Privacy Policy

All Yours Hub ("All Yours Hub", "we", "us", or "our") provides an AI-native private resource network that helps members of trusted circles discover, connect, and collaborate. This Privacy Policy explains what personal information we collect, how we use and protect it, who we share it with, and the rights and choices you have.

This Policy is designed to comply with the EU/UK General Data Protection Regulation (GDPR), the Personal Information Protection Law of the People's Republic of China (PIPL), and the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA). Region-specific rights are set out below; where laws differ, the protections of your jurisdiction apply to you.

By creating an account or using All Yours Hub you confirm that you have read and understood this Policy. Where the law requires consent, we ask for it separately and you may withdraw it at any time.

ALL YOURS HUB, INC. is the data controller (under GDPR) and the personal information handler (under PIPL) for the personal information described in this Policy.

• Service: All Yours Hub (allyoursai.com)
• Privacy contact: privacy@allyoursai.com

If you access All Yours Hub through an organization or circle you were invited to, that organization may also act as an independent or joint controller for information you share within it. Please also review that organization's own privacy notice where applicable.

We collect the following categories of personal information:

• Account & identity data: name, username, email address, phone number, hashed password, your searchable Twin ID, avatar, and the personal bio you provide.
• Profile & business-card data: headline, role, company, industry, location, capabilities, resources, needs, social/contact channels, and the content of your digital business cards.
• Network & relationship data: the circles and organizations you join, friend connections and requests, and introductions.
• Content you create: messages in member chats and AI-Twin conversations, posts in resource circles, AI memories, diary entries, reminders, habits, and calendar events.
• Files and materials you upload: documents, presentations, URLs, corporate information, and images (which may be processed with optical character recognition / OCR).
• Health & activity data you choose to add: metrics and workouts in the Health and Workout features (see "Sensitive Information").
• Technical & usage data: IP address, approximate location derived from your IP (used to choose your display language), device and browser type, and basic log data.
• Cookies: a session cookie that keeps you signed in and a preference cookie that remembers your chosen language.

We collect this information directly from you, automatically as you use the service, and where applicable from the organization or member who invited you.

Some features let you add information that may be treated as sensitive under PIPL, special-category data under GDPR, or sensitive personal information under CCPA/CPRA — for example account credentials, health and workout metrics, or details you place in memories, your bio, or contracts.

We process such information only where you have knowingly provided it for a feature you chose to use, and, where the law requires, on the basis of your separate consent. You can delete this information at any time, and you can choose not to use these features.

On the Google Play Android app, Health Connect is optional. After you choose to connect it, this build requests only steps, active calories burned, exercise sessions, sleep, and weight. We use the data to show your health records, trends, reports, and health guidance.

The selected data is transmitted over HTTPS to your All Yours Hub account. When Health generates an AI report or guidance, the relevant data may be securely processed by our contracted AI processors to provide that feature. We do not sell Health Connect data, use it for advertising, or use it for credit, insurance, employment, housing, or other high-impact decisions.

You can manage or revoke Health Connect permissions in Android's Health Connect settings, remove individual records in Health, withdraw Health-feature consent in Security, or submit an authenticated account-deletion request at /account-deletion. Revoking permission stops future reads; deleting records or an account is needed to remove data already stored by All Yours Hub, subject to lawful retention.

We use personal information to:

• Provide the service — create and secure your account, render your profile and business card, and operate circles, chat, calendar, reminders, and other features (GDPR basis: performance of a contract).
• Power AI features — structure your profile, match needs and offers, answer questions through AI Twins and circle hosts, auto-tag memories, summarize uploads, and draft content (GDPR basis: contract and our legitimate interest; separate consent where required).
• Personalize your experience — including detecting your approximate country from your IP address to display the website in a matching language (GDPR basis: legitimate interest; you can override the language at any time).
• Communicate with you — send verification codes, security notices, and service messages (GDPR basis: contract and legitimate interest).
• Keep All Yours Hub safe — prevent fraud, abuse, and unauthorized access, and enforce our terms (GDPR basis: legitimate interest and legal obligation).
• Comply with law — respond to lawful requests and meet our legal obligations (GDPR basis: legal obligation).

We do not make automated decisions producing legal or similarly significant effects without a lawful basis, and we do not sell your personal information.

All Yours Hub is AI-native. Content you submit to AI features (for example your profile text, uploaded files, chat questions, memories, and circle information) is processed by AI models to generate structured data, matches, summaries, and answers.

• AI responses are generated from the information available to the feature and may be imperfect; you remain in control and approve what becomes visible on your profile.
• AI features that answer about a person or a circle are grounded only in information that has been published or consented to for that purpose, and are instructed not to reveal hidden or contact details.
• AI processing is carried out by us and by the AI processors listed under "How We Share Information." We do not permit those processors to use your content to train their general models beyond what is necessary to provide the service.

We share personal information only as needed to run the service:

• With other members: information you choose to make visible (profile, business card, circle posts, friend connections) is shared within your circles and, where you allow it, with members who view your card or chat with your AI Twin, according to your visibility settings.
• With service providers (processors) acting on our instructions: AI processing (SiliconFlow, Anthropic); email delivery (Resend); SMS delivery (Alibaba Cloud); hosting and database (Vercel, Railway); and approximate, non-identifying weather (Open-Meteo).
• For legal reasons: to comply with law, enforce our terms, or protect rights, property, and safety.
• In a business transfer: as part of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under CCPA/CPRA.

All Yours Hub operates globally and our providers may process personal information in countries other than your own, including outside the EEA/UK and outside China.

Where we transfer personal information internationally we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK Addendum) for GDPR transfers, and we obtain the separate consent and carry out the assessments required for cross-border transfers under PIPL. Contact us for more information about these safeguards.

We keep personal information for as long as your account is active and as needed to provide the service. After you delete content or close your account, we delete or anonymize personal information within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

One-time verification codes are short-lived and expire automatically. Session records expire after a period of inactivity.

If you are in the EEA or UK, you have the right to: access your personal data; rectify inaccurate data; erase data ("right to be forgotten"); restrict or object to processing; data portability; and withdraw consent at any time without affecting prior processing.

You also have the right to lodge a complaint with your local supervisory authority. To exercise your rights, contact privacy@allyoursai.com. We will respond within the time limits set by law.

If you are in mainland China, you have the right to know about and decide on the processing of your personal information; to access and copy it; to correct or supplement it; to delete it; to withdraw consent; to request an explanation of our processing rules; and to have a deceased relative's relevant information handled by close relatives as provided by law.

We process your personal information based on your consent or another lawful basis under the PIPL, ask for separate consent where required (including for sensitive personal information and cross-border transfers), and will not refuse to provide core services merely because you decline non-essential processing. To exercise your rights, contact privacy@allyoursai.com.

If you are a California resident, you have the right to know the categories and specific pieces of personal information we collect, the sources, purposes, and recipients; to delete your personal information; to correct inaccurate information; to opt out of the sale or sharing of personal information; to limit the use of sensitive personal information; and not to be discriminated against for exercising your rights.

We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information for purposes that require a "Limit the Use" option. To exercise your rights, contact privacy@allyoursai.com. You may use an authorized agent, and we will verify requests as required by law.

We use a small number of strictly necessary cookies: a session cookie to keep you signed in and a preference cookie to remember your chosen language. We do not use advertising or cross-site tracking cookies. Because these cookies are essential or preference-based, you can control them through your browser, but disabling the session cookie will prevent you from signing in.

We protect personal information with technical and organizational measures, including encryption in transit, hashed passwords, access controls, and least-privilege data access. No method of transmission or storage is completely secure; if we become aware of a breach affecting your personal information we will notify you and the relevant authorities as required by law.

All Yours Hub is not directed to children. We do not knowingly collect personal information from children under the age required by your local law (for example under 16 in many jurisdictions, or under 14 in mainland China without parental consent). If you believe a child has provided us personal information, contact us and we will delete it.

We may update this Policy from time to time. When we make material changes we will update the effective date and, where appropriate, notify you in the app. Your continued use of All Yours Hub after an update means you accept the revised Policy, except where your fresh consent is required by law.

For any privacy question or to exercise your rights, contact our privacy team at privacy@allyoursai.com. If you are in the EEA/UK you may also contact your local data protection authority; if you are in California you may contact the California Privacy Protection Agency.