Privacy Policy — YI Artificial Intelligence

1. Introduction

YI Artificial Intelligence ("Company", "we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect information across all our applications, including but not limited to EduStore, EduMart, School Mart, Digital ID Card, and other related software developed by us.

Our apps are designed to serve educational institutions, suppliers, and individuals for:

• ID card data management and generation
• Student/staff record maintenance
• Educational product listing, trade, and inventory management

Important: Currently, our published apps do not include in-app payment processing. Where users place orders or discuss payments, those communications and any resulting payments happen externally (for example via WhatsApp) between the buyer and seller. We may introduce in-app payment capabilities in future releases — and if/when we do, this Privacy Policy will be updated accordingly.

2. How to Delete Your Account and Data

This section is for users of the EduMart app who wish to permanently delete their account and all associated data.

Steps to Request Deletion:

1. Compose a new email from your registered email address.
2. Send it to: privacy@yiartificialintelligence.com
3. Use the subject line: "Account Deletion Request for EduMart App"
4. In the email body, please include:
   • Your Full Name
   • Your Institution/School Name
   • Your Registered Mobile Number (if applicable)

Once we verify your request, we will permanently delete your account and all related data (including profile, ID card details, and uploaded photos) from our systems within 7 working days.

Important Notes:

• If you are a School Administrator and wish to delete your institution's entire database, please clearly state this in your email. We may request additional verification in such cases.
• Certain records may need to be retained due to legal or institutional requirements.

Alternative Method:

Note for Customer Accounts (Purchase): If you have a customer account used for purchasing school supplies and the feature is enabled by your app administrator, you may delete it directly within the app via Settings > Profile Management.

Note for School Admin Accounts: Accounts used by school administrators for managing student/teacher data and placing ID card orders cannot be deleted directly from within the app. To request the deletion of a school admin account and its associated institutional data, please follow the email request process described above.

3. Data Management for School Administrators

This section applies specifically to school administrators and authorized staff using the EduMart app.

3.1 Authority and Responsibility

As a school administrator, you have the authority to upload, view, update, and manage the personal data (such as names, class details, and photographs) of students and teachers within your institution for the purpose of generating ID cards and managing related records. By uploading this data, you confirm that you have obtained all necessary consents and permissions from the individuals (or their parents/guardians in the case of minors) as required by applicable laws and your institutional policies.

3.2 Your Management Capabilities

Within the EduMart app's admin panel, you have the following ongoing rights over the data you upload:

• View: Access the complete list of student and teacher records you have created.
• Update: Edit and correct the information (e.g., name, class, roll number) or photograph associated with any individual's record.
• Delete: Permanently remove the record of any individual student or teacher, including all associated personal data and uploaded photographs, from the app's active database.

3.3 Purpose of These Features

These features are provided to ensure that your institutional records within the EduMart app remain accurate, up-to-date, and compliant with data protection principles. They enable you to fulfill requests from individuals to correct their data or exercise their "Right to Erasure" as per applicable laws.

3.4 Our Role and Your Obligations

• Our Role: We act as a "Data Processor" for the data you manage. We provide the secure platform and tools for you to process this data but do not control the data itself.
• Your Obligation: Your institution is the "Data Controller." You are solely responsible for the legality of the data you upload, the accuracy of the data, and ensuring that any deletion or update action is performed in accordance with your school's policies and relevant laws.

3.5 How to Manage Data in the App

To update or delete a specific record:

1. Log in to your school admin account.
2. Navigate to the "Students" or "Teachers" list from the main dashboard.
3. Select the specific individual's profile you wish to modify.
4. Tap the "Edit" button to update information, or the "Delete" button to remove the record permanently.
5. For delete actions, you will be shown a clear confirmation screen warning you that the action is irreversible before it is finalized.

4. Information We Collect

• Identity & Profile Data: Name, school/institution name, contact person, student/staff ID, class, section, roll number, guardian/parent name, address, phone number, and related details.
• Photographs: Images captured or uploaded for ID card creation, user profiles, or customized product printing. All image uploads are performed with user or administrator consent.
• Authentication Data: Username and password (securely hashed using industry standards such as bcrypt or Argon2).
• Institutional Data: School/college data, staff and student records, and other information uploaded by authorized administrators.
• Device & Technical Data: Device type, OS version, app version, IP address, crash logs, and usage statistics for diagnostics and analytics.
• Local Storage Data: Temporary cached data, offline records, and image files used for faster performance.

5. How We Use Your Data

• Generating ID cards and managing student/staff data.
• Facilitating educational product listings and supplier communication.
• Maintaining institutional records securely.
• Improving app performance and reliability.
• Providing analytics and troubleshooting support.
• Ensuring legal compliance and platform integrity.

6. Data Storage & Retention

All data is stored using encrypted secure servers and/or local device storage. Communications between the app and server are encrypted using HTTPS/TLS. Data (including ID card details and images) is retained for up to 2 years after last activity, unless deletion is requested earlier or required by law.

7. Data Security

• Passwords are hashed (never stored as plain text).
• Sensitive files and images are encrypted at rest.
• Access is restricted to authorized administrators only.
• Regular backups and system audits are performed.
• Data transfer uses HTTPS secure channels.

8. Password & Account Confidentiality

• Users must keep login credentials private.
• Passwords are encrypted and cannot be recovered in plain text.
• Shared device users are advised to log out after each session.
• Admins must ensure credentials are handled securely.

9. Data Sharing

We do not sell or publicly share personal data. Information may only be shared between verified institutions and suppliers where necessary for ID card printing, record management, product customization, or order processing. Data may also be disclosed to legal authorities if required by law.

10. Children’s Privacy

Some of our apps process student data, including minors’ information, only under the authority of educational institutions or with parental consent. Institutions are responsible for ensuring valid consent before uploading such data.

11. Your Rights

• Access and review your stored personal data.
• Request corrections or updates.
• Request deletion (subject to school or legal requirements).
• Withdraw consent or restrict processing.

Requests may be sent to the contact email provided below.

12. Cookies & Local Storage

Our apps use local storage and session tokens to improve login speed and performance. Clearing app data may temporarily disable offline features until you log in again.

13. Orders & Payments (External)

Orders placed through our apps are typically completed via external communication channels such as WhatsApp. Any payment discussions and transactions occur directly between the buyer and seller outside of the app. We do not process, handle, or store payment information within the app in the current published versions.

14. Permissions Used

• Camera: For capturing photos for ID cards or profile images.
• Storage: To temporarily store files, images, and offline data.
• Internet: For syncing and uploading data securely.
• Upload: For sending data and photos to encrypted servers.
• Retention & Deletion: Follows the same policy stated in Section 6.

15. Policy Updates

We may update this Privacy Policy periodically. Significant updates will be notified through our apps or official website. If we add in-app payment capabilities in the future, we will publish an updated Privacy Policy reflecting those changes. We encourage you to review this page regularly.

16. Contact Information

For privacy-related concerns, deletion requests, or more details, contact us at:

Email: privacy@yiartificialintelligence.com

17. Account Deletion

If you wish to delete your account and all associated data from the Digital ID Card app, you can request deletion by sending an email to privacy@yiartificialintelligence.com using your registered email address.

Once we receive your verified request, your account and all related information (including profile, ID details, and stored photos) will be permanently deleted from our systems within 7 working days, unless required by law or your institution to retain certain records.

You can also delete your account directly within the app if your administrator has enabled the delete option under settings or profile management.