Last updated 2026-07-15
ico ("ico", "we", "us") is a graph-native life-mapping tool operated by Yinflow Ltda. This policy explains what personal data we process and why.
Account data: your email address, used to sign you in via one-time codes.
Your content: the maps, cells, notes, and chat transcripts you create.
Voice (desktop app only, optional): when you use voice features, microphone audio is processed to transcribe speech and generate replies.
Technical data: logs and request metadata needed to operate and secure the service.
To authenticate you, to provide and synchronize the service across your devices, and to power AI-assisted features you invoke. We process this data to perform our contract with you and, where AI features are optional, based on your consent when you choose to use them. We do not sell your personal data and we do not use your content to train AI models.
When you use AI features, the relevant content and prompts are sent to AI providers to generate a response: Cloudflare Workers AI (default) and, in the desktop app, Anthropic (Claude). Automatic naming of spaces may also send content to these providers. These providers process your data under their own terms: Cloudflare and Anthropic.
Data is hosted on Cloudflare infrastructure (Workers, D1, R2, Durable Objects). Private content synced between your devices is end-to-end encrypted; the sync server stores only opaque encrypted data that we cannot read. We use industry-standard measures to protect your data, though no method of transmission or storage is completely secure.
We share data only with the subprocessors needed to run the service: Cloudflare (hosting and infrastructure), Cloudflare Workers AI and Anthropic (AI features), and Resend (delivery of sign-in emails). We do not sell your data. We may disclose data if required by law or to protect our rights, users, or the public.
We keep your account and content for as long as your account is active. When you delete content or close your account, we remove it from our active systems within 30 days, except where we must keep it longer to comply with legal obligations.
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to withdraw consent, and to object to or restrict certain processing. To exercise any of these rights, email privacy@yinflow.life and we will respond within a reasonable time.
ico is not directed to anyone under 16, and we do not knowingly collect personal data from children. If you believe a child has given us their data, contact us and we will delete it.
We may update this policy; material changes will be reflected in the "last updated" date above.
Questions about this policy or your data: privacy@yinflow.life.