Privacy Policy
This Privacy Policy describes what personal data Yomimono collects, how I use it, and the rights you have over it.
Who runs Yomimono
Yomimono is run by Grzegorz Biesiadecki, an individual based in Poland, who acts as the data controller for any personal data processed through the service. You can reach me at hello@yomimono.ai.
What I collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Email address | To create your account and send magic-link sign-in emails. | Contract |
| Learning data (textbook, chapter, vocabulary you've marked as known, stories generated for you, quiz answers) | To tailor stories to your level and track your progress. | Contract |
| Custom prompts you write | To pass to the story-generation model on your behalf. | Contract |
| Product analytics (page views, button clicks, IP-derived country) | To understand how the app is used and improve it. Only collected if you consent via the cookie banner. | Consent |
| Server logs (IP address, request paths, timestamps) | To operate the service, debug issues, and detect abuse. | Legitimate interest |
Who I share data with (subprocessors)
Yomimono is built on top of a few third-party services. They process data on my behalf, under data processing agreements:
| Service | Purpose | Location |
|---|---|---|
| Supabase | Authentication and database | EU |
| PostHog | Product analytics (only with your consent) | EU |
| Anthropic | Story and quiz generation. Receives the content of your custom prompt and your vocabulary list, but not your identity. Logs API inputs for up to 30 days for safety purposes; does not train on them. | United States |
| Resend | Sending magic-link sign-in emails | United States |
| Sentry | Error monitoring (technical errors only) | EU |
Transfers to the United States rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.
How long I keep your data
- Account data and learning history: kept while your account exists. Deleted within 30 days of account deletion.
- Server logs: up to 90 days.
- Analytics events: up to 12 months.
Your rights
Under GDPR you can ask me to:
- Access the data I hold about you
- Correct it if it's wrong
- Delete it ("right to be forgotten")
- Export it in a portable format
- Object to or restrict processing
- Withdraw consent for analytics at any time
Email hello@yomimono.ai and I'll respond within 30 days. You also have the right to complain to the Polish Personal Data Protection Office (UODO) or your local supervisory authority.
Cookies and tracking
Analytics (PostHog) only loads if you accept it via the cookie banner. You can change your choice at any time from the cookie settings in the app. Yomimono does not use any other tracking cookies.
Children
Yomimono is not intended for children under 16. If you believe a child has created an account, contact me and I'll delete it.
Changes to this policy
If this policy changes meaningfully, I'll update the date above and notify active users by email. Minor edits will just bump the date.