At YMI, we treat your family data, uploaded media, and generated content with care. This policy explains how we collect, use, store, and protect the information required to personalize and deliver your books.
1. Data We Collect
To create and deliver personalized books, we may collect the following categories of information:
- Voice Data: Short child or adult audio samples provided for Signature Voice, the synthetic voice representations created from them, and the generated narration used in the personalized physical book.
- Visual Data: Uploaded child photos and profile images used for personalization and account display.
- Account Information: Name, email address, shipping details, and profile settings.
- Technical and Usage Data: Basic device, browser, approximate location derived from IP address, referral or campaign information, consent choices, and coarse interactions with YMI Story that are needed to operate, secure, measure, and improve the service. We do not send uploaded child photos or audio, personalized book titles, customer contact details, order identifiers, or session tokens to analytics or advertising providers.
2. AI, Biometric Data, and Use Restrictions
YMI uses AI workflows to personalize images, preview pages, and voice-related assets. Where applicable, uploaded photos and audio may be processed as sensitive or biometric-like information under local law.
Strict Purpose Limitation: We only process uploaded photos and audio to create, fulfil, support, replace, or re-fulfil the specific personalized product you request. Signature Voice processing may create a synthetic version of the authorized child or adult voice for that book's narration.
No Model Training: We do not use your or your child's uploaded materials to train AI models or to create products for other users.
3. Storage and Security
We apply reasonable technical and organizational safeguards to protect customer data and uploaded assets.
- Encryption: Uploads are protected during transfer, and stored assets are kept in secured infrastructure.
- Retention: We keep uploaded assets and generated content only as long as needed for personalization, fulfillment, support, and reasonable operational needs.
- Access Control: Access is restricted to authorized staff, systems, and service providers that require the data to produce, fulfil, support, replace, or re-fulfil the requested product.
4. Children's Data
YMI products are intended to be ordered and managed by parents or guardians. By uploading a child's image or related materials, you confirm that you are authorized to provide that data for personalization and fulfillment.
Child Voice Authorization: A child's voice may be used for a Signature Voice recording only when the person submitting it confirms that they hold all necessary rights and authorization for that use, including any parental or guardian permission required. No recording is uploaded until that confirmation is given, and it authorizes creation of the synthetic narration for that book only.
No Child Marketing: We do not use children's uploaded materials for profiling, advertising, or unrelated marketing purposes.
Analytics and Advertising Exclusion: We do not intentionally send a child's name, age, uploaded photo or audio, generated likeness, personalized book title, or other child profile information to Google Analytics, Google Ads, Meta Pixel, or another advertising provider.
5. Cookies, Analytics, and Advertising Technologies
YMI Story uses cookies and similar browser technologies for different purposes. Necessary storage supports functions such as authentication, cart, checkout, security, regional preferences, and remembering your privacy choices. Necessary storage cannot be disabled through Cookie Settings because the service may not function correctly without it.
Optional technologies are disabled unless and until you grant the matching choice in Cookie Settings.
- Analytics: With Analytics consent, YMI Story may use Google Analytics to understand coarse website usage, page performance, and shopping-flow completion. Google Analytics may process browser and device information, approximate location, referral or campaign information, consented first-party identifiers, and redacted page categories. YMI Story does not send raw personalized routes, query strings, child information, uploaded media, customer contact details, or internal order and creation identifiers.
- Marketing: With Marketing consent, YMI Story may use Google Ads measurement and Meta Pixel to understand whether an advertisement led to a permitted website action and, where YMI separately enables it, to support advertising audiences or remarketing. These providers may use cookies, pixels, web beacons, and similar technologies for measurement and advertising services. YMI Story limits these events to approved coarse funnel facts and does not use children's uploaded materials for advertising profiles.
Google Analytics may set first-party cookies such as _ga and property-specific _ga cookies to distinguish consented users and sessions. Google documents a default cookie duration of up to two years, subject to browser limits and YMI's configuration. YMI will configure user-level and event-level Google Analytics retention to two months. Google and Meta may retain data under their own terms, settings, and legal obligations. YMI periodically reviews its configuration and keeps provider access only while it is needed for the purposes described above.
You can accept, reject, or change optional choices at any time through Cookie Settings in the website footer. Withdrawing consent stops future optional collection from YMI Story after the updated choice takes effect and removes reachable YMI-domain analytics or advertising cookies where technically possible. It cannot recall information already sent to a provider. You can also clear cookies through your browser and use the privacy and advertising controls offered by Google and Meta.
You can review provider privacy information at the following official pages:
- Google: Google Privacy Policy
- Meta: Meta Privacy Policy
6. Third-Party Processors
We may share limited data with trusted service providers only when necessary to operate the service, such as hosting, payments, production, shipping, and technical infrastructure.
- Cloud Infrastructure: Secure hosting and storage providers used to operate uploads, generated assets, and application services.
- Payment Processors: Providers such as Stripe or PayPal used to securely process payments.
- Production and Logistics: Manufacturing and shipping partners involved in producing and delivering your physical order.
- Analytics and Advertising Providers: With the relevant optional consent, providers such as Google and Meta may process limited technical and coarse event data for analytics, campaign measurement, and any separately enabled advertising features described in this policy.
7. Voice Data Retention
Signature Voice uses a short authorized child or adult voice sample to create a synthetic voice and generated narration only for the personalized physical book covered by your consent. The same retention schedule applies whether the narrator is the child in the book or an adult. Processing may be performed manually and with authorized service providers, with access limited to authorized personnel. The following operational retention periods apply unless a legal hold, active dispute, fraud review, or other binding obligation requires a limited extension.
Eligible deletion requests remove platform copies when legal and operational holds no longer apply. Deleting YMI Story's platform copies cannot remotely erase narration already loaded onto and delivered inside a physical book.
- Uploaded but unbound source sample: Deleted after 30 days without a Creation binding.
- Bound source while an order is open: Retained until the Order is delivered, cancelled or refunded and closed, or the related dispute is resolved. We do not expire an unfulfilled paid Order's only source sample.
- Bound source after delivery: Deleted at the later of 180 days after delivery or 30 days after the last related support or dispute case closes.
- Replaced source sample: Removed from production immediately, retained for 30 days as rollback evidence, then deleted through the durable cleanup process.
- Generated narration tracks: Retained for 24 months after delivery for support and re-fulfilment, then deleted unless an active support or replacement case requires a bounded extension.
- Cancelled or refunded after production but never delivered: Generated tracks are deleted at the later of 30 days after cancellation or refund closure or 30 days after the last related dispute or support case closes.
- Temporary operator workstation files: Deleted within 7 days after the platform archive is verified, and immediately where practical.
- Audit metadata: Non-audio actor, timestamp, reason, consent version, hash, and lifecycle records follow the ordinary Order and audit retention policy.
8. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or request deletion of your personal data.
- Access: You may ask what account or order data we hold about you.
- Correction: You may request updates to inaccurate profile or order information.
- Erasure: You may request deletion of eligible account data, subject to legal, operational, and fulfillment requirements.
- Withdraw Optional Consent: You may change Analytics and Marketing choices at any time through Cookie Settings. Withdrawal applies to future collection after the updated choice takes effect and does not make earlier lawful processing reversible.
9. International Transfers
Because YMI operates online and serves multiple regions, your data may be processed in jurisdictions outside your place of residence. We use reasonable safeguards for such transfers.
Where you consent to optional analytics or advertising, Google or Meta may process limited technical and event data in countries outside your place of residence. Their processing is also governed by their privacy terms and applicable transfer safeguards.
10. Policy Updates
We may revise this Privacy Policy from time to time. Material updates will be reflected on this page and may also be communicated through the site or your registered email address.
11. Contact
If you have privacy-related questions or requests, please contact us at admin@ymistory.com.
Address: Room 1604, Nathan Center, 580 Nathan Road, Mongkok