ymwrite (云猫快写) — Privacy Summary and App Description

Version: 1.0.0-draft.3 — Effective: not yet in effect (draft)

This page is an English summary of the ymwrite privacy policy and a plain description of what the app does. It is provided for reviewers and English-speaking users. The Chinese privacy policy is the governing version; if the two differ, the Chinese version prevails.

Operator: 云猫光年创意科技有限公司, [to be announced: 运营者所在国家或地区]. Privacy contact: [to be announced: 个人信息保护联系人], privacy@ymwrite.com.

1. What the app does

ymwrite turns text into handwritten-style pages using the user's own handwriting. It is available only to adults (18+) and is not offered to users located in mainland China, Hong Kong or Macau, or in sanctioned regions. Features:

• Handwriting font: the user uploads samples of their own handwriting; we build a font that only their account can use. Each font requires a declaration that the samples are the user's own handwriting.
• Handwritten pages: text typed by the user, or drafted by AI, is laid out on lined paper, grid paper and other stationery in the user's handwriting or a built-in font.
• Worksheet solving: the user uploads a photo of a worksheet (for example math problems or fill-in-the-blank exercises). An AI model (Anthropic Claude) reads the questions and drafts answers, and the app can write those answers onto the original page in the user's handwriting. An answer-accuracy setting lets the user choose a lower accuracy, in which case the AI deliberately introduces plausible mistakes into some answers.
• Name fields: the user can fill in name, class, student number and school fields on a page. These values are used only for local layout and are never sent to any AI provider.
• Photo effect: a generated page can be rendered to look like a phone photo of paper on a desk.
• AI assistant: a chat interface that performs the operations above.
• Labels: every generated file carries an invisible AI-generated metadata label (XMP, following the Chinese national standard GB 45438-2025) that cannot be turned off. A visible "AI生成" ("AI-generated") corner tag is a user setting and is off by default; users who keep it off are told they must disclose AI generation where the rules of their setting require it. Anyone can check a file at ymwrite.com/verify.
• Use rules: our Acceptable Use Policy forbids submitting generated content as one's own independent work where a school, assessment body, degree-granting institution or employer does not allow AI; forbids uploading other people's handwriting or homework (except that of one's own child as guardian); forbids forging signatures or documents (such requests are blocked automatically); and forbids removing the AI labels.

2. Google user data

If a user chooses "Sign in with Google":

• We request only the openid and email scopes. We receive the Google account identifier (sub), the email address and whether it is verified. We do not request name, profile picture, contacts or any other Google data, and we do not store Google access or refresh tokens.
• This data is used only to sign the user in and to link accounts. It is not used for advertising, not sold, not transferred to third parties, not used to train any AI model, and never sent to any AI provider.
• ymwrite's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Users can unlink Google in their account settings or revoke access at myaccount.google.com. After account deletion, a one-way hash of the Google identifier is kept for 180 days only to stop repeated sign-ups for free credits (30 days for under-18 refusals).

3. What we collect and why

We do not collect payment card or bank details, contacts, GPS location, camera or microphone data. We do not sell personal information, use it for advertising, or use user content to train or improve general-purpose AI models. With 深度定制 (deep customisation) a per-font model is trained on the user's own handwriting samples; it writes only for that user and is deleted with the font.

4. Where data is processed

• Storage and compute: Amazon Web Services, Tokyo (backup and disaster recovery in Osaka), Japan.
• AI processing: Anthropic, PBC, United States — worksheet images (name fields masked by default), recognized text, glyph images that need review, AI assistant conversations, text to be drafted or answered, and suspicious input text for moderation. Anthropic's retention: [to be announced: Anthropic 对 API 输入输出的保留期限，含信任与安全例外；从签约时的商业条款与 DPA 逐字摘录].
• Sign-in: Google LLC, United States (only for users who choose Google sign-in).
• Payments: Afdian (爱发电), China. We only retrieve order details.

Users give separate consent to this cross-border processing at sign-up. Details for each recipient are in the Chinese cross-border notice and processor list.

5. Cookies

Only strictly necessary first-party cookies (session, device recognition, CSRF protection, and two 10-minute sign-in binding cookies) and local browser storage for interface preferences and unsent drafts. No third-party tracking, advertising or analytics cookies or scripts. See the cookie notice.

6. Retention (main items)

• Uploaded original files: deleted right after parsing (at most 1 hour).
• Worksheet pages: deleted after 30 days without access (user can choose 7 days, or keep a project up to 1 year).
• AI assistant conversations: deleted after 90 days of inactivity.
• Handwriting data: kept until the user deletes it or the account; deleted after 24 months without sign-in and without an active membership, after two email notices.
• Generation and download records, audit and security logs: 12 months.
• Orders and receipts: 3 years.
• Backups: rolling 35 days.

7. User rights

Users can access and export their data, correct it, delete individual items, withdraw consents and delete their account, mostly self-service in the account page, or by writing to privacy@ymwrite.com. We respond within 15 business days. Exports include the user's own samples, glyph images, projects and conversations, but not the derived handwriting model, because it could be used to synthesize handwriting without the AI label. Users may request an explanation and human review of automated decisions; automated account restrictions last at most 24 hours unless confirmed by a person. Users in the EEA, UK and other regions can also complain to their local data protection authority.

8. Minors

The service is for adults (18+) only. Worksheet photos may contain information about the user's own children; uploads are limited to the user's own or their children's work, name fields are masked by default before storage and before any AI call, and a separate guardian consent is required to upload such photos with masking turned off. See the rules for minors' personal information (Chinese).

9. Contact

privacy@ymwrite.com · support@ymwrite.com · report@ymwrite.com · security@ymwrite.com