Yubiru is an AI helper for the Mac. To answer you, it sometimes has to see your screen and hear your voice. This policy explains exactly what leaves your Mac, when, where it goes, how long it is kept, and what you can do about it.
the short version
Yubiru sends a picture of your screen, the text you are working on, your voice or your files to an AI service only when you ask it something or when an agent job you started is working. It does not watch or record your screen in the background.
These requests pass through our server to Anthropic (the AI model) and ElevenLabs (speech). We do not store the content of your requests on our server. We keep a count of how much you use.
Neither we nor these providers use your requests to train AI models.
Your chat history, screen pictures and memory notes are kept on your Mac, and you can delete them at any time.
We do not sell your personal data, and we do not show ads.
You must be 18 or older to use Yubiru.
1. who we are
Yubiru is provided by Apirak W. (trading as Yubiru) ("Yubiru", "we", "us"), an individual sole trader in Thailand. We will give our postal address without delay on request; please ask by email at [email protected].
We are the data controller (in Thai law, the ผู้ควบคุมข้อมูลส่วนบุคคล; in Japanese law, the 個人情報取扱事業者) for the personal data described in this policy.
Data protection officer: we have not appointed one, because at our current size Thailand's Personal Data Protection Act does not require it. We will appoint one if that changes. Until then, please send privacy questions to [email protected].
Representative in the European Union (GDPR Article 27): we have not yet appointed one. If you are in the EU, please contact us directly at [email protected].
Representative in the United Kingdom (UK GDPR Article 27): we have not yet appointed one. If you are in the UK, please contact us directly at [email protected].
2. what this policy covers
This policy covers the Yubiru website (yubiru.com), the Yubiru app for macOS, your Yubiru account, and the AI service we provide through our server. It does not cover other companies' websites or apps, even when Yubiru opens or works in them for you. Those companies have their own policies.
The app holds no AI keys and offers no way to add your own. All AI in Yubiru goes through our server, under your Yubiru account and plan (see section 13).
3. what stays on your Mac
Most of what Yubiru knows about you lives only on your Mac. We cannot see it. It includes:
Chat history, including the screen pictures attached to your questions, when "Keep chat history" is on (it is on by default). You can turn it off, or delete all chats, in Settings → Privacy. Pictures that no chat uses are removed, and the picture folder is capped at 500 MB, removing the oldest first.
Memory notes: short notes Yubiru keeps about you and about how to use your apps, so it can help you better. You can see, add, delete or forget all of them in Settings → Memory. Yubiru refuses to save notes that look like passwords, keys, card numbers or ID numbers.
Agent job folders in ~/Documents/Yubiru Tasks: the report, files the job made, and a record of the job's conversation, which can include pictures of windows it looked at. The pictures are removed from a job's record 30 days after the job last changed (you can switch this off in Settings) and when you use "Delete all chats"; the report and files stay until you delete them.
Settings and usage counts on your Mac.
Yubiru also checks which app is in front about twice a second so it knows where you are working. It keeps only the app's name in memory, for up to 30 minutes, and does not send it anywhere unless you ask a question.
4. what leaves your Mac, and when
Yubiru only sends something when you act. Here is every case.
When you ask a question (talk or type)
If "See my screen" is on (it is on by default, and you can turn it off in Settings), each question includes:
one picture of your main screen, taken when you press the talk or type shortcut. If you press the type shortcut and then close the box without sending, the picture is thrown away and never sent;
the name of the app in front, its window title, any text you have selected, and the text in the field you are typing in. Yubiru skips password fields and its own windows;
your question, recent chat history (older parts are condensed into a short summary), your memory notes, and any files you attach.
The AI's answer may include a short text description of what was on your screen. Yubiru stores this with your chat on your Mac and sends it with later questions so it remembers what you were looking at.
When you speak
While you hold the talk or dictation key, Yubiru records from your microphone. The recording is kept in memory, not saved to disk, and is sent to ElevenLabs to turn it into text. Dictated text is also sent to the AI model to clean it up. When Yubiru speaks, the sentences it says are sent to ElevenLabs to make the voice, unless you choose the Mac's built-in voice, which works on your Mac only. We do not use your voice to identify you, and we do not make copies of your voice.
When an agent job runs
When you hand Yubiru a job, it works step by step until the job is done. While it works, it may send to the AI model:
the text and structure of the app windows it is working in (read through macOS Accessibility), and sometimes a picture of that window. It never reads password fields, password managers, Terminal, System Settings or its own windows;
a picture of your whole screen, but only after you approve this once for the job (unless you have turned off "ask before Mac actions");
the contents of files the job opens. By default, jobs can read files in your Documents, Desktop and Downloads folders;
web pages it fetches and the results of web searches, and short programs it runs on the AI provider's servers to do calculations.
While a job works, Yubiru can show you a live view of the window it is using. That view stays on your Mac and is not sent anywhere.
Other times
Signing in and your account. When you sign in on our website or connect your Mac, we receive the details in section 5.
Usage counting. Each request through our server is counted against your plan (section 5).
Update checks. The app asks yubiru.com whether a new version exists. This shows our server your IP address and the app version. The app does not send a profile of your Mac.
Clipboard. To type an answer into another app, Yubiru briefly puts the text on your clipboard, pastes it, and then puts your clipboard back. Yubiru does not send your clipboard to anyone.
5. personal data we collect
Data that reaches us or our providers
Category
Examples
Where it comes from
Account
Name, email address, profile picture, which sign-in methods you use, the ID that Google, LINE, Facebook or Apple gives us for you, account creation date
You, and the sign-in provider you choose
Devices and sessions
The name of each Mac you connect (for example "Anna's MacBook"), when it was connected and last seen, and sign-in session records (when each session started and when it expires). Sessions do not store your IP address or browser type
Your Mac and browser
Subscription and billing
Plan, billing period, status, renewal date, Stripe customer and subscription IDs, invoices, the card brand and last four digits. We never receive your full card number
You and Stripe
Usage
Number of talk and agent messages and voice seconds, the AI model used, token counts, estimated cost, time of each request, request IDs
Created by our server
Request content (in transit)
Your questions, screen pictures, window text, files, memory notes, voice recordings, transcripts, and the AI's answers
Your Mac, only as described in section 4
Support and communications
Emails you send us and our replies, sign-in codes we email you, records of the terms you accepted and when
You and us
Consent records
Which version of the terms and privacy policy you accepted and when, and that you confirmed you are 18 or older. At checkout: that you agreed to automatic renewal and asked for your plan to start right away, with the plan, period and price. With each record, a scrambled code made from your IP address (not the address itself) and your browser type. Also a list of which plan emails we sent you and when
You, and our server
Support and account notes
What our staff record when they help you or manage your account in our back office: a private note about your account, a plan or extra usage we gave you (and until when), and whether AI use on your account was paused and why. You can ask to see these notes like any other data we hold about you; they are included in "Download my data".
Technical and security
IP address, browser or app version, time, page requested, error codes
Your browser or app, our server and Cloudflare
Sensitive data. We do not ask for sensitive data such as health, religion or biometric data. Your screen, files or voice might still show some. We handle it only to answer the request you made, do not use it for anything else, and do not keep it on our server. If you prefer, turn off "See my screen" or close sensitive windows before you ask.
Do you have to give us data? You need an email address or a sign-in account to create an account, and payment details to buy a plan. Without them we cannot provide the service. Everything else is up to you.
6. why we use it, and our legal bases
Purpose
Data used
Legal basis
Create your account and sign you in, connect your Macs
Account, devices and sessions
Contract (we need it to provide the service you asked for)
Answer your questions, run your jobs, hear and speak
Request content
Contract
Count usage, apply plan limits and fair use, reset quotas
Usage, subscription
Contract
Take payment, manage renewals and cancellations, send receipts and renewal notices
Subscription and billing, account
Contract; legal obligation (consumer and tax law)
Email you about your plan, in the language you chose on our website: purchase confirmation, a reminder 30 days before a yearly plan renews, a yearly reminder for monthly plans, notice at least 30 days before a price change, and confirmations of cancellation, withdrawal and account deletion with a reference number
Account email, subscription and billing
Contract; legal obligation (consumer law)
Keep proof of what you agreed to (terms, age, automatic renewal, starting right away)
Consent records
Legal obligation; legitimate interests (being able to show that we followed the law)
Help you, give you a plan or extra usage, and stop misuse (pausing an account)
Support and account notes
Contract; legitimate interests (running the service fairly and safely)
Keep tax and accounting records
Billing
Legal obligation
Keep the service secure, stop fraud, abuse and misuse, protect our AI costs
Technical and security, usage, sessions
Legitimate interests (keeping Yubiru safe and running); legal obligation where it applies
Answer support requests and handle your privacy rights
Support, account
Contract; legal obligation
Send important service messages (security, changes to terms or prices)
Account email
Contract; legal obligation
Improve Yubiru using totals and counts (for example, how many people use agents)
Usage, in summary form
Legitimate interests. We do not use the content of your requests for this
Product news by email, if we ever send it
Account email
Your consent, which you can withdraw at any time
Comply with law, defend legal claims
Any relevant data
Legal obligation; legitimate interests
Under Thailand's Personal Data Protection Act (PDPA), these bases are performance of a contract (section 24(3)), legitimate interests (section 24(5)), legal obligation (section 24(6)) and consent (section 19). Where we rely on legitimate interests, you can object (section 32).
Automated decisions. Our systems automatically count your usage and pause requests when you reach your plan's limit or fair-use cap, and may block requests that look like abuse. These checks do not otherwise affect your legal rights. If you think one was wrong, write to us and a person will review it.
7. who we share it with
We share personal data only with the providers below, who help us run Yubiru, and only as much as they need. Providers marked "processor" may use the data only on our instructions under a data processing agreement. We never sell personal data or share it for advertising.
Provider
What they do
Data
Location
Role
Anthropic, PBC
The AI model that reads your request and writes answers; web search, web fetch and code tools for agent jobs
Google, LY Corporation (LINE), Meta Platforms (Facebook), Apple
Sign-in, only for the method you choose
The sign-in result: ID, name, email, picture
United States, Japan, Ireland and others
Independent controllers
We have not yet chosen the email provider for [email protected]. We will name it here, with its location, before it receives any personal data. We will also update this list before we add any new provider.
About sign-in providers. From Google, Facebook, LINE and Apple we receive only your account ID, name, email address and profile picture (LINE and Apple may not share your email). We use this only to create your account and sign you in. We do not post to your accounts or read your contacts. Our use of information received from Google APIs follows the Google API Services User Data Policy. If you use Apple's "Hide My Email", we receive a relay address and Apple forwards our emails to you. If you sign in with Apple, we keep the token Apple gives us, encrypted, so that when you delete your account we can ask Apple to revoke Yubiru's access to your Apple ID.
About Stripe. Your card details go directly to Stripe and never pass through our server. If you save your details with Stripe's Link, Stripe's own privacy policy applies to that.
Fonts. The fonts on our website are stored on our own server. Loading our pages does not send anything to Google or any other font service.
Other disclosures. We may disclose data when the law requires it (for example a valid court order), to protect people's safety or our rights, or to a buyer if our business is sold, in which case this policy continues to protect your data and we will tell you.
8. how the AI providers handle your requests
No training. Under Anthropic's commercial terms, Anthropic may not train its models on our customers' content. We have opted out of ElevenLabs using our requests to improve its services. We do not train any models on your content either.
Anthropic retention. Anthropic deletes API requests and answers within 30 days. If a request is flagged as possibly breaking Anthropic's usage policy, Anthropic may keep it for up to 2 years, and safety scores for up to 7 years.
ElevenLabs retention. Right after each request, our server asks ElevenLabs to delete the recording, the generated voice and the transcript. If that fails, we try again every day until it is deleted. Deleted items can stay in ElevenLabs' backups for up to 30 days.
Our server. Our server passes your requests through without saving their content. It keeps only the usage data in section 5.
9. international transfers
We are based in Thailand. Our server is in a data centre in the United States, and Anthropic, ElevenLabs and Stripe process data mainly in the United States. So your data will be handled outside the country where you live. We protect it as follows:
Thailand (PDPA sections 28 and 29). We transfer data abroad under data processing agreements that contain standard data protection clauses, as permitted by the Personal Data Protection Committee's 2023 notifications on cross-border transfers, and where needed to perform our contract with you.
EU, EEA and UK. For transfers to the United States we use the EU–US Data Privacy Framework (and its UK Extension) where the recipient is certified (ElevenLabs, Stripe, Cloudflare), and otherwise the European Commission's standard contractual clauses, with the UK Addendum (Anthropic and others). You can ask us for a copy of the safeguards.
Japan (APPI Article 28). The recipients are in the United States. The United States has no single national privacy law like the APPI; personal data is protected by the Federal Trade Commission Act and by state laws such as the California Consumer Privacy Act. Each recipient has signed a data processing agreement that requires it to use data only to provide its service to us, keep it confidential and secure, and delete it when no longer needed, and each holds recognised security certifications (for example ISO 27001 or SOC 2). We check these measures regularly. You can ask us for more information.
10. how long we keep it
Data
How long
Account, devices
While your account is open. Deleted within 30 days after you delete your account
Sign-in sessions
Until you sign out or the session expires
Email sign-in codes
A code works for 10 minutes and only once. The record behind it (a scrambled form of the code and a count of codes sent and wrong tries) is deleted 24 hours after the last code we sent you
Request content on our server
Not stored. Held in memory only while the request is being handled
Detailed usage records
13 months. After that they are added up into monthly totals for your account (counts and cost only, no request details). The totals are deleted with your account, and after 25 months at most
Invoices, payments, tax records
As long as tax and accounting laws require, usually 5 to 10 years
Records that you accepted our terms and auto-renewal (consent records), and records of cancellations and withdrawals (with their reference numbers)
While your account is open, and 3 years after it is closed. A record not tied to an account (for example a cancellation sent from our cancel page for an address with no account) is deleted 3 years after it was made
Support and account notes
While your account is open. Deleted with your account. Our staff activity log keeps who changed an account and when for up to 400 days, without your email or the note text.
Server and security logs (with IP address)
30 days, longer only when needed to investigate an attack or abuse
We may keep data longer if the law requires it or if we need it for a legal claim. When we no longer need data, we delete it or make it anonymous.
11. your rights
Wherever you live, you can ask us to:
tell you what personal data we have about you and give you a copy (you can also download it on your account page);
correct data that is wrong;
delete your data (you can also delete your account yourself, see the data deletion page);
send your data to you or another company in a common format;
stop or limit some uses, or object to uses based on legitimate interests;
withdraw consent you gave, without affecting what we did before.
Write to [email protected] from the email address on your account. We may need to confirm it is you. We will reply within 30 days (or within the shorter time your law requires), and tell you if we need more time. These requests are free. If we cannot do what you ask, we will explain why.
Thailand
You have the rights in sections 30 to 36 of the PDPA, and the right to complain to the Office of the Personal Data Protection Committee (PDPC), pdpc.or.th.
European Union and EEA
You have the rights in Articles 15 to 22 of the GDPR. You can complain to the data protection authority where you live or work. We have not yet appointed a representative in the EU, so please contact us directly at [email protected].
United Kingdom
You have the same rights under the UK GDPR. Please send complaints to us first so we can try to fix the problem; we will acknowledge them within 30 days. You can also complain to the Information Commissioner's Office, ico.org.uk. We have not yet appointed a representative in the UK, so please contact us directly at [email protected].
Japan
Under the Act on the Protection of Personal Information, you can request disclosure of the personal data we hold about you (including in electronic form), records of provision to third parties, correction, addition or deletion, and suspension of use or of provision to third parties. Send requests to [email protected]. Complaints about how we handle personal information can also go to the same address. You may also contact the Personal Information Protection Commission, ppc.go.jp. The security measures we take are described in section 14.
California and other US states
Depending on your state, you may have the right to know, access, correct and delete personal data, to opt out of its sale, "sharing" for targeted advertising, or profiling, and to appeal our decision. We do not sell personal data or share it for targeted advertising, and we do not use it for profiling with legal effects. We will not treat you differently for using your rights. You may use an authorised agent; we may ask them to prove they act for you. To appeal a decision, reply to our answer with "appeal"; if you disagree with the result, you can contact your state attorney general.
In the last 12 months we collected the categories in section 5 (identifiers, commercial information, internet activity, audio and visual information you send us, and any sensitive information that happens to appear in your requests), for the purposes in section 6, and disclosed them to the service providers in section 7.
12. children
Yubiru is for adults. You must be at least 18 to create an account. In Thailand, where adulthood starts at 20, users aged 18 or 19 need the consent of a parent or guardian to buy a paid plan. We do not knowingly collect data from children. If we learn that a child is using Yubiru, we will close the account and delete the data. If you think a child has given us data, please write to [email protected].
13. AI keys and providers
The Yubiru app holds no AI keys, and you cannot add your own. Every AI request goes from your Mac to our server, which uses Yubiru's own keys to send it to Anthropic (the AI model) or ElevenLabs (speech). How much you can use follows your Yubiru plan. You need to be signed in to your Yubiru account to use AI in the app.
14. security
We protect data with encryption in transit (HTTPS) for everything between your Mac, browser and our server; sign-in tokens and session IDs that are stored only in hashed form; no passwords for customer accounts; a database on a private network that only our server can reach; limits on request rates and sizes; access for staff only when needed, with two-step sign-in; and data processing agreements with every provider. On your Mac, agent jobs run shell commands inside a macOS sandbox by default and ask before sensitive actions.
No system is perfectly secure. If a data breach is likely to put your rights at risk, we will tell the authorities as the law requires (for example within 72 hours in Thailand and the EU) and tell you without undue delay.
15. changes to this policy
We will update this policy when Yubiru changes. We will show the date at the top. If a change is significant, we will tell you by email or in the app at least 30 days before it takes effect, unless the change is required sooner by law. If a change needs your consent, we will ask for it.
16. contact
Apirak W. (trading as Yubiru), an individual sole trader in Thailand. We will give our postal address and phone number without delay on request. Email for privacy and support: [email protected] (for privacy matters, please write "privacy" in the subject). We usually reply within 2 business days (Bangkok time).
This page is published in English, Thai and Japanese. If the versions differ, the English version applies, except where the law of the country you live in requires a version in your language to apply.
Yubiru เป็นผู้ช่วย AI สำหรับ Mac บางครั้ง Yubiru จำเป็นต้องเห็นหน้าจอและได้ยินเสียงของคุณเพื่อตอบคำถาม นโยบายนี้อธิบายอย่างชัดเจนว่าข้อมูลใดถูกส่งออกจาก Mac ของคุณ เมื่อใด ส่งไปที่ใด เก็บไว้นานเท่าใด และคุณทำอะไรได้บ้าง
สรุปสั้น ๆ
Yubiru จะส่งภาพหน้าจอ ข้อความที่คุณกำลังทำงานอยู่ เสียง หรือไฟล์ของคุณไปยังบริการ AI เฉพาะเมื่อคุณถามคำถาม หรือเมื่องานของเอเจนต์ที่คุณสั่งเริ่มกำลังทำงานอยู่เท่านั้น Yubiru ไม่เฝ้าดูหรือบันทึกหน้าจอของคุณอยู่เบื้องหลัง
ภาพหน้าจอทั้งหมดของคุณ แต่จะส่งได้ก็ต่อเมื่อคุณอนุมัติหนึ่งครั้งสำหรับงานนั้นแล้วเท่านั้น (เว้นแต่คุณจะปิด "ถามก่อนดำเนินการบน Mac" (ask before Mac actions))
การตรวจหาอัปเดต แอปจะสอบถาม yubiru.com ว่ามีเวอร์ชันใหม่หรือไม่ ซึ่งทำให้เซิร์ฟเวอร์ของเราเห็นที่อยู่ IP และเวอร์ชันแอปของคุณ แอปไม่ได้ส่งข้อมูลรายละเอียดของ Mac ของคุณ
เกี่ยวกับผู้ให้บริการเข้าสู่ระบบ จาก Google, Facebook, LINE และ Apple เราได้รับเพียงรหัสบัญชี ชื่อ ที่อยู่อีเมล และรูปโปรไฟล์ของคุณ (LINE และ Apple อาจไม่เปิดเผยอีเมลของคุณ) เราใช้ข้อมูลนี้เพื่อสร้างบัญชีและให้คุณเข้าสู่ระบบเท่านั้น เราไม่โพสต์ลงในบัญชีของคุณหรืออ่านรายชื่อผู้ติดต่อของคุณ การใช้ข้อมูลที่ได้รับจาก Google API ของเราเป็นไปตามนโยบายข้อมูลผู้ใช้ของบริการ Google API (Google API Services User Data Policy) หากคุณใช้ "ซ่อนอีเมลของฉัน" (Hide My Email) ของ Apple เราจะได้รับที่อยู่อีเมลสำหรับส่งต่อ และ Apple จะส่งต่ออีเมลของเราถึงคุณ หากคุณเข้าสู่ระบบด้วย Apple เราจะเก็บโทเค็นที่ Apple ให้มาในรูปแบบเข้ารหัส เพื่อที่เมื่อคุณลบบัญชี เราจะขอให้ Apple เพิกถอนสิทธิ์การเข้าถึง Apple ID ของคุณจาก Yubiru ได้
Yubiru は Mac 向けの AI アシスタントです。お客様にお答えするため、お客様の画面を見たり、声を聞いたりする必要がある場合があります。本ポリシーでは、どの情報が、いつ、どこへお客様の Mac の外に送られるのか、どのくらいの期間保存されるのか、そしてお客様に何ができるのかを具体的に説明します。
要点
Yubiru が画面の画像、作業中のテキスト、お客様の声またはファイルを AI サービスに送信するのは、お客様が質問したとき、またはお客様が開始したエージェントのジョブが作業しているときに限られます。バックグラウンドで画面を監視したり記録したりすることはありません。
AI の回答には、お客様の画面に表示されていた内容の短いテキストによる説明が含まれることがあります。Yubiru は、お客様が何を見ていたかを覚えておくため、この説明をチャットとともにお客様の Mac 上に保存し、以後の質問とともに送信します。
お客様が話すとき
お客様が音声キーまたは音声入力キーを押している間、Yubiru はマイクから録音します。録音はメモリ上に保持されるのみでディスクには保存されず、テキストに変換するために ElevenLabs に送信されます。音声入力されたテキストは、整えるために AI モデルにも送信されます。Yubiru が話す際は、話す文章が音声生成のために ElevenLabs に送信されます。ただし、お客様が Mac 内蔵の音声を選択した場合は、お客様の Mac 上だけで処理されます。当方は、お客様の声を本人特定に使用せず、お客様の声の複製も作成しません。
エージェントのジョブが動作するとき
お客様が Yubiru にジョブを任せると、Yubiru はジョブが完了するまで段階的に作業します。作業中、Yubiru は AI モデルに次の情報を送信することがあります。
お客様が同意した利用規約およびプライバシーポリシーの版と日時、18歳以上であることの確認。購入手続時には、自動更新への同意と提供の即時開始の求め、およびプラン、期間、価格。各記録には、お客様の IP アドレスから作成した符号（IP アドレスそのものではありません）とブラウザの種類を含みます。また、当方がお客様に送ったプランに関するメールの種類と送信日時の一覧
お客様および当方サーバー
サポートおよびアカウントに関するメモ
当方スタッフがお客様をサポートし、管理画面でアカウントを管理する際に記録する内容：お客様のアカウントに関する非公開メモ、当方が提供したプランや追加の利用枠（およびその期限）、お客様のアカウントでの AI 利用の一時停止とその理由。これらのメモは、当方が保有する他のデータと同様に開示を請求でき、「データをダウンロード」にも含まれます。
ログインサービス提供事業者について。当方が Google、Facebook、LINE および Apple から受け取るのは、お客様のアカウント ID、氏名、メールアドレスおよびプロフィール写真のみです（LINE と Apple はメールアドレスを提供しない場合があります）。当方はこれらを、アカウントの作成とログインのためにのみ使用します。当方がお客様のアカウントに投稿したり、連絡先を読み取ったりすることはありません。Google API から受け取った情報の当方による利用は、Google API サービスのユーザーデータに関するポリシーに従います。Apple の「メールを非公開」（Hide My Email）を利用する場合、当方は中継用のアドレスを受け取り、Apple が当方からのメールをお客様に転送します。Apple でログインする場合、当方は Apple から受け取るトークンを暗号化して保管し、お客様がアカウントを削除した際に、Apple に対して Yubiru による Apple ID へのアクセスの取消し（revoke）を求めます。
Stripe について。お客様のカード情報は Stripe に直接送られ、当方サーバーを経由することはありません。Stripe の Link にお客様の情報を保存する場合、その取扱いには Stripe 自身のプライバシーポリシーが適用されます。