Yatto

Last updated: May 21, 2026

Privacy Policy

Yatto starts with a short chat, prepares one target-language rehearsal, runs it in Google Meet, saves what happened, and uses that memory to make the next session better. This policy explains what we collect, why we collect it, which providers help run the service, and how you can ask us to access, export, correct, or delete your data.

1. Who we are and what this covers

Yatto ("Yatto", "we", "us") provides AI-supported target-language speaking practice for people and teams facing real conversation moments. This policy applies to yatto.ai, Yatto pages, chat setup flows, Google Meet rehearsal flows, connected chat, billing handoff pages, support messages, and related services.

Google Meet, payment processors, AI model providers, meeting-bot providers, hosting providers, and analytics tools may also process data under their own terms and privacy policies. When you use Google Meet or sign in with Google, Google controls its own account and Meet processing.

2. Information we collect

Information you provide

  • Contact and account data, such as connected chat identifiers, name, login provider identifiers, timezone, chat language, and support messages.
  • Session context, such as your role, the person Yat brings, the scene, useful target-language moments, pressure patterns, active counterparts, preferred practice time, and language preferences.
  • Billing and transaction data needed to start, manage, cancel, or refund a paid plan. Full card details are handled by our payment processor, not stored by Yatto.

Meet, voice, and AI session data

  • Meeting URLs, session IDs, join/leave events, call status, duration, errors, and provider callback metadata.
  • Voice, chat messages, transcripts, captions, summaries, user memory, counterpart memory, session reflections, and next-session notes generated during or after a session.
  • Audio/video streams or recordings when needed to provide the AI counterpart rehearsal, produce transcripts, debug a session, or create a user-requested replay. If a meeting platform shows a recording or bot notice, you should treat the session as being processed by Yatto and its meeting providers.

Automatic data

  • Device, browser, IP address, approximate location, pages viewed, referral URL, cookies, log files, crash/performance data, abuse-prevention data, and analytics events.

3. How we use information

  • Provide chat setup, Google Meet rehearsals, transcripts, summaries, session memory, schedule, and next-session flow.
  • Personalize sessions around your life context, useful target-language moments, pressure patterns, active counterparts, and previous practice.
  • Operate authentication, billing, trials, receipts, calendar/ICS delivery, connected chat, support, reliability, security, abuse prevention, and fraud prevention.
  • Improve prompts, product flows, speech quality, safety filters, and onboarding effectiveness. We use aggregated or de-identified data where practical.
  • Comply with law, enforce our Terms, resolve disputes, protect users, and protect Yatto.

4. AI processing and model improvement

Yatto is an AI service. Your session content may be sent to AI model, speech, transcription, meeting, and avatar providers so the AI counterpart can listen, speak, summarize, remember compact session context, and continue the next session.

We do not sell private conversation content. We do not use your private Meet content for third-party advertising. We may use session content to improve Yatto, evaluate quality, debug issues, and create safer prompts, subject to the controls and retention limits described in this policy and any enterprise or partner agreement that applies.

5. Sharing and service providers

We share information with providers only as needed to operate Yatto, including:

  • Google services for Google Meet, Google sign-in, Google APIs, and Gemini/AI infrastructure.
  • Meeting-bot, transcription, realtime media, and avatar providers such as Recall.ai and LiveTalking-compatible infrastructure.
  • Cloud hosting, database, storage, and edge infrastructure such as Cloudflare.
  • Payment, tax, fraud, and billing providers such as Stripe.
  • Support, analytics, monitoring, and security providers.
  • Professional advisers, authorities, or counterparties when required for legal, safety, compliance, business-transfer, or dispute purposes.

For employer, university, relocation, language-school, or similar partner programs, Yatto may share aggregate activation, attendance, retention, and progress reporting. Raw private conversation content is not shared with partners by default unless you authorize it or a specific partner agreement clearly says otherwise.

6. Retention

We keep data only as long as reasonably needed for the purposes described above, unless a longer period is required for legal, security, billing, backup, or dispute reasons.

  • Account, billing, entitlement, and audit records may be retained while your account is active and for a reasonable period afterward.
  • User memory, persona roster, session summaries, pressure patterns, outcomes, and schedule data are kept while needed to continue your learning loop.
  • Raw recordings and provider media should be treated as temporary operational data unless a replay, support investigation, legal requirement, or product setting requires longer retention.
  • De-identified or aggregated data may be retained for analytics, security, and product improvement.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or export your personal data. You can request help at [email protected].

You can choose not to provide optional information, but some features may not work without Meet access, connected chat, voice/chat processing, or payment data. You can also manage Google account, Google Meet, and browser settings directly through Google and your browser.

8. Security and international transfers

We use reasonable technical and organizational measures designed to protect personal data, including access controls, provider security controls, encryption in transit where supported, and separation between public pages and service-role server paths. No internet service can guarantee perfect security.

Yatto and its providers may process information in the United States, Japan, the European Economic Area, the United Kingdom, and other countries where we or our providers operate.

9. Children

Yatto is not directed to children under 13. If you are under the age of majority in your country, use Yatto only with permission from a parent, guardian, school, employer, or sponsoring organization. If you believe a child provided personal data without appropriate permission, contact us.

10. Changes and contact

We may update this policy as Yatto changes. If a change is material, we will take reasonable steps to notify users, such as updating this page or sending an email when appropriate.

Questions, deletion/export requests, or privacy concerns: [email protected]. General support: [email protected].

11. Related third-party policies

These links are provided for convenience: Google Meet privacy basics, Google Privacy Policy, Recall.ai Privacy Policy, and Stripe Privacy Policy.