Privacy Policy

When you register and use the Service we process the following data:

• Email address and name — to create your account and sign you in.
• Date of birth (optional) — used only to compute the “brain age” metric.
• Interface language, interest topics and difficulty level — to personalize content.
• Exercise results: mini-games, quizzes and the memory test, plus activity streaks — for the progress page and statistics.
• Telegram identifier (optional, if you link it) — for payment and subscription-expiry notifications.
• Technical data: server request logs (IP address, time, request path) — to keep the Service reliable and secure.

We do not collect geolocation, contacts or photos, and we do not use third-party advertising trackers.

• Providing Service features: daily articles, quizzes, the memory test, mini-games, progress statistics.
• Personalizing generated content to your interests and level.
• Computing aggregated metrics (streaks, “brain age”).
• Running the Observer feature: showing your progress to people you have invited yourself.
• Sending transactional emails: email-verification and password-reset codes.
• User support and abuse prevention.

YesEs is a cognitive-activity trainer intended for entertainment and general wellness. The Service, including the “brain age” metric, is not a medical device, does not diagnose, does not replace consultation with a physician, and is not intended to diagnose, treat or prevent any disease.

A user may voluntarily invite another person (for example, a family member) to follow their progress. The observer sees aggregated statistics: daily activity, game and memory-test results, and the streak. The “brain age” metric is visible to observers only if the user explicitly enables that setting. The link can be removed at any time by either side.

We do not sell personal data. Data is shared only with technical vendors, to the extent needed to run the Service:

• OpenAI (content generation): receives your interest topics and language. Your email, name and exercise results are not included in AI requests.
• Resend (email delivery): receives your email address to deliver verification codes.
• Telegram (at your choice): your identifier, for payment and subscription notifications.
• Hosting provider: data is stored on a rented server.

Data may be disclosed upon a lawful request from competent state authorities.

Passwords are stored only as an irreversible hash (bcrypt). Connections to the Service are protected with TLS (HTTPS). Database access is restricted. Data is kept until you delete your account or the Service is discontinued.

You have the right to access your data, correct it, or delete your account.

• Name, interests and settings can be changed in “Profile → Edit”.
• You can delete your account yourself: “Profile → Edit → Delete account”. Deletion is irreversible and erases all data: profile, progress, game and test history, observer links and notifications.
• For any data-related questions, contact us at the email in the “Contact” section.

The Service uses the browser’s localStorage for sign-in tokens and interface preferences (for example, marking game instructions as seen). No third-party advertising analytics is used.

A profile for a child may be created by an adult (a parent or legal guardian) and used under their supervision. By registering a child’s profile, the adult consents to the processing of the child’s data as described in this Policy.

We may update this Policy. The current version is always available at yeses.kz/privacy with its effective date. Continued use of the Service after changes means acceptance of the updated version.

Service operator: YesEs, Kazakhstan. For any privacy or data questions: zholdas.alnur@gmail.com.