Privacy Policy

Version of 16 October 2026

General provisions

This Policy sets out how personal data of users of the Yes and No service (the "Service") is processed. The controller of that data is JUNIOR ENTERTAINMENT MMC (the "Operator"). Use of the Service constitutes agreement with this Policy.

1. Categories of data processed

The Operator processes:

• The email address, where the user has signed in, for identifying the user and delivering the sign-in link.
• The content of requests and results: the text of the question, its interpretation by the Service, the models' answers, the resulting score and the summary.
• A device identifier — a random technical identifier held in the device's storage. Where the user has not signed in, the history of requests, the balance of paid questions and the acceptance of the terms are kept against it; on sign-in they are transferred to the account. It does not by itself identify a person.
• Purchase details: the application store's transaction identifier, the pack purchased and the date of purchase, for crediting paid questions and preventing them from being credited twice.
• Acceptance of the terms: the edition of the Terms accepted, the date of acceptance and the confirmation of age.
• Technical data: IP address, the date, time and address of the request, and browser details (web server logs).

The Operator does not process: name, telephone number, postal address, payment details, location data, or information about visits to other sites.

2. Purposes and legal bases of processing

Processing is carried out for the purpose of providing the Service, on the following bases:

• Performance of the contract with the user — for the email address, the device identifier, the requests and the results, the purchase details and the acceptance of the terms.
• The Operator's legitimate interest in keeping the Service operational and preventing abuse — for technical data.
• The user's consent — for the transmission of the question to the providers of artificial-intelligence models (section 3) and for the audio recording where voice input is used. The app discloses that transmission and asks for consent before the first question.

3. Categories of recipients

• Providers of artificial-intelligence models. To produce the answer, the text of the question is transmitted to third-party providers of artificial-intelligence models. The current list of those providers, and what each of them receives, is published at yesandno.ai/legal/providers-en.html; it is generated from the Service's configuration and changes whenever the composition of providers changes. At the date of this edition they are OpenAI, Anthropic, Google, xAI, Perplexity and Mistral AI. The models that processed a given request are also identified in the analysis result. Certain providers perform an internet search based on the text of the question. No name, email address or device identifier is transmitted with the question. Each provider processes the transmitted data under its own terms and outside the Operator's control.
• Speech recognition. Where voice input is used, the audio recording is transmitted to the provider named for speech recognition in the same list (at the date of this edition, OpenAI). The recording is not retained by the Operator; only the resulting text is retained.
• Email. Sign-in link messages are sent by the Operator's own mail server.
• Apple and Google — where the user selects the corresponding sign-in method, and when a purchase made through their stores is verified, to the extent required to do so.

No data is transmitted to advertisers, data brokers or analytics services. Personal data is not sold.

4. Cross-border transfer

The providers listed in section 3 may be located outside the user's country of residence. Transfers are made to the extent required to produce an answer to the request.

5. Limitations of processing

The Operator does not use cookies for tracking: only the sign-in session, the selected language and the selected appearance are stored in the browser. No counters or web analytics systems are used. No profiling is carried out and no advertising is displayed. Passwords are not stored, as password authentication is not used.

6. Retention periods

• requests and results — for the lifetime of the account or, without signing in, until the user deletes the device's data;
• database backups — 14 days;
• web server logs — up to 30 days;
• following deletion of the account or of the device's data, data is deleted within 30 days; it leaves the backups as those are rotated.

7. Rights of the data subject

The user may request a copy of the data processed, its correction, or deletion of the account by writing to contact@juniorai.net. Requests are handled within 30 days. Deletion of the account or, where the Service is used without signing in, of the device's data is carried out in the app (the Account section); where the app cannot be reached, an account may be deleted on request, as set out on the account deletion page.

Data transmitted to the providers listed in section 3 is processed by them independently; its withdrawal is carried out in the manner established by the provider concerned.

8. Age restrictions

The Service is not intended for anyone under 18. The Operator does not knowingly collect the data of such persons.

9. Security measures

Data is transmitted over a secured connection (TLS). The database is not reachable from the internet. Access keys to providers' services are held on the server and are not passed to the browser. Absolute security of data is not guaranteed by the Operator.

10. Changes to this Policy

The Operator may amend this Policy. The applicable edition and its date are shown at the top of this document. Where a change is material — affecting the categories of data processed or the purposes of processing — the app asks for acceptance at the next launch.

11. Operator details

JUNIOR ENTERTAINMENT MMC, Apartment 49, 23A Ganja Avenue, Baku AZ-1018, Republic of Azerbaijan. Enquiries: contact@juniorai.net.