What Yasakia keeps about you, and for how long

We keep the least we can. Your position is rounded to about one kilometre on your phone's request, before it is written: your exact location never exists on our servers. We never read your contacts.

What the agent learns is yours to change. Your portrait — who you are, who you are looking for — can be corrected at any time, and every correction wins over what the agent guessed.

Sensitive answers are encrypted at rest (AES-256-GCM, a key per environment), and so is what you write in a report.

Nothing you share trains a model. Not your conversation with the agent, not your photos, not your messages — not ours, not anyone's.

No score is ever shown, and nobody sees your photos unless the two of you are in each other's batch or in an intro.

Your account: your e-mail address (to send your sign-in codes), your language, your date of birth (checked once to make sure you are 18 or older; nobody else ever sees it), and when you accepted these terms.

Your profile: your first name or nickname, your gender and who you want to meet, the age range and distance you accept, what you are looking for, and your rounded position.

Your photos: re-encoded when you upload them, which removes every piece of metadata your phone added — including where the photo was taken.

Your conversation with the agent and your portrait: what you told the agent and what it understood, so the batches fit you better each time.

Your batches, decisions and debriefs: who was proposed to you, what you answered, and your debrief answers.

Your intros: the messages you exchange during an intro. The agent never reads them; a small classifier reads each message once to give the authenticity mark shown above it (a signal that can be wrong, never a verdict, and it never holds a message back), together with a few counters of how the message was typed (time, characters typed and pasted, deletions — no keystroke and no text), kept with the message.

Photos, videos and voice messages you send in a conversation: sent as you made them — nothing is cut, filtered or edited — with every metadata block removed (GPS included). They are private, shown only to the two of you, and only after a safety check (Orazaka looks at the picture or frames of the video, and reads the words of a voice message; nothing is kept by the checker). They are deleted when the conversation ends or either account is deleted.

Your safety actions: the people you blocked and the reports you filed.

Your phone's notification token, so we can tell you when a batch is ready or someone wrote to you.

The cost of the agent: for each call to an AI model, its size and duration — never its content.

Web sessions and the audit log: if you sign in on the web, one session per browser (its name and the address it came from, so you can end any of them), and a log of sign-ins, password changes and account actions — ids and a few words, never a message. Your address is removed from the log when you delete your account.

Yasakia is for real people, so your photos are checked once you add them: 4 to 6 photos, at least 2 showing your face. The check is done by Orazaka, the AI platform built by Krizaka, which runs on our own servers — never by a third-party AI service.

What it looks at: how many faces each photo holds and which one is the subject; three yes/no questions put to a vision model (is it a screenshot, is something written over it, does the person look under 18); and — only with your separate, explicit agreement, which you can withdraw at any time — whether your face photos could be of different people (the comparison lasts a few seconds in memory — no face print is stored, anywhere). Purpose: keeping Yasakia for real people.

What it does not do: it identifies no one, recognises no celebrity, and keeps nothing of the comparison. We store only the result — a list of codes such as « face detected » — with the check’s date.

It can be wrong. Face and image models make mistakes (a lookalike, strong light, a small face). A photo it refuses never leads to a penalty: you choose another one. The thumbnails sent for the check (about 512 pixels, no metadata) are deleted from Orazaka’s file store as soon as the check ends; the record of the check run, which still holds them, is purged within 30 days at the latest.

Our database and our servers run at DigitalOcean, in its Toronto region (Canada).

Photos are stored at Bunny.net and only ever served through links signed for one viewer, valid five minutes.

Sign-in codes are sent by e-mail through Mailgun. Notifications go through Expo to Apple or Google, which deliver them to your phone.

The conversation with the agent is processed by the AI model we configure: Orazaka, the sovereign AI platform built by Krizaka, or a hosted model whose contract forbids keeping or training on what it receives.

As long as your account exists for your account, profile, portrait, conversation with the agent, batches and blocks — you can change or remove most of it from the app.

Sign-in codes: ten minutes. Data exports you ask for: 24 hours. Notification tokens: until you sign out, turn notifications off or uninstall the app.

Intro messages: as long as the intro exists; when either of you deletes their account, the intro and its messages disappear for both.

Reports are kept as long as safety reviews need them; when an account is deleted, the report no longer points to it.

When you delete your account, everything above is deleted at once, and your photos are removed from storage within 30 days at most — usually within minutes. What remains is a record that a deletion happened (a random identifier and its date), and the agent's cost figures without any link to you.

You can see, correct, export and delete your data at any time, from the app: Settings → Download my data gives you everything we hold about you as a file; Settings → Delete my account deletes it for good.

Québec's Law 25 and Europe's GDPR give you these rights and more (to object, to withdraw consent, to complain to the Commission d'accès à l'information du Québec or your own authority). Write to us for anything the app does not do yet: we answer within 30 days.

Krizaka's person in charge of the protection of personal information answers through our contact form.

Yasakia is for people aged 18 and over. We check the date of birth when an account is created and close any account we learn belongs to a minor.