English version: Privacy Policy ↓

YUQI Homes AI — 隐私政策

生效日期:2026年6月19日 · 最后更新:2026年10月13日

运营方:YUN AI INC · 网站:www.yunaione.com · 联系邮箱:yunai@yunaione.com

本政策说明 YUQI Homes AI(以下简称"本 App",包括 iOS / Android 应用与网页版 yunaione.com/web)收集哪些信息、如何使用、与谁共享,以及你如何控制这些信息。使用本 App 即表示你同意本政策。

1. 我们收集的信息

1.1 你注册 / 登录时提供的

• 邮箱地址和密码 —— 用于创建和登录账号。密码由 Google Firebase Authentication 加密保管,我们无法看到你的明文密码。
• 第三方登录(可选) —— 你也可以用 Apple 账号、Google 账号或手机号验证码登录。用 Apple / Google 登录时,Apple 或 Google 会向 Firebase Authentication 提供一个身份令牌,我们据此得到你的邮箱(Apple 可选择隐藏真实邮箱,我们收到的则是转发地址)和姓名(如有);我们拿不到你的 Apple / Google 密码。用手机号登录时,验证码由 Firebase Authentication 发送,登录过程中 iOS 可能打开一次 Google reCAPTCHA 人机验证页面。
• 显示名称(可选) —— 显示在你的留言旁。

1.2 你主动提交的内容

• 留言评论 —— 你在房源/楼盘下发布的评论及显示名(其他登录用户可见)。
• 预约看房 / 咨询 —— 你的显示名、邮箱、期望看房时间、留言内容,会发送给对应经纪人以便联系你。
• AI 客服对话 —— 你输入的消息,会保存在你的客户档案中(详见第 3 节)。
• 举报与屏蔽 —— 举报原因、被举报对象、被你屏蔽的用户。
• 活动报名 —— 你报名开放日/看房团时提交的姓名与邮箱,会提供给组织该活动的经纪人。
• 手机号 —— 在用手机号(验证码)登录、预约看房、Open House 签到、注册经纪人或开通短信提醒时填写;用于登录账号、安排看房、就你的请求联系你;只有在你勾选对应的框后,才会用来发送第 12 节所述的 YUQI Homes AI 短信。登录验证码由 Google Firebase Authentication 发送,不是 YUQI Homes AI 短信。

1.3 使用数据

• 收藏与点赞 —— 与你的账号关联,用于展示"收藏的房源"。
• 视频观看行为 —— 你观看了哪套房源的视频、观看时长与进度、使用的语言、会话标识,与你的账号关联;用于统计,以及让你预约过的经纪人了解你的关注点。
• AI 需求画像 —— 由 AI 客服对话与你的预约/咨询归纳出的购房需求(预算、意向城市、户型等),保存在你的客户档案中;你预约过的经纪人在带看后可以补充跟进备注。
• 推送通知令牌 —— 你允许通知后,设备的推送令牌用于向你发送预约确认、经纪人回复等提醒。
• 频道订阅 —— 你订阅了哪些经纪人的洞察频道。

1.4 仅限经纪人

• 经审核的经纪人上传的房源/楼盘视频及相关信息(地址、价格、户型等)。

1.5 设备权限

• 相册 / 相机 / 麦克风 —— 仅在经纪人上传看房视频时请求。普通用户浏览时不会用到。
• 位置(仅使用期间) —— 只在你主动点地图上的「我的位置」按钮时请求,用来把地图移到你附近、显示附近的新房社区。位置只在你的设备上用于移动地图,不会上传到我们的服务器,也不会保存;你可以拒绝授权,地图的其他功能不受影响。

1.6 仅存在你设备上(不上传)

• 语言偏好(简体/繁體/English)。

1.7 崩溃与运行健康数据

• Firebase Crashlytics(Google)—— 本 App 出错时记录错误类型、错误信息、设备型号、系统版本、App 版本等诊断信息,帮我们修复问题。Crashlytics 会生成一个与设备相关的安装标识符,不包含你的账号信息。
• 我们自己的运行健康记录 —— 为判断每次更新是否稳定,App 在启动时和出错时会向我们的服务器发送一条精简记录:平台(iOS / Android / 网页)、系统版本、App 版本与更新编号、出错的页面类型(只有页面模板名,不含具体房源编号)、错误名称与前 300 字的错误信息,以及一个每次启动随机生成、不保存、不与账号关联的会话编号。不包含你的账号、邮箱、手机号;错误信息里疑似邮箱、电话、长编号、网址参数的内容会在发送前抹掉,服务器收到后再抹一遍。

2. 我们如何使用这些信息

3. AI 客服「Grace」说明(重要)

本 App 的「AI 客服」(Grace)由 Google Gemini 模型提供:在手机 App 内通过 Firebase AI Logic 调用,或经由我们部署在 Google Cloud 上的 Grace 服务端调用 Vertex AI。当你在 AI 客服中发送消息时:

• 你输入的文字会发送到 Google 的服务器进行处理并返回回复;经由 Grace 服务端时,消息先经过我们的服务器(用于校验身份、拼装房源信息、过滤不合规内容),再送到 Google;
• 我们会把当前在售房源的公开信息一并提供给模型,以便它推荐真实房源;
• 对话内容会保存在你的客户档案中,用于让助手记住上下文、并归纳你的购房需求画像;保存期限与删除见第 6 节;
• 对话的可见范围:你本人、平台管理者,以及你预约或咨询过的经纪人。其他经纪人无法查看。如果你点击「联系经纪人」,你最近的消息会作为需求摘要转给经纪人;
• 经纪人模式下的 AI 处理:持牌经纪人使用 Grace 时,可以把自己正在服务的客户(你预约 / 咨询过的经纪人名下的你,或经纪人自行录入的自有客户)绑定到对话。此时该客户的购房需求画像、经纪人写的跟进备注、看房记录,以及经纪人自己的成交统计,会一并提供给 Google Gemini 模型,用来生成针对该客户的建议。这些内容只在生成回复时使用;我们使用的是 Google 的付费 / 企业接口,按其条款这些内容不会被用于训练 Google 的模型;我们的服务器每次读取经纪人的客户资料都会留下访问记录,经纪人本人可以在 App 内查看。含受保护特征(种族、宗教、家庭状况等)的句子在送入模型前会被过滤,Grace 也被禁止按这些特征推荐区域;
• 请不要在 AI 客服中输入敏感信息(如身份证号、银行卡号、密码)。

4. 我们与谁共享

• Google Firebase / Google Cloud(Authentication / Firestore / Cloud Storage / Cloud Run / Crashlytics)—— 我们的后端服务商,你的账号与内容存储在 Google 的服务器上;Grace 服务端运行在 Google Cloud 上。
• Apple、Google(登录) —— 你选择用 Apple 或 Google 账号登录时,由它们向 Firebase Authentication 提供身份令牌,见 1.1 节。
• Google Gemini(Firebase AI Logic / Vertex AI)—— 处理 AI 客服消息,以及经纪人模式下的客户需求画像、备注与成交统计,见第 3 节。
• Cloudflare —— 我们的运行健康记录(1.7 节)和分享短链接服务运行在 Cloudflare Workers 上;Cloudflare 作为服务商处理这些请求,不含你的账号信息。
• 地图服务 —— iOS 使用 Apple Maps,Android 使用 Google Maps,网页版使用 Google Maps,用于显示房源位置;你点「我的位置」时位置只在设备上用于移动地图(1.5 节)。
• 我们的经纪人 —— 你主动预约/咨询时,对应经纪人接收你的联系方式与需求;你预约过的经纪人还可以查看你的 AI 客服对话、需求画像与观看行为,并可补充跟进备注。组织活动的经纪人可查看该活动的报名名单。
• Twilio —— 我们的短信服务商,只为投递我们的短信和处理退订而处理你的手机号与短信内容(见第 12 节)。

除上述情况外,我们不会出售、出租或交易你的个人信息。仅在法律要求时才会依法披露。

5. 内容可见性

请注意:你发布的留言评论及显示名对所有登录用户可见。请勿在评论中填写私人联系方式。收藏与点赞记录仅你自己可见;观看行为、AI 对话与需求画像不公开,仅你本人、平台管理者及你预约过的经纪人可见。

6. 保存期限与删除

• 账号存续期间我们会保留上述数据。
• 你可以随时在 App 内自助删除账号:进入「我的 → 删除账号」。删除立即生效:账号无法再登录,你发布的房源和视频对所有人隐藏。30 天内可以恢复:在登录页申请后,我们会往你的注册邮箱发一个一次性恢复链接(24 小时内有效)。30 天期满后,账号、你发布的房源和视频及相关文件将被永久删除,无法恢复。
• AI 客服对话、需求画像与推荐记录:随账号一起进入 30 天恢复期,期满后由每日清理任务从你的客户档案、你与平台的会话记录和为你生成的推荐记录中删除。为了安全审计与故障恢复,这些对话另有一份加密副本存放在我们独立的加密数据库中,它不用于向你或经纪人展示;加密副本按备份周期清除,我们正在把这一周期写入本政策,确定前你可以随时发邮件要求我们立即删除你的副本。
• 出于审核与法律合规,举报记录、短信同意记录(第 12 节)可能在账号删除后保留一段时间。

7. 数据安全

数据通过 HTTPS/TLS 加密传输,并由 Firebase 安全规则限制访问(例如:你的收藏只有你能读写;预约信息只有你和对应经纪人/管理员能看到)。但没有任何系统能保证 100% 安全。

8. 儿童

本 App 不面向 13 岁以下儿童,也不会有意收集其信息。若发现此类信息,我们会尽快删除。

9. 你的权利

你有权访问、更正或删除你的个人信息。App 内已提供账号删除功能;其它请求可发邮件至上方联系邮箱。加州居民依 CCPA 享有知情、删除及不被出售个人信息的权利(我们本就不出售)。

10. 政策变更

本政策如有更新,我们会修改本页顶部的"最后更新"日期;重大变更会在 App 内提示。

11. 社媒平台同步(YouTube · Facebook · Instagram · TikTok)

持牌经纪人可以在「我的 → 社媒同步」把自己的 YouTube 频道、Facebook 主页 / Instagram 商业账号或 TikTok 账号连接到本 App。YouTube、Facebook、Instagram 可以把你在 YUQI 发布的房源视频自动同步过去(每个账号都可以关闭自动发布)。TikTok 永远不会自动发布:每一条 TikTok 帖子都由经纪人在「发布到 TikTok」页面上亲自完成,包括预览视频、修改标题、选择谁可以看和其他 TikTok 设置,最后点「发布」;只能发布你自己的视频。此功能完全可选,普通买家不涉及。

• 我们请求的权限:YouTube — 上传视频到你的频道(youtube.upload)、读取频道基本信息(youtube.readonly),以及给我们上传的视频添加字幕(youtube.force-ssl):只调用 captions.insert,把与配音一致的字幕文件加到本 App 上传的那条视频上;不读取、不修改、不删除你的其他视频、字幕、评论或评分;Meta — 读取你管理的主页列表、以主页 / Instagram 商业账号身份发布视频;TikTok — 读取你的基本资料(open ID 与显示名称),用来显示已连接的是哪个账号(user.info.basic);读取你当前的发帖设置,并按你选的设置把你选的视频发到你的账号(video.publish)。
• 我们只用这些权限做一件事:把你确认过的视频和标题 / 简介发到你连接的账号,并记录发布结果(帖子链接或编号、时间、成功 / 失败)。我们不会读取你的私信、评论、粉丝名单、观看历史或其他内容,不会代你点赞 / 关注 / 评论,不会把你的平台数据用于广告或卖给第三方。
• 令牌保管:授权令牌只保存在我们的服务器,经加密传输与访问控制,App 端不保存;仅用于上述发布动作。
• 我们处理的 TikTok 数据:连接 TikTok 时,我们保存你的 TikTok open ID、显示名称和授权令牌(只存在我们的服务器上)。每次打开「发布到 TikTok」页面,我们会向 TikTok 实时读取你当前的创作者信息(昵称、头像、可选的可见范围、是否关闭了评论 / 合拍 / 拼接、可发视频的最长时长),只用来显示这个页面,不保存。每条帖子我们会保存你选的设置(标题、可见范围、互动选项、内容披露)、你同意 TikTok《音乐使用确认》(以及适用时的《品牌内容政策》)的时间,以及 TikTok 返回的发布编号、状态和帖子编号。发到 TikTok 的视频不加任何 Logo 或水印;配音由 AI 生成的视频保留画面上的 AI 配音说明,并在 TikTok 上标记为 AI 生成内容。
• 随时断开:在「社媒同步」点「断开」即删除令牌(显示「授权已失效,请重新连接」的账号也可以直接断开);断开 TikTok 时我们还会向 TikTok 申请撤销对 YUQI 的授权。你也可以在平台侧撤销:Google 见 Google 账号 · 第三方访问权限,Meta 见「设置 → 商务集成」,TikTok 见「设置 → 安全 → 已连接的应用」。
• 保留期限与删除:点「断开」或删除 YUQI 账号时,TikTok 令牌随即删除,我们也会向 TikTok 申请撤销对 YUQI 的授权(删除的账号 30 天内还能恢复,但令牌在删除当下就删掉);TikTok 发布记录在账号删除后的 30 天恢复期结束时删除。具体如下:
  • 断开:在「社媒同步」对某个账号点「断开」,我们删除它的授权令牌和连接记录(TikTok 即 open ID 与显示名称);断开 TikTok 时先向 TikTok 申请撤销对 YUQI 的授权。之前的发布记录在 YUQI 账号存续期间保留。
  • 删除 YUQI 账号时:即使账号在 30 天内还能恢复,该账号的社媒发布也立即全部停止。我们向 TikTok 申请撤销对 YUQI 的授权,并删除你连接的 YouTube、Facebook、Instagram、TikTok 的全部授权令牌,此后我们无法再访问这些账号;关闭自动发布;取消队列里所有还在等待的发布,包括别人为你的视频排的。还没出结果的 TikTok 帖子记录标为失败:还没发送到 TikTok 的标为「因 YUQI 账号已删除而取消」;已经交给 TikTok 的标为「账号删除时 YUQI 已停止跟踪这条帖子,TikTok 仍可能发布,请到 TikTok 主页查看。」当时已经在上传或处理中的视频仍可能发布出去,你可以到该平台上删除。删除账号之后才在浏览器里完成的平台授权一律拒绝,不保存任何内容。以上步骤如因技术故障没有完成,我们每天自动重试,直到完成。
  • 30 天内恢复账号:不会自动重新连接。「社媒同步」里每个账号都显示「授权已失效,请重新连接」,你点「连接」重新授权后才恢复,也可以点「断开」把它删掉;自动发布保持关闭,要你自己再打开;已取消的发布不会恢复,但被取消的 TikTok 视频可以重新发布。
  • 30 天恢复期结束后:每日清理任务永久删除该账号的社媒数据:连接记录、剩余的授权令牌、发布记录(含每条 TikTok 帖子你选的设置和同意时间)、你提交的发布请求、TikTok 每日发布次数记录,以及发布你的视频时我们生成的短链接。
  • 平台上的内容:已经发到各平台的帖子会留在那些平台上,我们无法替你删除,请到该平台自行删除。TikTok:你断开或删除账号时,我们会向 TikTok 申请撤销对 YUQI 的授权;如果申请失败,我们已删除的令牌会按 TikTok 自身的期限失效。YouTube、Facebook、Instagram:我们删除自己保存的令牌,但不会向 Google 或 Meta 申请撤销授权;要把 YUQI 从这些平台的已连接应用中移除,请按上一条的方法在平台侧撤销。
• 本 App 使用 YouTube API Services。使用该功能即同时受 YouTube 服务条款 与 Google 隐私政策 约束。本 App 对来自 Google API 的信息的使用与传输遵守 Google API 服务用户数据政策,包括其"有限使用"要求。
• 本 App 使用 Meta 平台接口,受 Meta 隐私政策 约束;使用 TikTok 接口,受 TikTok 隐私政策 约束。

12. 短信通知(SMS)

本 App 的运营方 YUQI Homes AI(Yun Ai, Inc.)用公司自己的号码 (909) 303-9929 发送短信。每条短信都以「YUQI Homes AI:」开头,使用公司固定模板;经纪人不能通过我们的号码自行编写或发送短信。我们有四类短信,每一类都有单独的勾选框,默认不勾,由你分别选择;是否同意都不是签到、预约看房、购买或使用任何服务的条件。

• 回复 YES 确认(双重确认):第 2–4 类勾选后(包括给已确认的号码新增一类短信),我们先发一条确认短信,你回复 YES 后该类短信才开始发送。没有回复的,我们最多再发一次确认,之后不再打扰。Open House 访客签到后会立即收到一条确认短信(计入每次看房最多 2 条)。
• 发送时间:营销类和其他非紧急短信不在太平洋时间晚 9 点到早 9 点发送;营销类短信另外只在你当地时间(按手机号区号判断)早 8 点到晚 8 点之间发送;看房短信、房源提醒和经纪人短信中的非即时短信,每个账号每天最多 2 条(Open House 回访每次看房最多 2 条);开通确认短信会即时发送。看房确认、看房前提醒、经纪人的新客户线索这类即时通知可能随时发送,另有各自的数量上限。
• 可能产生短信和流量费用。
• 随时退订:回复 STOP 即退订该号码的全部 YUQI Homes AI 短信,你会收到一条退订确认,之后不再发送;回复 UNSUBSCRIBE、CANCEL、END、QUIT、「退订」,以及其他明确要求停发的回复(例如「不要再给我发短信」「remove me」)也按退订处理;你也可以通过电话或当面请为你服务的经纪人或我们的客服帮你登记不再接收。也可以在 App 里取消勾选。有账号的,删除账号后所有短信随即停止。回复 HELP 获取帮助,或邮件 yunai@yunaione.com、电话 (626) 695-3076。
• 重新接收:退订后如需重新接收,请在 App 里重新勾选;可能还需要用这部手机向 (909) 303-9929 发送 START,运营商才会放行我们的短信。单独回复 START 或 YES 不会重新开通任何一类短信。
• Open House 签到信息:签到屏就是接待经纪人的签到表。你在上面填写的姓名、手机、邮箱,以及你选择填写的其他信息(如找房需求),会和纸质签到表一样交给接待经纪人,经纪人可以在 App 里查看并跟进你。经纪人只能看到你是否同意短信回访或已退订,以便知道我们的回访会不会发出。你的短信同意只适用于 YUQI Homes AI 发出的短信:接待经纪人或任何其他机构都不能凭它用我们的号码或以我们的名义给你发短信。如果我们的回访短信因技术原因发不出去(例如短信服务尚未开通),我们会提醒接待经纪人自己跟进你,并把我们这条回访的文字给他参考。
• 你回复的短信:你回复我们的短信时,回复内容会转给相关的经纪人(Open House 短信给接待经纪人,看房短信给为你服务的经纪人)或平台客服,以便有人答复你;你回复 STOP 时,对方会被告知你已退订、不得再给你发短信。
• 我们保存的记录:每次同意、退订和号码变更,我们都会记录手机号、短信类别、当时显示的同意文字及其版本、同意所在的页面、界面语言和服务器时间;Open House 签到还会记录场次与接待经纪人。这些同意记录在你退订或删除账号后仍会保留,用来证明你何时、如何同意和退订,保留期限以证明我们遵守短信相关法律所需为准。每条短信的发送记录(号码、类别、投递状态)以及你回复我们的短信,保存约 90 天。账号彻底删除时,你的短信设置和号码随之删除。
• 短信服务商:短信通过 Twilio 发送。Twilio 作为我们的服务商,只为投递短信和处理退订而处理你的号码与短信内容。
• 不出售、不共享:我们不会为营销目的出售你的短信同意数据或个人信息,也不会为营销目的与第三方共享。我们不会为营销或推广目的把任何手机信息分享给第三方或关联方;短信发送方的同意数据与同意记录不会分享给任何第三方。为确保不给已退订的人发短信,负责你这次 Open House 或看房请求的经纪人只能看到一个状态(已同意 / 未同意 / 已退订),以便知道我们的短信能否发给你;这不是你的同意记录,绝不用于营销,也不能用来通过我们的号码给你发短信。除此之外,第 4 节所列的共享均不包括短信同意数据与同意记录。

13. 联系我们

YUN AI INC
地址:1320 Valley Vista Dr, Ste 209, Diamond Bar, CA 91765
网站:www.yunaione.com
邮箱:yunai@yunaione.com
电话:(626) 695-3076

YUQI Homes AI — Privacy Policy

Effective: June 19, 2026 · Last updated: October 13, 2026

Operator: YUN AI INC · Website: www.yunaione.com · Contact: yunai@yunaione.com

This policy explains what the YUQI Homes AI app (the “App”, meaning the iOS / Android apps and the web version at yunaione.com/web), operated by YUN AI INC (Yun Ai, Inc.), collects, how we use it, who we share it with, and the control you have. By using the App you agree to this policy.

1. Information we collect

1.1 When you sign up or sign in

• Email address and password — to create and secure your account. Passwords are managed and encrypted by Google Firebase Authentication; we never see your plaintext password.
• Third-party sign-in (optional) — you can also sign in with your Apple ID, Google account or a mobile number and one-time code. With Apple / Google sign-in, Apple or Google gives Firebase Authentication an identity token from which we receive your email (Apple lets you hide your real address, in which case we receive a relay address) and your name if provided; we never receive your Apple / Google password. With mobile sign-in, the one-time code is sent by Firebase Authentication, and on iOS a Google reCAPTCHA page may open once during sign-in.
• Display name (optional) — shown next to your comments.

1.2 Content you submit

• Comments — posted on listings/developments, with your display name (visible to signed-in users).
• Tour requests / inquiries — your display name, email, preferred tour time and message, sent to the relevant agent so they can contact you.
• AI assistant messages — stored in your customer file; see Section 3.
• Reports and blocks — report reason, reported item, users you block.
• Event RSVPs — the name and email you submit when signing up for an open house / tour event, shared with the agent organizing that event.
• Mobile phone number — entered when you log in with your mobile number (verified by a one-time code), book a tour, sign in at an open house, register as an agent or turn on text alerts; used to log you in, to arrange tours and contact you about your request and, only if you check the matching box, to send the YUQI Homes AI text messages described in Section 12. The one-time login code is sent by Google Firebase Authentication, not as a YUQI Homes AI text message.

1.3 Usage data

• Saves and likes — linked to your account to power “Saved homes”.
• Video viewing activity — which listing videos you watch, watch duration and position, language, and a session identifier, linked to your account; used for statistics and to let agents you have booked with understand your interests.
• AI needs profile — home-buying preferences (budget, target cities, home type, etc.) derived from your AI chat and your inquiries, stored in your customer file; agents you have booked with may add follow-up notes after a tour.
• Push notification token — if you allow notifications, your device token is used to send tour confirmations and agent replies.
• Channel subscriptions — which agents’ insight channels you follow.

1.4 Agents only

• Property/development tour videos and details (address, price, floor plans) uploaded by approved agents.

1.5 Device permissions

• Photo library / camera / microphone — requested only when an agent uploads a tour video. Not used for regular browsing.
• Location (while in use) — requested only when you tap the “My location” button on the map, to move the map to where you are and show nearby new-home communities. Your location is used on your device only to position the map; it is not sent to our servers and not stored. You can decline, and the rest of the map keeps working.

1.6 Stored only on your device

• Language preference (Simplified Chinese / Traditional Chinese / English).

1.7 Crash and app-health data

• Firebase Crashlytics (Google) — when the App hits an error we record the error type and message, device model, OS version and App version so we can fix it. Crashlytics generates an installation identifier tied to the device; it does not contain your account information.
• Our own app-health records — to judge whether each update is stable, the App sends our server a minimal record at start-up and when an error occurs: platform (iOS / Android / web), OS version, App version and update ID, the type of screen where it happened (the screen template name only, never a specific listing ID), the error name and the first 300 characters of its message, and a session ID that is randomly generated on each launch, never stored and never linked to your account. It never includes your account, email or phone number; anything in the error message that looks like an email, phone number, long ID or URL parameters is removed before sending, and removed again on the server.

2. How we use it

3. About the AI assistant “Grace” (important)

The in-app AI assistant (Grace) is powered by Google Gemini models, called either from the mobile App through Firebase AI Logic or through our Grace server running on Google Cloud, which calls Vertex AI. When you send a message:

• Your text is sent to Google’s servers for processing and to generate a reply; when it goes through our Grace server, the message first passes through our own server (to verify your identity, attach listing information and filter non-compliant content) before it is sent to Google;
• We also supply public information about current listings so it recommends real homes;
• Conversations are stored in your customer file so the assistant can remember context and build your needs profile; retention and deletion are described in Section 6;
• Who can see them: you, the platform administrator, and agents you have booked a tour or inquiry with. Other agents cannot. If you tap “Contact an agent”, your recent messages are passed to that agent as a summary of your needs;
• AI processing in agent mode: a licensed agent using Grace can attach a client they are working with (you, if you booked or inquired with that agent, or a client the agent entered themselves) to the conversation. That client’s needs profile, the agent’s follow-up notes and tour history, together with the agent’s own closing statistics, are then supplied to the Google Gemini model to generate advice for that client. This content is used only to generate the reply; we use Google’s paid / enterprise APIs, under whose terms it is not used to train Google’s models. Every time our server reads an agent’s client records it writes an access log that the agent can review in the App. Sentences containing protected characteristics (race, religion, familial status, etc.) are filtered out before anything reaches the model, and Grace is prohibited from recommending areas based on them;
• Please do not enter sensitive information (ID numbers, bank/card numbers, passwords) into the AI chat.

4. Who we share with

• Google Firebase / Google Cloud (Authentication / Firestore / Cloud Storage / Cloud Run / Crashlytics) — our backend provider; your account and content are stored on Google servers, and the Grace server runs on Google Cloud.
• Apple and Google (sign-in) — when you choose to sign in with Apple or Google, they give Firebase Authentication an identity token (Section 1.1).
• Google Gemini (Firebase AI Logic / Vertex AI) — processes AI chat messages and, in agent mode, client needs profiles, notes and closing statistics (Section 3).
• Cloudflare — our app-health records (Section 1.7) and share-link service run on Cloudflare Workers; Cloudflare processes these requests as our service provider, and they contain no account information.
• Maps — Apple Maps on iOS, Google Maps on Android and on the web, to display property locations; when you tap “My location” your position is used only on your device to move the map (Section 1.5).
• Our agents — when you submit a tour request or inquiry, the relevant agent receives your contact details and requirements; agents you have booked with can also view your AI chat, needs profile and viewing activity, and may add follow-up notes. The agent organizing an event can see that event’s RSVP list.
• Twilio — our SMS provider; it processes your mobile number and our text messages only to deliver them and handle opt-outs (Section 12).

Apart from the above we do not sell, rent or trade your personal information. We disclose it only where legally required.

5. Visibility of your content

Your comments and display name are visible to all signed-in users — please don’t put private contact details in comments. Your saves and likes are private to you; your viewing activity, AI chat and needs profile are never public and are visible only to you, the platform administrator, and agents you have booked with.

6. Retention and deletion

• We retain the above data while your account exists.
• You can delete your account at any time in the App: Me → Delete account. Deletion takes effect right away: sign-in is disabled and the listings and videos you posted are hidden from everyone. For 30 days you can restore the account: ask for it on the sign-in screen and we email a one-time restore link to your registered address (valid for 24 hours). When the 30 days end, the account, the listings and videos you posted and their files are permanently deleted and cannot be recovered.
• AI chat, needs profile and recommendation records: these enter the same 30-day restore period as your account; when it ends, our daily cleanup deletes them from your customer file, from your conversation threads with the platform and from the recommendations generated for you. For security auditing and disaster recovery, an encrypted copy of these conversations is also kept in a separate encrypted database that is never shown to you or to agents; encrypted copies are purged on our backup cycle, which we are in the process of stating in this policy. Until then you can email us at any time to have your copy deleted immediately.
• Abuse reports and SMS consent records (Section 12) may be retained for a period after deletion for moderation and legal compliance.

7. Security

Data is encrypted in transit (HTTPS/TLS) and access is restricted by Firebase Security Rules (e.g. only you can read/write your saves; inquiries are visible only to you and the relevant agent/admin). No system can be guaranteed 100% secure.

8. Children

The App is not directed to children under 13 and we do not knowingly collect their information. If we learn we have, we will delete it promptly.

9. Your rights

You may access, correct or delete your personal information. Account deletion is built into the App; for other requests email us at the address above. California residents have rights under the CCPA to know about, delete, and opt out of the sale of personal information (we do not sell it).

10. Changes

If we update this policy we will revise the “Last updated” date above, and notify you in-app for material changes.

11. Social media sync (YouTube · Facebook · Instagram · TikTok)

Licensed agents may connect their own YouTube channel, Facebook Page / Instagram business account or TikTok account under “Me → Social sync”. For YouTube, Facebook and Instagram, listing videos they publish on YUQI can be posted to those accounts automatically (auto-posting can be turned off for each account). TikTok is never posted automatically: each TikTok post is created by the agent on the “Post to TikTok” screen, where they preview the video, edit the title, choose who can view it and the other TikTok settings, and then tap Post; only your own videos can be posted. This feature is entirely optional and does not apply to home buyers.

• Permissions we request: YouTube — upload videos to your channel (youtube.upload), read basic channel info (youtube.readonly), and add captions to the videos we upload (youtube.force-ssl): we only call captions.insert to attach the subtitle file that matches the voice-over to a video our app uploaded; we do not read, edit or delete your other videos, captions, comments or ratings; Meta — list the Pages you manage and publish videos as your Page / Instagram business account; TikTok — read your basic profile (open ID and display name) to show which account is connected (user.info.basic), and read your current posting settings and post the video you chose, with the settings you chose, to your account (video.publish).
• We use these permissions for one purpose only: posting the video and the title / description you approved to the account you connected, and recording the result (post URL or ID, time, success/failure). We do not read your messages, comments, followers, watch history or other content; we do not like, follow or comment on your behalf; and we never use your platform data for advertising or sell it to third parties.
• Token storage: authorization tokens are stored only on our servers, transmitted encrypted and access-controlled; they are never stored in the app and are used solely for the posting actions above.
• TikTok data we handle: when you connect TikTok we store your TikTok open ID, display name and authorization tokens (on our servers only). Each time you open the “Post to TikTok” screen we fetch your current creator info from TikTok (nickname, avatar, available privacy options, whether comments / Duet / Stitch are turned off, and the maximum video length) to build that screen; we do not store it. For each post we store the settings you chose (title, privacy, interactions, content disclosure), the time you agreed to TikTok’s Music Usage Confirmation (and Branded Content Policy when it applies), and TikTok’s publish ID, status and post ID. Videos we post to TikTok carry no logo or watermark; videos with an AI-generated voice-over keep their on-screen AI-voice disclosure and are marked as AI-generated content on TikTok.
• Disconnect any time: tap “Disconnect” in Social sync to delete the token (this also works for an account that shows “Authorization expired — reconnect”); when you disconnect TikTok we also ask TikTok to revoke YUQI’s access. You can also revoke access on the platform side: Google at Google Account · Third-party access, Meta under Settings → Business Integrations, TikTok under Settings → Security → Connected apps.
• Retention and deletion: TikTok tokens are deleted, and TikTok is asked to revoke YUQI’s access, when you tap “Disconnect” or delete your YUQI account (right away, even though a deleted account can be restored for 30 days); TikTok post records are deleted when the 30-day restore period after account deletion ends. In detail:
  • Disconnect: tapping “Disconnect” for an account in Social sync deletes its authorization tokens and its connection record (for TikTok, your open ID and display name); for TikTok we first ask TikTok to revoke YUQI’s access. Records of your earlier posts are kept while your YUQI account exists.
  • When you delete your YUQI account: we stop all social posting for it right away, even though the account can still be restored for 30 days. We ask TikTok to revoke YUQI’s access and delete the authorization tokens for all your connected YouTube, Facebook, Instagram and TikTok accounts, so we no longer have access to any of them; we turn off auto-posting; and we cancel every post still waiting in our queue, including posts someone else queued for your videos. TikTok posts that had not finished are marked as failed: a post not yet sent to TikTok is marked “Cancelled because this YUQI account was deleted”; a post already handed to TikTok is marked “YUQI stopped tracking this post when the account was deleted. TikTok may still publish it; check your TikTok profile.” A video that is already uploading or processing at that moment may still be published; you can delete it on that platform. If you finish authorizing a platform in your browser after deleting your account, we refuse it and save nothing. If a technical error stops any of these steps, we retry automatically every day until they are done.
  • If you restore your account within 30 days: nothing is reconnected automatically. Each account shows “Authorization expired — reconnect” in Social sync until you tap “Connect” and authorize it again, or tap “Disconnect” to remove it; auto-posting stays off until you turn it back on; cancelled posts are not resumed, but you can post a cancelled TikTok video again.
  • When the 30-day restore period ends: our daily cleanup permanently deletes the social data for the account: connection records, any remaining tokens, post records (including the settings and consent times of your TikTok posts), the post requests you made, your TikTok daily-limit records, and the short links we created when posting your videos.
  • On the platforms: posts already published stay on those platforms, and we cannot delete them for you; please remove them there. For TikTok, we ask TikTok to revoke YUQI’s access when you disconnect it or delete your account; if that request fails, the token we deleted stops working when it expires on TikTok’s own schedule. For YouTube, Facebook and Instagram, we delete our copies of the tokens but do not ask Google or Meta to revoke them; to remove YUQI from those platforms’ connected apps, revoke access on the platform side as described in the item above.
• This app uses YouTube API Services. By using this feature you also agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy. YUQI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• This app uses Meta platform APIs subject to the Meta Privacy Policy, and TikTok APIs subject to the TikTok Privacy Policy.

12. Text messages (SMS)

YUQI Homes AI (Yun Ai, Inc.), the operator of this App, sends text messages from its own company number, (909) 303-9929. Every text starts with “YUQI Homes AI:” and is built from our fixed company templates; agents cannot write or send their own messages through our number. We run four text programs. Each program has its own box, which is not pre-checked, and you choose each one separately. Agreeing is never a condition of signing in at an open house, booking a tour, buying anything or using any service.

• Reply YES to confirm (double opt-in): for programs 2–4, after you check a box (including when you add a program to a number that is already confirmed) we send one text asking you to reply YES, and that program starts only after you do. If you don’t reply, we send the request at most once more, then stop. Open-house visitors get one confirmation text right after they sign in; it counts toward the 2-text limit.
• When we text: marketing texts and other non-urgent texts are never sent between 9 p.m. and 9 a.m. Pacific time; marketing texts are also sent only between 8 a.m. and 8 p.m. in your local time (based on your area code); non-urgent Tour Texts, Listing Alerts and Agent Account Texts are limited to 2 per day per account (Open House Follow-up: up to 2 per visit); opt-in confirmation texts are sent right away. Time-sensitive notices (a tour confirmation, a reminder shortly before a scheduled tour, a new client lead for an agent) can arrive at any time and have their own limits.
• Message and data rates may apply.
• Opt out any time: reply STOP to any text; you will receive one confirmation and no further texts from any YUQI Homes AI program at that number. We also treat UNSUBSCRIBE, CANCEL, END, QUIT, “退订” and other clear requests to stop (such as “remove me” or “don’t text me”) as opt-outs, and you can ask the agent working with you or our support team, by phone or in person, to record your opt-out. You can also uncheck the box in the app, and if you have an account, deleting it stops all texts. Reply HELP for help, or email yunai@yunaione.com or call (626) 695-3076.
• Getting texts again: after opting out, check the box again in the app; you may also need to text START to (909) 303-9929 from that phone so the carrier lets our texts through. Replying START or YES on its own does not turn any program back on.
• Open-house sign-in details: the sign-in screen is the host agent’s sign-in sheet. The name, phone number, email and any other answers you choose to give there (such as what you are looking for) go to the host agent, just as on a paper sign-in sheet, and the host agent can see them in the app and follow up with you. The host agent only sees whether you agreed to follow-up texts or opted out, so they know whether our text will reach you. Your consent covers texts from YUQI Homes AI only: it does not let the host agent or any other business text you through our number or on our behalf. If our follow-up text can’t be sent for a technical reason (for example, before our text service is switched on), we remind the host agent to follow up with you personally and show them the wording of our follow-up for reference.
• Your replies: if you reply to one of our texts, we show your reply to the agent it concerns (the host agent for open-house texts, the agent working with you for tour texts) or to our support team, so someone can answer you. If you reply STOP, they are told that you opted out and must not text you.
• Records we keep: for every opt-in, opt-out and number change we record the phone number, the program, the exact consent wording shown and its version, the screen where it happened, the app language and the time on our server; for open-house sign-ins, also the open house and the host agent. These consent records are kept after you opt out or delete your account, as proof of when and how you agreed and opted out, for as long as we need them to show that we complied with messaging laws. Delivery logs for each text (number, message type, delivery status) and the replies you send us are kept for about 90 days. When your account is permanently deleted, your text-alert settings and number are deleted with it.
• Our SMS provider: texts are sent through Twilio, which acts as our service provider and processes your number and our messages only to deliver them and handle opt-outs.
• No selling or sharing: We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. To make sure nobody who opted out is texted, the agent handling your open house visit or tour request is shown only a status (agreed / not agreed / opted out) so they know whether our text will reach you; this is not your consent record, is never used for marketing and cannot be used to text you through our number. Apart from that, the sharing described in Section 4 never includes SMS opt-in data or consent.

13. Contact

YUN AI INC
Address: 1320 Valley Vista Dr, Ste 209, Diamond Bar, CA 91765
Website: www.yunaione.com
Email: yunai@yunaione.com
Phone: (626) 695-3076