Yetimo — Privacy Policy
Last updated: 28 October 2026
Yetimo helps children aged 9 to 12 learn their lessons. The child photographs a lesson, artificial intelligence (AI) turns it into review cards, and the child then answers out loud or in writing.
This page explains, in plain words, what data the app uses, where it goes and how long it is kept. It is written for parents.
In short:
- Lessons, cards and progress stay on the phone, unless you create a family account (optional).
- Lesson photos are sent to the AI to be read, then kept nowhere except on the phone. Only the pictures shown on cards (a map or drawing cut out of the page and cleaned up) may be saved with the account or shared.
- No ads, no trackers, no selling of data. The data is not used to train AI.
1. Who is responsible for the data
Mathieu Jehanno, publisher of Yetimo (MinuteMind)
Contact: mathieu@minutemind.com
2. On the phone
The app keeps on the phone:
- profiles (chosen first name or nickname, avatar);
- lessons (photos, text read from the lesson, summary) and their cards;
- the child's answers (the text of what they said or typed), their progress and activity history;
- settings (theme, voices).
This data stays on the phone as long as the app is installed. If the phone's Google backup is on, Android may include it in the backup of the phone's Google account, encrypted with the screen lock. Photos are not part of this backup.
3. What is sent for the AI
To create cards and check answers, the app sends to our server:
- the photos or PDF pages of the lesson, to read their text;
- the lesson text, to create and check the cards, write the summary and format the lesson;
- the part of the page where a picture is (a map, a diagram), to cut it out, remove the words that would give the answer away and redraw it cleanly;
- the question, the expected answer and the child's answer, when the answer is not exactly right and must be judged.
Our server passes this content to a service that gives access to AI models, such as OpenRouter (OpenRouter, Inc., United States), which has it processed by an AI model hosted by one of its providers. On every call, we require providers that:
- do not keep the data sent ("zero data retention");
- do not use it to train their models.
This service and its providers may be located outside the European Union, notably in the United States. We only use services that cover these transfers with the European Commission's standard contractual clauses (Article 46 of the GDPR), as OpenRouter does.
Our server keeps neither the photos nor the lesson content sent to the AI. It only keeps technical information about each call, with no content at all:
- the date;
- the type of call;
- the model used;
- the amount of text processed;
- the cost.
This information is used to count AI credits (see § 6).
4. Voice
- Answering out loud: the app uses Android's speech recognition. The phone usually sends the sound to Google's speech recognition service, under Google's terms. Yetimo only receives the recognised text, never the recording. The "written answers only" mode does not use the microphone. On iPhone and iPad, it is Apple's speech recognition, under Apple's terms.
- In a browser (app.yetimo.app): Chrome and Edge send the sound to Google, Safari to Apple. Yetimo asks a parent, once per browser, before using the microphone; this can be withdrawn in Avancé › Compte. Firefox has no speech recognition: answers are typed there.
- Reading out loud: the app uses the phone's voices. Voices marked "online" in the settings may send the text being read to Google's voice service.
5. Family account (optional)
A parent can create a family account to back up lessons and use them on several devices.
We then keep:
- the parent's email address and password, stored in a form that cannot be read back;
- signed-in devices (device type, last sign-in date);
- a copy of the phone's data: Lesson photos are not sent. Only the pictures shown on cards (§ 3) are, so that the cards find them on the other devices.
- profiles (first name, avatar);
- lessons (text, title, subject, summary);
- cards;
- progress;
- the child's answers (text);
- activity.
This data is hosted in France, in Gravelines, by OVHcloud (server and database). Emails (confirmation codes, forgotten password) are sent by Brevo (France).
You can delete the account at any time in Avancé › Compte. What happens then:
- all of the account's data is erased from our servers;
- the phone keeps its lessons;
- the technical information about AI calls already made (§ 3) is kept, with no link to the email address.
An account that is never confirmed is deleted after 7 days.
6. AI credits and install identifier
Each AI call costs credits:
- a confirmed account receives 500;
- without an account, the phone has a small trial.
To count that trial, our server gives the installation a random identifier, which contains no personal information. To prevent abuse, we also keep a one-way fingerprint of the IP address, never the address itself.
7. Sharing a lesson with a code
When you share a lesson, a copy is kept on our server for 30 days, then erased. This copy contains the title, the text, the cards and their pictures, but no lesson photos, progress or first names. A picture that no card and no share uses any more is erased from the server. Anyone with the code can open it during that time: do not share a lesson that contains personal information.
8. Developer mode
"Developer mode" (Avancé › Compte, off by default) is only for testing the app. When on, it keeps on our server the photos of new lessons and what the AI made of them, and a log of each answer spoken aloud (what speech recognition heard and the expected answer, never the sound). This data is erased with the account.
9. Server logs
Like any website, our server keeps the IP addresses of connections in its technical logs for 14 days, for security and troubleshooting.
10. The website and the app in a browser
yetimo.fr and yetimo.app have no cookies, no audience measurement and no trackers. Only the server logs (§ 9) record connections.
The app in a browser (app.yetimo.app) requires a family account: a browser can wipe its data, and the account keeps the lessons safe. It keeps lessons, cards and progress in the browser's storage (as a phone does in its memory) and syncs them with the account (§ 5). Lesson photos stay in the browser, as on a phone. The browser storage is used only to run the app, never for ads or tracking.
11. Children
Yetimo is designed for children aged 9 to 12, under their parents' responsibility:
- The "Compte" (account) section is for parents only. It opens with the phone's screen lock (fingerprint, face or code).
- Only a parent should create a family account.
- No contact with other users, no ads, no public profile.
A parent installs Yetimo for their child, and only a parent can create the family account: by doing so, they accept these rules for their child. A child should not create an account alone.
12. Your rights
Under the GDPR, you can ask to access your data, have it corrected or erased, receive a copy of it, or object to its processing. Write to mathieu@minutemind.com. You can also delete the account and all its data yourself in Avancé › Compte.
You can also lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority.
Legal basis:
- the service you ask for (making and reviewing cards, backing up and sharing lessons): performance of the terms of use accepted by the parent;
- security and abuse prevention (server logs, IP fingerprint, credits): our legitimate interest in protecting the service.
13. Changes
If this policy changes, the date at the top of the page changes too. Important changes will be announced in the app.