What Yiimi knows about you, and what it does with it.
Who we are
Yiimi is made by Yiimi Technology, based in Kenya. We are the people responsible for your data under this policy. Write to us at support@yiimiconnect.com about anything on this page.
This policy covers the Yiimi app and this website. It is written in plain words on purpose. Where it says “we”, it means Yiimi Technology.
What we collect, and why
Yiimi keeps the least it can. Here is all of it.
- Your phone number. It is your identity on Yiimi and how we verify it is you. It is never shown as caller ID and never shown to people you call.
- Your contacts’ names and numbers. With your permission, and in the app’s own words: your contacts’ names and numbers are sent to Yiimi only to find who’s already here. Entries that don’t match are never stored. The upload goes over an encrypted connection; for contacts who do match, we keep the name you gave them so the app can show it to you. You can decline this and still use Yiimi.
- Your display name. The name you choose, shown to the people you call and message.
- Your messages. Messages are stored on our servers so they reach the other person even when their phone is off. They are encrypted on the way to and from our servers, and our servers can read them. They are not end-to-end encrypted.
- Photos, voice notes and documents you send. A photo is resized on your phone and stripped of its location and camera details before it leaves; a voice note is recorded only while you hold the button; a document is the file you picked, with its name. Each file is encrypted on your phone with a key that travels with the message, and file and key are kept on our servers for as long as the message is, so the other person can fetch it — and so a person can review it if the message is reported. A file is deleted with its message, and everything is deleted with your account. We never read your gallery or your files: you pick each one yourself.
- Your updates. A short text you post for your contacts. Each update is deleted 24 hours after you post it.
- Call records. Who called whom, when, for how long, and whether it was a video call, so the app can show your call log. Never the audio or the video: calls are end-to-end encrypted and go from device to device. Our servers cannot hear or see them, and nothing from a call is recorded.
- A push token. An identifier for your phone that lets us wake the app when someone calls or messages you.
- Reports you file. The reason you choose and anything you add when you report someone.
- Short-lived technical logs. Our servers keep brief logs of requests, including the network address they came from, to keep the service running and to limit abuse. They are kept for a short time and not used for anything else.
Calls are end-to-end encrypted. Messages are encrypted in transit.
That sentence is the same in the app, on this page and in the app stores. A Yiimi call, voice or video, is encrypted between the two phones; nobody in the middle, including us, can listen or watch. Your camera is opened only during a video call you start, answer or switch to, and only while you keep it on. Messages are encrypted between your phone and our servers, where they are stored so they can be delivered later.
Who else sees your data
- Google Firebase verifies your phone number when you sign up: your number is sent to Google to deliver the code by SMS. Google also delivers the push notifications that wake the app, using the push token above.
- Our hosting providers run the servers and the database. Your data is stored in the European Union and the United Kingdom.
- A relay server may carry a call when the two phones cannot connect directly. The relay passes encrypted audio through; it cannot decrypt it.
That is the whole list. Yiimi has no advertising, no analytics trackers and no crash reporter. We do not sell data, and we do not share it with anyone else.
How long we keep it
For as long as you have an account. Updates go after 24 hours on their own. When you delete your account, everything above is deleted with it, with one exception: reports that other people filed about you are kept, without your name, so that a pattern of abuse cannot be erased by deleting an account.
Deleting your account
In the app: Settings → Delete account. It takes effect immediately. If you cannot open the app, the account deletion page explains how to ask us by email.
Your rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email support@yiimiconnect.com from the phone number on the account, or tell us the number and we will verify it with a code. Kenya’s Data Protection Act, 2019 gives you these rights and the right to complain to the Office of the Data Protection Commissioner if you think we have not respected them.
Children
Yiimi is for adults. We do not knowingly let anyone under 18 create an account. If you believe a child has, email us and we will delete the account.
Changes
If this policy changes, the date at the top changes with it, and the change is posted here before it applies. We will never widen what we collect without saying so here first.