You Are Not Alone, Inc. (doing business as YANA, yana/ai, "we," "us," or "our") operates the website located at https://yana.company (the "Site") and our digital continuum-of-care software platform located at https://yanaapp.com (the "Platform"). This Privacy Policy describes how we collect, use, and disclose information when you visit our Site or interact with our Platform.
01No Protected Health Information (PHI) Collected
Important Notice
YANA is a peer-support, recovery-tracking, and community-engagement platform. We do not collect, store, or require Protected Health Information (PHI) or medical records of any kind. The Platform is not a medical device, electronic health record (EHR) system, or clinical treatment provider. You should not upload or share clinical medical records or official health histories. Any personal experiences, recovery milestones, or thoughts you share on the Platform or with our AI companion are entirely voluntary and driven by you.
02Information We Collect Voluntarily
Depending on how you use our Site and Platform, we may collect the following categories of information:
A. Information You Provide Directly
- Account & Authentication Data: Email address, full name, and encrypted credentials when you register via email or our integrated authentication providers.
- Platform Content: Posts, comments, private messages, group chats, and media uploads that you actively and voluntarily choose to share on the Platform feed or community channels.
- Voluntary AI Companion Interactions: Full text transcripts and inputs provided during your voluntary conversations with Oliver, our 24/7 AI recovery companion chatbot.
- Invitation Data: Email addresses provided by community operators to issue 7-day registration invitations to prospective alumni or members.
B. Information Collected Automatically
- Activity Events & Analytics: To generate engagement metrics and community dashboard statistics, we track platform actions, including post creation, comments, support reactions, and message transmission.
- Engagement Signals: Our system evaluates engagement frequencies against baseline activity metrics to compute behavioral change indicators (such as activity spikes or declines) solely for community oversight and supportive outreach.
03How We Use Your Information
We process your data exclusively to maintain, optimize, and safely execute our platform operations. Specifically, your data is utilized to:
- Maintain strict multi-tenant isolation so your engagement data is isolated to your specific community.
- Power the engagement monitoring logic that signals when a member might benefit from supportive community outreach.
- Provide real-time response analysis through our integrated AI companion to evaluate chat inputs for acute safety patterns (such as severe distress or crisis).
- Compile aggregated dashboard metrics (e.g., active member counts, weekly engagement rates) for operators to measure community health.
04Data Sharing & Multi-Tenant Boundaries
Strict Data Isolation Safeguard
YANA is architected as a multi-tenant ecosystem. We enforce strict database-level boundaries ensuring that your data is securely isolated to the specific community to which you belong. Your personal data, chat logs, or community feed actions are never pooled, sold, or leaked to unaffiliated platform users or outside communities.
We only share your information in the following structured instances:
- With Your Community Operators: Designated staff or managers belonging to your authorized community can view triggered engagement metrics or safety flags to supply supportive outreach.
- AI Processing & Safety Escalations: Chat inputs sent to Oliver are processed through secure LLM endpoints to screen for emergency safety risks. If an acute crisis pattern is flagged, the system will record a compliance log and escalate the incident to a human operator or supply immediate emergency resources and hotlines.
- Third-Party Infrastructure Providers: We use trusted infrastructure subprocessors to host our application framework, handle transaction-related emails, and securely store media uploads.
05Data Retention & Immutability
- Standard Account Data: Account details and community contributions remain active until your account or community status is closed or marked inactive by an administrator.
- Immutable Safety Logs: To satisfy administrative verification and platform safety compliance, all safety logs (crisis pattern events) and subsequent outreach actions are strictly immutable and cannot be modified or deleted.
06Security
We protect account credentials with robust cryptographic hashing algorithms and manage active platform sessions via secure tokens. While we employ rigid security layers to block cross-community visibility, please note that no digital application or data transmission over the Internet can be guaranteed as entirely impenetrable.
07Contact Us
If you have questions about our multi-tenant boundaries, privacy protocols, or platform features, please contact us: