YoTraviz - Privacy Policy
In short. YoTraviz is a private chat assistant that runs on your phone. The chat, the voice and the photo understanding run on the phone; the sound from your microphone and your photos never leave it. There is no account and no analytics. The network is used for model downloads you start, web search after your consent, an optional link to your own PC on your Wi-Fi, and one rewarded ad when you start that link. There is nothing to buy.
1. Microphone, camera and the assistant's brain
- The chat, the voice and the photo understanding run on your phone. The app asks for permission to use the microphone (RECORD_AUDIO) when you dictate or the assistant listens. The sound goes to a speech model (Whisper) on your phone and is turned into text; the sound is then dropped. It is never saved and never sent to me or to a third party.
- The camera (CAMERA) is used when you take a photo for the chat. Gemma reads the photo on your phone. Photos you attach are saved in the app's own folder with that chat and are not sent to the web. The app may change audio volume settings (MODIFY_AUDIO_SETTINGS) so that the voice plays at the right level.
- Chats are plain files in the app's own folder. You delete a chat from the thread list and a model in the brain manager. "About you" text is stored on your phone only. The app makes no cloud backup.
2. When the app uses the network
The network permission (INTERNET) is used in four cases. The app has no server of its own and I receive nothing from any of them.
- Model downloads you start. When you tap Download, the app fetches one model file from Hugging Face or GitHub over HTTPS. The request carries no personal data and no app identifier.
- Web search, after your consent. For a question that needs the world (news, scores, prices) or a message that starts with /web, the app asks once before the first search. If you agree, the text of the question goes to DuckDuckGo (lite) and Wikipedia over HTTPS, and "Read this page" fetches one page you tap. You can turn search off in Settings. The sites see the question and your IP address; I do not. Offline, the assistant answers from what it knows.
- "Work for my PC" (local network). If you switch this feature on, the phone runs a small server on your Wi-Fi address and announces itself on the local network (mDNS). A PC you pair with a 6-digit code (valid 5 minutes, single use; three wrong tries lock pairing for 10 minutes) can send tasks to the phone, and the phone returns task results, steps, status (battery, temperature, model, memory, screen), chat replies, transcribed speech, photo descriptions and, if you allowed it, notification text. Every request needs a token from pairing, and the server answers only devices on private network ranges. In this version the link is not encrypted (plain HTTP): the token and the data cross your Wi-Fi in clear text, so use it only on a network you trust. Nothing from this link goes to me or to any third party. Tools are off until you allow them, steps that change something wait for your approval, and a session has an expiry. "Forget my PC" revokes every pairing.
- One rewarded ad. Starting a "Work for my PC" session asks you to watch one rewarded ad (Google AdMob), after the age check and the consent form. See section 4.
Notification access (BIND_NOTIFICATION_LISTENER_SERVICE) is granted by you in Android settings and is used only to let the assistant read the last 50 notifications and say what is playing. They are kept in memory only, never stored, and not sent to me. Contacts (READ_CONTACTS) are asked for the first time you name a contact; the name is matched on the phone to open the dialer or messaging app and is not sent anywhere. Notifications (POST_NOTIFICATIONS) show download progress and the "Working for your PC" notification of the foreground service that keeps a session alive.
3. What data is processed, and by whom
| Data | Why | Who |
|---|---|---|
| The text of a question you let the app search, and your IP address | To get an answer from the web | DuckDuckGo and Wikipedia, under their own policies. Not sent to me. |
| Your IP address when you download a model | To deliver the file | Hugging Face or GitHub, under their own policies. |
| Task data, status and results of "Work for my PC" | To let your own PC give the phone work | Your paired PC on your local network only. Not sent to me or to a third party. |
| Year of birth entered at the first-launch age check (only the year) | To keep the app to people aged 13 and over, and to give anyone who may be under 18 non-personalised ads rated for general audiences (G) | Stored on your device only; never sent to me or to Google. |
| Advertising ID, device and app information (such as model, OS version, app version), IP address and the approximate location derived from it, ad interactions | To show, measure and protect ads against fraud | Google AdMob (Google LLC / Google Ireland Limited), as an independent controller when you start a "Work for my PC" session |
| Chats, photos, "About you" text, settings | To keep your conversations | Stored on your device only. I cannot see it. |
I do not collect your name, email address, contacts, precise location, photos, audio or messages. I do not run servers for this app. I do not use analytics or crash-reporting tools, and I do not sell personal data.
4. Ads (Google AdMob) and how to opt out
The only ad is one rewarded ad, shown when you start a "Work for my PC" session. It is served by Google AdMob after the age check and, where the law requires it, the consent form. A phone that never uses that feature never starts the ad library. AdMob may use your device's advertising ID and other device data to show ads, limit how often you see them, and detect fraud. The ads can be personalised or not, depending on your choices.
- Consent (EEA, UK, Switzerland): where the law requires it, a consent message lets you accept or refuse personalised ads and the use of device identifiers.
- Opt out of personalisation: on your phone open Settings > Google > Ads (the path varies by device) and turn off ad personalisation. You can also visit adssettings.google.com.
- Reset or delete the advertising ID: in the same Ads settings choose "Reset advertising ID" or "Delete advertising ID".
How Google handles this data: policies.google.com/technologies/ads and policies.google.com/privacy.
5. Purchases
The app sells nothing: there are no purchases and no subscription, and the app does not request the billing permission.
6. Legal bases (GDPR)
- Everything the app does for you happens on your device. No personal data about it reaches me.
- Advertising identifiers and personalised ads: your consent (Article 6(1)(a)) where a consent message is shown. Google decides how it processes data for ads as an independent controller.
- The age check: it runs only on your device and serves my legal obligation to protect minors in advertising (Article 6(1)(c)).
Web search and the "Work for my PC" link run only after you switch them on or consent, which is the basis for them (Article 6(1)(a)).
7. Retention
I hold no user data on servers, so I have nothing to retain. Local data stays on your device until you clear the app's storage or uninstall the app. Google keeps ad data according to its own policies. The hosts named in section 3 keep their own request logs under their own policies.
8. International transfers
Google may process ad data in countries outside the European Economic Area, including the United States, under safeguards such as the EU-US Data Privacy Framework and standard contractual clauses. The websites you reach through a search or download are served from their own countries. See their privacy policies for details.
9. Your rights and how to delete your data
Under the GDPR (and similar laws) you can ask for access to, correction of, deletion of, restriction of, or a copy of your personal data, object to processing, and withdraw consent at any time. You also have the right to complain to your local data protection authority.
- Data held by me: none, apart from messages you send me through the site. To have a message conversation deleted, write to me through https://jabbie.world and I will delete it.
- Data on your device: uninstall the app, or open Android Settings > Apps > YoTraviz > Storage > Clear data. This removes your settings, your chats and photos, and the model files the app downloaded.
- Ad data held by Google: reset or delete your advertising ID (Settings > Google > Ads) and manage or delete your Google activity at myactivity.google.com. Requests about data Google holds go to Google.
I answer requests within 30 days.
10. Children
YoTraviz is not directed at children and is intended for people aged 13 and over. The app asks for a year of birth on first launch and does not open for anyone under 13. Anyone it may treat as under 18 only receives non-personalised ads rated for general audiences (see section 3). I do not knowingly collect data from children under 13. If you believe a minor has provided data, write to the address above.
11. Security
Model downloads, web search and the ad library use encrypted connections (HTTPS/TLS). The "Work for my PC" link is the exception, as described in section 2. The app requests only the permissions it needs and makes no cloud backup.
12. Changes
If this policy changes, I will update this page and its effective date. Material changes will also be reflected in the Google Play Data safety section.
13. Contact
Alexander Wannyn, https://jabbie.world.