This policy explains how Yuno ("Yuno", "we", "us") handles personal information when you visit YunoWhen.com, join the early-access list, request a birth-time rectification, or use the Yuno app. The Yuno app is currently offered to people in Canada and the United States. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA): we collect only what we need, tell you why, ask for your consent, and protect what we hold.
1. Who is responsible
Yuno, Ontario, Canada, is responsible for the personal information described here.
Our Chief Technology Officer (CTO) is responsible for our compliance with this policy and can be reached at info@yunowhen.com.
2. What we collect
If you join the early-access list
- Your name, email address, the timing area you're most interested in, and the date you signed up.
If you request a birth-time rectification
- Your name, email address, date and place of birth, the time you believe you were born (if you give one) and any notes you add. These are sent by email to our astrologer to arrange and carry out your rectification. They are not stored on our website; only the time of each request is kept, to limit spam.
If you create a Yuno account
- Account details: your name, email address and password. Passwords are stored only as a one-way hash (bcrypt); no one at Yuno can see your password.
- Birth details: date of birth; time of birth (if you know it) and how certain you are of it; place of birth with its coordinates and time zone; and the UTC offset that applied.
- Where you live now: city, coordinates and time zone. This is used for your Cosmo-POV daily hours.
- Your timing results: the timing portals and Cosmo-POV hours Yuno calculates for you.
- Outcome reports: what you tell us happened after a timing window: the date, the outcome, any keywords you select, and any note you write.
- Your choices: your consent decisions (and when you made them), your plan, and the invite code you signed up with.
- Security records: a log of security-relevant events such as sign-ins, failed sign-ins, password resets, consent changes and account deletion. These records do not contain your birth details, notes or password.
Technical information
- To protect accounts from attacks, our servers briefly count sign-in attempts per email address and per IP address. These counters expire automatically within one hour.
- Our hosting providers (see section 6) process technical information such as IP address and browser type to deliver and secure the service, and may keep it in their own logs.
Information we treat as sensitive
Birth details, where you live, and outcome reports (which may touch on health, relationships, legal matters or finances) are sensitive. We collect them only with your express consent, protect them with additional safeguards (section 7), and never sell them.
3. Cookies and similar technology
- The Yuno app uses one cookie,
yuno_refresh, set by api.yunowhen.com when you sign in. It keeps you signed in for up to 30 days. It cannot be read by scripts on the page and is only sent over secure (HTTPS) connections to our sign-in service. - We do not use advertising cookies, tracking pixels or analytics cookies, and we do not store information in your browser's local storage.
- Our fonts are served from our own domain, so visiting the site doesn't share your information with font or advertising services.
4. Why we use your information
- To provide Yuno: create and secure your account, calculate your timing portals and Cosmo-POV hours, show your calendar and history, and run your plan (including the 30-day free period).
- To communicate with you: account emails such as confirming your address, resetting your password, and security notices. These are part of the service and are sent regardless of your marketing choice.
- To improve Yuno's accuracy (only if you opt in): if you turn on "use my outcome reports in research", we use your outcome reports, linked to your timing results, to study and improve the accuracy of Yuno's timing methods. This includes the short, general lessons Yuno draws from what you logged (for example "Sun over the 7th cusp: a child's presence with a partner"), which help everyone's readings; your own words, name and birth details are never shown to anyone else. We do not share or license research data to anyone outside Yuno. If that ever changes, we will ask for your separate, express consent first.
- Product news (only if you opt in): emails about new features and Learning Hub articles. You can opt out at any time.
- To keep Yuno safe and lawful: detect abuse, enforce our Terms, and meet legal obligations.
Yuno's timing results are produced automatically by our software. They are informational and are not used to make decisions about you that have legal or similarly significant effects.
5. Consent
- Creating an account requires you to accept our Terms of Use and this Privacy Policy, which covers collecting and using the information in section 2 to provide the service.
- Research use of your outcome reports and marketing emails are separate, optional choices, off unless you turn them on. You can change them at any time under Account → Privacy choices in the app.
- You can withdraw consent at any time. Withdrawing consent to the core service means closing your account (section 9).
6. Who we share it with
We do not sell, rent or trade your personal information. We use the following service providers to run Yuno. They process information only on our instructions and must protect it:
| Provider | What they do for us | What they handle |
|---|---|---|
| Cloudflare, Inc. (USA) | Hosts the YunoWhen.com website and the early-access list; manages our domain and email forwarding | Early-access sign-ups; rectification requests as they pass through the site; technical information about site visits; emails sent to info@yunowhen.com |
| Railway Corp. (USA) | Hosts the Yuno app servers and databases | All account information described in section 2 |
| Backblaze, Inc. (USA) | Stores our encrypted database backups | Encrypted copies of the account information described in section 2. Backblaze can't read them: they are locked with a key only Yuno holds. |
| Resend (USA) | Sends our account emails, and delivers rectification requests to our astrologer | Your name, email address and the content of those emails, including the birth details in a rectification request |
| Mapbox, Inc. (USA) | Place search when you enter a birthplace or current city | The place names you type. Searches are sent from our servers, not your browser, so Mapbox doesn't receive your IP address or account details. |
We may also disclose information if required by law, or to protect the rights, safety or property of Yuno, our users or others.
7. Where your information is stored, and how we protect it
- Location: Yuno's app data is stored with Railway in the eastern United States. Our other providers are also based in the United States. Your information may therefore be stored and processed outside Canada and be subject to the laws of those countries, including lawful access by their authorities.
- Encryption: all connections use HTTPS. Your birth details and current location are additionally encrypted in our database with a key held separately from the database, so a copy of the database alone would not reveal them.
- Access: only people who need it to operate Yuno can access personal information.
- Breaches: if a breach of security safeguards creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires.
8. How long we keep it
- Your account: for as long as your account is open. If you close your account, your account, birth details, location, timing results, outcome reports and consent history are deleted immediately from our live systems. Copies in our encrypted backups are deleted automatically within 7 days.
- Security records: kept for 12 months, then deleted automatically. After you close your account, these records no longer identify you by name or email.
- Sign-in sessions and email links: deleted automatically within a week of expiring or being used.
- Early-access list: until the early-access program ends or you ask us to remove you.
- Rectification requests: kept in our email for as long as needed to arrange and deliver your rectification. You can ask us to delete them at any time.
- Unconfirmed accounts: if you don't confirm your email address within 30 days of signing up, your account and everything linked to it are deleted automatically.
9. Your rights
You can:
- access the personal information we hold about you, including a complete copy you can download;
- correct your details, such as editing your birth details or location at any time in the app;
- delete your account and its information;
- withdraw optional consents.
You can download your data, change your consents and close your account yourself under Account in the app, or email info@yunowhen.com. We respond to emailed requests within 30 days.
If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.
10. Age
Yuno is for people 18 and over. We do not knowingly collect information from anyone under 18; if we learn we have, we delete it.
11. Changes to this policy
When we change how we handle personal information, we update this page and the "last updated" date. For significant changes we notify you by email and, where needed, ask you to accept the new version before you continue using the app.
12. Contact
Privacy questions and requests: info@yunowhen.com Yuno, Ontario, Canada
