while the verification takes place.
Portability: you can ask to receive your personal data in a structured, commonly used and machine-readable format.
Example: you can ask us to provide you with your data.
Erasure or right to be forgotten: you can ask us to delete your personal data.
Example: you can ask us to delete data that is no longer necessary for the purpose for which it was collected.
Complaint to a supervisory authority: if you believe your data is not being processed in accordance with applicable regulations, you can lodge a complaint with the competent data protection authority.
If you gave us your consent for a specific purpose, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Exercising certain rights, such as erasure or restriction of processing, may mean that Yana can no longer provide you with certain services or features, where the data is necessary to provide them.
If a request cannot be fulfilled in whole or in part, we will inform you of the corresponding reasons and, where applicable, the available alternatives.
XXI. How can you exercise your ARCO (R) rights?
To exercise any of these rights, you must:
1. Prepare a written request addressed to us (Yana) stating: (i) your full name; (ii) the email address at which Yana may respond to your request; (iii) your relationship with Yana; and (iv) a brief description of the facts, including, as precisely as possible, which right you wish to exercise and with respect to which data.
For requests to rectify Personal Data, in addition to the above, you must indicate the changes to be made and provide documentation supporting your request.
2. Your request must be accompanied by a copy of the documents proving your identity or, where applicable, the legal representation of the Data Subject.
3. You must send your request to the following email address: [email protected] or to Av. Paseo de la Reforma #404, Piso 1, Interior B, Col. Juárez, Alcaldía Cuauhtémoc, C.P. 06600, Mexico City, Mexico, to the attention of the “Personal Data Department”.
Where handling your request requires such linking and your consent must be obtained, we will request your specific consent before carrying it out.
In order to locate your account and properly handle your request, we may ask you for:
Your username within the app.
Your registered email address
Age.
Date of birth.
The information requested will depend on the nature of your request and will be used solely to verify your identity and handle your request.
The information you provide to verify your identity will be used solely to handle the request for which it was provided and will be processed in accordance with our Privacy Notice and applicable law.
Once we receive your request, we will confirm receipt to the email address you indicated in your request. From the day we confirm receipt of your request, Yana will have a maximum of 20 (twenty) business days to respond, so that, if the request is granted, it is carried out within the 20 (twenty) business days following the date on which the response is communicated.
The above periods may be extended once for an equal period, provided the circumstances of the case justify it.
It is important to clarify that, in addition to the process established herein, if you believe that your rights regarding the protection of your Personal Data have been violated, you have the right to go before the corresponding authority to defend their exercise. In Mexico, this authority is the Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno).
XXII. How can you stop receiving advertising messages from Yana?
Yana may contact you for advertising purposes. If you receive emails of this type, you may, if you wish, withdraw your consent through the link “I no longer wish to receive emails of this type” included in them.
XXIII. Is there automated decision-making, profiling or logic applied to your Personal Data?
Yes. Yana uses automated processing to personalize your experience: the information you share is used to adapt the responses, recommendations and content you receive. Yana DOES NOT make automated decisions that produce legal effects concerning you or that similarly significantly affect you (we do not deny services or set prices through automated means).
XXIV. Does Yana use Artificial Intelligence to process your Personal Data?
Yes. Please be advised that Yana uses Artificial Intelligence systems provided by third parties to facilitate your conversational interactions, generate content and, in general, provide you with a better user experience. By using our Platform, you acknowledge and accept that the responses, recommendations and content generated by Yana are produced through automated and probabilistic processes and may therefore contain errors, omissions, biases, inaccuracies, outdated information or incorrect interpretations of context. Accordingly, the information and content generated by Yana are for informational and recreational purposes only and do not constitute medical, psychological, psychiatric or professional advice of any kind, nor do they replace human judgment, consultation with professionals or the intervention of specialized services.
Please note that Yana uses various external Artificial Intelligence providers and is therefore subject to their terms and conditions; however, the content of the conversations you have with the Yana Character WILL NOT be used to train or improve the general artificial intelligence models of such providers. The conversations you have with Yana will be kept solely by Yana, separated from your email address through pseudonymization processes, and may be used by Yana exclusively for purposes of maintaining, monitoring and improving the quality of the Services.
XXV. What technical data does Yana collect?
A) Website.
On our website we use cookies and web beacons, through which it is possible to analyze your behavior in order to provide you with a better service and browsing experience. The Personal Data we collect through these technologies is used for: site analytics and statistics; and improving the site’s service, quality and performance. The information we obtain includes: technical characteristics of your device, the region where you are located, browser type and operating system, and date and time of access. You can disable or block these technologies from your browser’s cookie settings; doing so may cause the site not to work properly.
B) Mobile application
In our app we use analytics tools integrated into the application (SDKs) that allow us to understand how the Platform is used. The information we obtain through these technologies includes: technical characteristics of your device, operating system and app version, the approximate region where you are located, device and installation identifiers, push notification tokens, and usage data such as the features you use and the date and time of your sessions.
This information is used for: analytics and usage statistics of the Platform; improving the app’s service, quality and performance; and diagnosing errors and technical failures.
For these purposes we use analytics providers, whose processing of information is also governed by their own privacy policies. We currently use Unity Analytics (unity.com/legal/privacy-policy) and PostHog (posthog.com/privacy). In addition, the app stores provide us with aggregated statistics on the downloads and use of Yana, in accordance with their own policies.
You can limit part of this collection from your device’s privacy settings: on iOS, through app tracking permissions; on Android, through the advertising ID settings. Push notifications can be turned off from your device settings or from the app. Disabling these technologies may cause the app not to work properly.
C) App stores
When you download or use the app through the App Store or Google Play, those platforms collect information in accordance with their own privacy policies and provide us with aggregated statistics on downloads and use. Yana does not control the information that these Stores collect directly from you.
XXVI. What happens if you access another site from our Platform?
The Platform may contain links to other websites that are not owned by Yana. Therefore, Yana is in no way responsible for the privacy policies or content of such websites. We recommend that whenever you visit a new site, you read its privacy notice and only use its platform and/or services when you fully agree with them.
XXVII. How will we notify you of changes to our Privacy Notice?
This Privacy Notice may be modified, changed or updated from time to time as a result of new legal requirements, the needs of the services offered by Yana, privacy practices, changes in the operating model or other causes. At Yana we are committed to keeping you informed of any changes to this Privacy Notice through our Platform.
XXVIII. Acceptance of the Terms.
This Privacy Notice constitutes a legal agreement between you (the Data Subject) and Yana. By maintaining a relationship with us or using the services of this Platform, you confirm that you have read, understood and consented to the terms set out above.
This Privacy Notice is governed by and shall be applied in accordance with the laws of the United Mexican States. If you access the platform or maintain a relationship with us from another jurisdiction, it will be your responsibility to verify that the processing of your Personal Data under this Privacy Notice does not contravene the laws applicable in your place of residence. If there is any legal restriction or incompatibility, you must refrain from using the platform or maintaining a relationship with us.
This Privacy Notice may be made available to you in different languages. In the event of any discrepancy between versions, the Spanish version shall prevail, to the extent permitted by applicable law.
For any questions in this regard or relating to this privacy notice, you can contact us at [email protected]
Last Updated: September 23, 2026
YANA APP, S.A.P.I. DE C.V.
Total or partial reproduction by any means or in any form is prohibited without the prior, express and written authorization of its owner.