Privacy Policy
Last Updated: October 2026
MNNT LTD (“MNNT,” “we,” “us,” or “our”) is committed to protecting the privacy of users interacting with our AI companions and health-integrated hardware. This Privacy Policy (“Policy”) explains how we collect, use, and safeguard personal information specifically for the services provided at YapWorld.net, our mobile applications, and white-labeled smart ring hardware.
1.The YapWorld Agentic Service
YapWorld provides a bio-integrated AI companion experience. We utilize Agentic Memory, allowing AI agents to “remember” interactions and physiological trends to evolve their personality and responses based on your unique history and wellness journey.
2.Age Restrictions & Global Children's Privacy
YapWorld is intended for users aged 13 and older. We do not knowingly collect personal information from children under the age of 13.
- Minimum Age: Users globally must be at least 13 years of age to create an account. If we learn that we have collected personal information from a child under 13, we will take steps to delete the information as soon as possible.
- Philippines (Minors Under 18): In compliance with the Philippines Data Privacy Act (RA 10173), any user under the age of 18 is classified as a minor.
- For users in the Philippines aged 13 to 17, we require parental or guardian involvement.
- Verification for these users is managed via a proprietary “Email Plus” double-opt-in process through our Parental Dashboard.
- Parental Control: Parents or guardians of verified minors (13-17 in PH) have the right to review, delete, or “Reset” their child’s AI memory at any time via the Parental Dashboard.
3.Information We Collect
A. Identification & Device Data
- Account Data: Email address, username, and linked social handles.
- Hardware Metadata: Smart ring device IDs, firmware versions, and pairing logs.
B. Biometric & Physiological Data (Smart Ring)
If you utilize a YapWorld-integrated smart ring, we collect:
- Activity & Sleep: Step counts, calorie expenditure, and sleep architecture (Light, Deep, REM).
- Vital Signs: Heart rate (HR), Heart Rate Variability (HRV), blood oxygen (SpO2), and blood pressure estimations.
- Stress Metrics: Physiological stress scores derived from HRV patterns.
C. Conversational & Agentic Memory Data
- Conversational Inputs: The full text of your interactions (“Yaps”) with AI agents.
- Extracted Memories: Managed via Mem0.ai, our system stores key facts (e.g., your goals, preferences, and recurring topics) to ensure continuity.
D. Google Account Data (Optional)
If you choose to connect your Google account, we access the Google data needed for the actions you ask your AI companion to perform. See Section 7 for exactly what we access and how it is protected.
4.Cookies and Tracking Technologies
We use essential cookies and similar tracking technologies (such as PostHog or Mixpanel) to maintain your session, remember your preferences, and analyze service performance. These tools help us understand user interaction patterns to improve the AI’s responsiveness. You can manage or disable cookies through your browser settings; however, certain features of YapWorld may not function correctly without them.
5.Legal Basis for Processing
We process your personal and biometric data based on the following legal frameworks:
- Consent: Your explicit opt-in provided during account creation and hardware pairing.
- Contractual Necessity: To provide the agentic AI services and physiological insights you have requested.
- Legitimate Interests: To ensure the safety and security of our platform, prevent fraud, and improve our AI models through anonymized analytics. Data received from Google APIs is never used for this purpose (see Section 7).
6.How We Process Your Data (The AI Chain)
Your data is processed through a secure chain of specialized providers:
- YapWorld (Andrometa): Primary account management and interface.
- Mem0 (Embedchain, Inc.): Long-term agent memory layer.
- LLM Providers: Advanced models for natural language generation.
Privacy Guardrail
We utilize Zero Data Retention (ZDR) and LLM Anonymization Protocols. The AI providers we use do not use your data to train their models. Physiological metrics are de-identified before processing to ensure individual users cannot be linked to biometric data by third-party AI models. When you ask your AI companion to act on a connected account (for example, look up a contact or edit a document), the content needed for that request is sent to the LLM provider to complete it.
7.Google User Data and Limited Use
Connecting a Google account is optional. You choose which permissions to grant on Google’s consent screen, and your AI companion uses them only when you ask it to do something.
What we access
- Google Calendar: view, create, update, and delete events you ask about.
- Google Tasks: view, create, update, and complete your tasks.
- Google Docs, Sheets, and Slides: create files and read or edit the specific files you ask about.
- Google Drive: only files created by YapWorld. We cannot browse or search the rest of your Drive.
- Google Forms: create forms, add questions, and read responses to forms you ask about.
- Gmail: send emails you ask us to send. We cannot read your inbox.
- Google Contacts: read-only lookup of a contact’s details when you ask.
- Google Meet: create meeting links.
How we use and share it
- We use Google user data only to provide the features you request in YapWorld. We do not use it for advertising, and we do not sell it.
- We share it only with the AI service providers needed to complete your request, such as the models that generate replies and the memory service that keeps facts from your conversations (Section 6). None of them use Google user data to train or improve their AI models.
- Our staff do not read your Google data unless you give explicit permission, it is required for security purposes or to comply with the law, or it has been aggregated and anonymized for internal operations.
Limited Use
YapWorld’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We do not use data obtained through Google Workspace APIs to develop, improve, or train generalized or non-personalized AI and/or machine learning models.
Storage, revocation, and deletion
- Your Google access tokens are stored in our database and used only to make the requests you ask for.
- You can revoke YapWorld’s access at any time at myaccount.google.com/permissions.
- Once access is revoked, we delete your stored Google tokens the next time they are used. You can also ask us to delete them by contacting us (Section 14). Content from your Google account that appears in your conversations or memories can be deleted as described in Section 10.
8.Data Security, Storage, and Retention
- Encryption: All sensitive personal and biometric data is stored in our Supabase Enterprise environment using field-level AES-256-GCM encryption.
- Siloed Architecture: User data is cryptographically siloed; we do not share identifiable biometric data with hardware manufacturers.
- Audit Standards: Our systems undergo regular independent audits, including SOC2 Type II and periodic vulnerability assessments.
- Retention Schedule: We retain your personal information only as long as your account is active. Personally Identifiable Information (PII) and associated biometric data are automatically purged from our systems after 24 months of account inactivity.
9.Health & Safety Disclaimers
- Not a Medical Device: YapWorld is for wellness and entertainment purposes only. Our AI agents are not licensed therapists or physicians.
- No Clinical Advice: Biometric data and AI insights should not be used for medical diagnosis or treatment.
- Crisis Intervention: YapWorld is not monitored for emergency intervention. If in crisis, contact local emergency services.
10.Your Rights: The "Right to Forget"
We provide users (and parents/guardians of minors) complete agency over AI memory:
- Memory Reset: Wipe an agent’s long-term memory at any time.
- Cascading Deletion: Deletion requests trigger a synchronized purge across Mem0, local databases, and active AI sessions.
- Philippines DPA Compliance: We honor the 72-hour breach notification and data erasure windows required by the National Privacy Commission (NPC).
11.Third-Party Links
Our platform may contain links to third-party websites or services that are not owned or controlled by MNNT LTD. We are not responsible for the privacy practices or the content of these third-party sites. We encourage you to review the privacy policies of any external services you visit.
12.International Data Transfers
MNNT LTD is headquartered in the Cayman Islands. Data processing primarily occurs in the United States and Japan. We utilize Standard Contractual Clauses (SCCs) to ensure your data receives protection equivalent to GDPR and APPI standards regardless of processing location.
13.Changes to This Policy
We may update our Privacy Policy from time to time to reflect changes in our practices or regulatory requirements. We will notify you of any significant changes by posting the new Policy on this page and updating the “Last Updated” date, or via an in-app notification or email sent to the address associated with your account.
14.Contact Us
Data Protection Officer (DPO): info@andrometa.gg
Subject: YapWorld Privacy Inquiry / NPC Compliance
