← YUKA

Privacy Policy

Last updated: July 2, 2026

TODO: Before publishing, replace [LEGAL ENTITY NAME], [BUSINESS ADDRESS], and [CONTACT EMAIL] everywhere they appear in this document — search for the brackets.

1. Who We Are

This Privacy Policy explains how [LEGAL ENTITY NAME], operating the YUKA website and community ("we", "us", "our"), collects, uses, and protects information when you visit our website or interact with us on LINE or Telegram. Our registered address is [BUSINESS ADDRESS].

2. Information We Collect

We may collect the following categories of information:

  • Usage data — pages visited, time on page, scroll depth, button clicks (via Microsoft Clarity / Google Analytics, once activated)
  • Device data — browser type, operating system, screen size, IP address
  • Geo data — approximate country derived from IP address
  • Messaging data — messages you send via LINE or Telegram are processed to generate responses
  • Cookies — see our Cookie Policy
  • Waitlist / contact data — email address, if you join a waitlist or mailing list
  • Purchase data — billing details processed via Stripe, if and when paid products are introduced (we do not currently sell anything through this website)

3. How We Use Your Information

  • To deliver and improve the website and chatbot experience
  • To detect your region and serve region-appropriate content
  • To analyse usage patterns and optimise content (heatmaps, session recordings)
  • To prevent abuse and enforce rate limits
  • To process payments (via Stripe) where applicable

We do not currently run retargeting or advertising campaigns. If that changes, this section will be updated to name the specific ad platforms used before they go live.

4. Legal Basis for Processing (GDPR / UK GDPR / LGPD)

Where applicable, we rely on legitimate interests for analytics and on consent for non-essential cookies — we apply this standard globally rather than only to visitors in the EU, UK, or Brazil. You may withdraw consent at any time via our Cookie Policy.

5. Data Sharing

We do not sell your personal data. Depending on which features are active, we may share data with:

  • Microsoft Clarity — session recordings and heatmaps, active (Microsoft Privacy Statement)
  • Google Analytics — usage analytics, optional, not currently active (Google Privacy Policy)
  • Cloudflare — hosting, DDoS protection, geo-routing
  • Supabase — database and message storage, planned, not yet in use
  • Stripe — payment processing, planned, not yet in use — we do not currently sell anything
  • LINE / Telegram — messaging delivery for community access

This list will be updated as tools are added, activated, or removed.

6. Data Retention

Chat and community activity data is retained for up to 90 days after your last interaction, then deleted or anonymised. Analytics data (Clarity/GA4) is retained for up to 26 months. Purchase and transaction records, once purchases exist, are retained for up to 7 years where required for tax and accounting purposes.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request deletion of your data
  • Object to or restrict processing
  • Request data portability
  • Withdraw consent at any time

To exercise any of these rights, contact us at: [CONTACT EMAIL]

8. Cookies

We use cookies for language preferences and analytics. For full details, see our Cookie Policy.

9. Children

This website is intended for users 18 years of age and older. We do not knowingly collect personal data from minors. Access to this website requires confirming you are 18 or older. If you believe a minor has provided us with data, contact us immediately at [CONTACT EMAIL].

10. Security

We implement industry-standard security measures including HTTPS/TLS encryption, access controls, and secure token handling. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

11. International Data Transfers

Depending on where our service providers are located, your information may be transferred to, stored, and processed in countries other than your own, including the United States. We take reasonable steps to ensure appropriate safeguards are in place for any such transfers.

12. Your California / US State Privacy Rights

If you are a resident of California or another US state with its own privacy law, you may have additional rights, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the "sale" or "sharing" of personal information — we do not sell personal information. To exercise these rights, contact us at [CONTACT EMAIL].

13. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact

[LEGAL ENTITY NAME]
[BUSINESS ADDRESS]
Email: [CONTACT EMAIL]