Privacy Policy

1. Identity of the data controller

The controller responsible for the processing of personal data is:

Company name: Yeshcube Tech, S. L.

Trade name: yeshcube

Tax ID (CIF): B21900543

Registered office: C. de la Travesía, SN, Poblados Marítimos, 46024 Valencia, Spain

General contact email: hello@yeshcube.com

Legal and privacy email: legal@yeshcube.com

Corporate website: https://yeshcube.com

Service domain: https://bloom.somia.io

Somia™ and its logo are registered trademarks owned by Yeshcube Tech, S. L., and are legally protected, as are all the contents of this website and our applications.

In this policy, we refer to Yeshcube Tech, S. L. as "Yeshcube", "Somia" or "we", and to the user as "you".

2. What Somia is and scope of this policy

Somia is an emotional wellbeing ecosystem that integrates:

• mobile web applications and native applications
• consumer devices and systems embedded in third party products
• pre recorded sensory experiences
• interactive experiences guided by conversational artificial intelligence
• certified integrations under the Somia Within label in third party hardware and software

Examples of how Somia is used include, among others, mobile apps for emotional wellbeing, home devices, systems installed in emotional recovery cabins, or integrations in corporate, educational or public spaces.

It is very important to bear in mind that:

Somia is not a professional mental health service.

Somia does not provide medical or psychological diagnosis.

Somia does not in any case replace psychological, psychiatric or other healthcare treatment.

Somia must not be used in emergency situations or life threatening crises. In such cases, you must contact the emergency services in your country (for example 112 in Europe) or specialized helplines.

This policy applies to the use of:

• the applications and digital services of the Somia ecosystem
• the devices and services available at https://bloom.somia.io
• our own devices and third party devices certified as Somia Within
• any other emotional wellbeing service operated by Yeshcube Tech, S. L.

3. Regulatory framework and privacy principles

We process your personal data in accordance with, among others, the following laws, where applicable:

Regulation (EU) 2016/679, General Data Protection Regulation (GDPR)

Spanish Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights (LOPDGDD)

United States data protection law, including the CCPA and CPRA for California residents, which recognize specific rights over personal information and require organizations to inform what data is collected, for what purposes and how to exercise those rights

Privacy laws in other countries and regions, such as the Personal Information Protection Law (PIPL) in China and related rules on cross border transfers of personal data, which require mechanisms such as standard contracts, certification or security assessments in order to export data

In addition, Somia is guided by its own ethical framework for emotional AI and by the principles of the yeshcube Care methodology, which include human centric design, digital non maleficence, fairness of access and transparency.

We apply, among others, the following processing principles:

• lawfulness, fairness and transparency
• purpose limitation
• data minimization
• accuracy and keeping data up to date
• storage limitation
• integrity, confidentiality and security
• accountability and privacy by design and by default

4. Personal data we process

The data we process depends on how you interact with Somia and with our applications and devices.

4.1 Registration, configuration and profile data

When you register or activate a Somia app or device, we may ask you for:

Access credentials:

• email address
• password, which is stored in encrypted form and never in plain text

Initial consents and notices:

Before you start using the service, we ask you to confirm, by means of checkboxes, that:

• you understand that you are communicating with an artificial intelligence system and not with a human being
• you understand that Somia does not replace professional mental health care
• you will not use Somia in situations of crisis or danger and that in such cases you must contact emergency services
• you have read and accept the Privacy Policy and the Terms of Use

Memory and context configuration:

• whether or not you activate the Somia memory system
• which memory categories may be used to personalize your experience (up to 18 blocks covering preferences, wellbeing, goals, environment, and similar aspects)
• optional activation of calendar events for reminders and context

Profile data:

• name
• company or organization
• job title or role
• sector of activity
• main language used to talk to Somia
• gender identity and preferred pronouns, with the option not to provide this information
• optional personal context text you may choose to share to personalize your experience

Device linking:

• linking codes or identifiers of devices and products certified as Somia Within
• basic information about the device or environment in which Somia will be installed (for example, type of space or usage area)

Subscriptions and billing:

• selected subscription plan and start dates
• data necessary for billing and payment processing where applicable, usually managed through external payment providers acting as data processors

4.2 Data generated during the use of Somia apps and devices

As you use Somia, data is generated or updated, such as:

Usage data and subscription limits:

• internal user identifier
• active subscription plan and renewals
• number of sessions started with Somia
• minutes spent in conversations and dates when counters are reset
• indicators of whether you have completed certain experiences or initial journeys we recommend
• information about whether you have memory, cloud backup or local storage enabled

Bookings and use of shared spaces or devices:

When Somia is available in shared spaces, cabins or other shared devices, we may log:

• identifier of the device or space
• start and end time of each session
• status of the booking or session (active, completed, cancelled)
• reason for cancellation, where applicable
• history of sessions linked to your account

Conversation content and memories:

• textual content of your conversations with Somia
• very brief memories summarized by the AI from those conversations (for example preferences, sources of stress or wellbeing, personal goals, key relationships, habits, etc.)
• calendar events linked to your personal or professional life that you decide to record, such as meetings, appointments, deadlines or anniversaries

These memories are structured into thematic blocks and are designed to be concise, reviewable and easy to delete or deactivate.

Security and crisis records:

• internal indicators that the system has detected possible signs of a serious crisis in a conversation
• minimal records related to that detection so that we can audit and improve system behavior
• information on whether the alert has been handled or reviewed by internal safety mechanisms

This crisis detection system is an additional safeguard. It does not guarantee that all risk situations will be detected and it does not in any case replace professional care or the intervention of emergency services.

4.3 Technical and device data

We may process technical data such as:

IP address and device identifiers

• device type, operating system, version and browser type
• system language
• information about errors and performance
• technical and authentication cookies
• audio settings and microphone permissions needed for voice conversations with Somia

On some devices certified as Somia Within, technical data about sensors, speakers or other components is also processed, always limited to what is necessary for the system to function.

4.4 Data related to emotional wellbeing

When you use Somia, you may share highly sensitive information about:

• your emotional state
• levels of stress, anxiety or exhaustion
• sleep, rest and self care habits
• personal and professional relationships
• difficult contexts or major events in your life

Although Somia is not a medical service, some of this information may fall under the category of "health data" or other special categories defined by law.

We process this type of data with a reinforced level of protection, based on your explicit consent and in line with the ethical principles of the Somia project, such as digital non maleficence, scientific integrity and protection of privacy.

5. Purposes of processing and legal bases

The legal bases for processing correspond to those set out in Article 6 of the GDPR and equivalent regulations, depending on your specific relationship with us.

5.1 Provision of the Somia service

Purposes:

• managing your registration, authentication and access to Somia apps and devices
• enabling the use of sensory and interactive experiences and the operation of compatible devices
• managing your subscription, usage limits, minute counters and blocks when you reach your plan limits
• providing you with technical and user support

Legal basis:

• performance of a contract in which you are a party

Yeshcube's legitimate interest in ensuring the proper functioning, security and quality of the service, always balanced against your rights

5.2 Personalization and memory system

Purposes:

• remembering, in a controlled and configurable way, relevant aspects about your preferences, energy rhythms, self care habits, goals and environment
• tailoring the recommendations, conversations and wellbeing experiences that Somia offers you
• helping you track your own progress over time

Legal basis:

• your explicit consent to activate memory and for each category you allow
• our legitimate interest in improving the relevance of experiences, limited by your full control over memory, the option to deactivate it and your ability to delete memories at any time

Somia's philosophy states that personalization must never result in invasion of privacy or loss of user autonomy.

5.3 Research, improvement and statistics

Purposes:

• analysing, in aggregate form and where possible anonymized, the use of our apps, devices and integrations
• improving the accuracy of algorithmic empathy and the effectiveness of wellbeing interventions
• developing new experiences, features and products within the Somia ecosystem

Legal basis:

Yeshcube's legitimate interest in improving the service and expanding Somia's social impact

• your explicit consent where analysis involves particularly sensitive data that cannot be sufficiently de personalized

5.4 Security, abuse prevention and crisis detection

Purposes:

• detecting patterns that may indicate abusive or fraudulent use of our apps or services
• activating protection mechanisms when there are possible signs of a serious crisis in a conversation
• logging those cases in a limited way to audit them and improve system safety

Legal basis:

Yeshcube's legitimate interest in protecting the Somia ecosystem and its users

• in exceptional situations, protection of vital interests of the user or third parties, to the extent permitted by law

5.5 Compliance with legal obligations

Purposes:

• complying with accounting, tax, corporate, security and data protection obligations that apply to us
• responding to requests from administrative or judicial authorities
• exercising or defending legal claims related to the service

Legal basis:

• compliance with legal obligations

Yeshcube's legitimate interest in defending its rights and interests

5.6 Service related communications and marketing communications

Purposes:

• sending you strictly service related communications, such as notices of important changes, updates, security incidents or subscription expiries
• sending you informational or commercial communications about Somia and yeshcube updates, where you have authorized this or where applicable law allows it

Legal basis:

• performance of the contract and our legitimate interest for communications necessary to provide the service
• your consent where communications are marketing communications that are not covered by a previous contractual relationship

You can unsubscribe from marketing communications at any time by following the instructions included in each message or by writing to legal@yeshcube.com.

6. Memory system, local storage and cloud backup

Somia uses a local first architecture to strengthen your privacy:

• memories and much of the contextual data are stored first on your own device using technologies such as IndexedDB or other local storage mechanisms
• by default, no cloud backup of all memories is made unless you explicitly activate it
• you can enable or disable memory completely, turn specific categories on or off, and delete individual memories at any time
• you can enable or disable cloud backup, which serves as a safeguard so you do not lose your memories if you change device

When you activate cloud backup, data is stored on servers managed by our infrastructure providers, with row level access controls so that only you and our authorized backend can operate on your data.

7. Providers and technology partners

To provide the Somia service, we work with various providers and technology partners who act as data processors, or in certain specific cases as joint controllers, as defined by the GDPR.

7.1 Infrastructure and database provider

We use cloud infrastructure platforms, such as Supabase or equivalent providers, in order to:

• host and manage our database
• provide user authentication services
• run serverless functions necessary for system operation
• store backups and certain content generated by the app

These providers apply security measures, encryption and access controls and offer contractual mechanisms that allow us to comply with the GDPR and other privacy laws, including data processing agreements and options for regional data residency.

They act as data processors, following our instructions.

7.2 Conversational voice AI

For Somia's voice layer we use technology from a provider specialized in AI driven voice, such as ElevenLabs, which allows us to offer natural and immersive audio conversations.

When you have a voice conversation with Somia:

• a limited set of context variables related to your profile and session is sent to the voice partner
• your audio is streamed and processed in real time
• conversation transcripts are generated and returned to our infrastructure so that we can analyze them and extract memories

According to the provider's documentation, enterprise clients have privacy and retention controls allowing them to configure how long transcripts are stored and whether audio recordings are kept, with options to reduce retention, disable audio storage and configure data retention in a way that is compatible with data protection laws.

Our voice partner may use certain data to improve their audio models, subject to specific limits for enterprise clients and without creating advertising profiles or cloning your voice without consent, in line with their own privacy policy.

In our relationship with this provider:

• we limit the amount of personal data sent to what is strictly necessary to provide the service
• we configure retention and audio storage in line with Somia's principles, seeking to minimize retention periods
• we require contractual guarantees regarding confidentiality, security and regulatory compliance

With respect to the data we process through its API, this partner acts as a data processor, under our instructions.

In this policy we refer to ElevenLabs and other voice providers simply as "our voice partner" or "our voice technology partners".

7.3 Other AI models and technology partners

For some advanced features, such as analysing text transcripts and generating ultra concise memories, we may use large language models provided by our AI technology partners.

In those cases:

• fragments of text and, where necessary, limited context are sent so as to avoid duplicates and classify information correctly
• the model generates structured outputs that we use to propose memories and events
• we only store in our database those memories and events that meet clear criteria of relevance, reliability and respect for your memory configuration

Many general purpose AI services allow enterprise customers to configure whether and how their data is used to train models, through specific controls in their privacy dashboards.

In designing Somia, our intention is to:

• minimize, as far as possible, the personal data shared with these models
• consider enterprise options that provide additional guarantees on non use of data for training without a clear agreement
• periodically review the suitability of these technology partners and adjust our architecture in light of regulatory developments and best industry practices

7.4 Other recipients

We may share data with:

• payment and billing service providers
• messaging and user support services
• external consultants, auditors and legal advisers, with limited access where strictly necessary
• business partners and operators of spaces integrating Somia Within, to manage licenses, bookings and device usage, always preferring aggregated or pseudonymized data wherever possible

We may also disclose data to administrative or judicial authorities where there is a legal obligation to do so.

8. International data transfers

Our providers and technology partners may operate global infrastructures, which means that in certain cases your data may be transferred outside the European Economic Area or the country where you reside.

When international transfers of personal data take place:

• we use the transfer mechanisms provided for in the GDPR and equivalent regulations, such as adequacy decisions, standard contractual clauses, certifications or security assessments
• we adopt additional technical and organizational measures, such as encryption, pseudonymization and limitation of the data transferred, where the context requires this
• we periodically review regulatory developments, for example regarding transfers from the European Union to other countries, or from China under the PIPL framework and its data export rules

You may request more information about international transfers that affect your data by writing to legal@yeshcube.com.

9. Data retention periods

We retain your personal data only for as long as strictly necessary to fulfil the purposes described in this policy, and thereafter for the statutory limitation periods or additional periods that are justified for archiving, security or compliance purposes.

In general:

Account and profile data is kept for as long as your account remains active.

Subscription and billing data is kept for the periods required under tax and accounting law.

Memories and events are kept for as long as you have memory activated or until you delete them. If you delete your account, copies stored in our database are removed and you can delete local data from your device.

Session logs and shared device usage records may be stored for an additional period, in pseudonymized or anonymized form, for statistical, service improvement or security purposes.

Crisis records are kept for as long as needed to audit and improve safeguards, unless there is a legal obligation to retain them for longer.

When data is no longer needed, we delete it or irreversibly anonymize it.

10. User rights

As a Somia user, you have the following rights, under the terms laid down by applicable law:

Right of access: the right to know what personal data we process about you.

Right to rectification: the right to request correction of inaccurate or incomplete data.

Right to erasure: the right to request deletion of your data when, among other reasons, it is no longer necessary for the purposes for which it was collected.

Right to restriction of processing: the right to ask us to limit the processing of your data in certain circumstances.

Right to object: the right to object to processing based on our legitimate interests, including profiling, unless we have compelling legitimate grounds to continue.

Right to data portability: the right to receive your data in a structured, commonly used and machine readable format and to transmit it to another controller, where processing is based on consent or a contract and is carried out by automated means.

Right to withdraw consent: at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

If you live in California or another jurisdiction with specific privacy laws, you may also have additional rights, such as the right to know what personal information is collected, the right to request its deletion or the right to opt out of certain communications, in terms similar to those provided by the CCPA and CPRA.

To exercise your rights, you can contact us at:

Email: legal@yeshcube.com

Recommended subject line: "Exercise of data protection rights"

If you reside in the European Union, you may also lodge a complaint with the relevant supervisory authority. In Spain, the competent authority is the Spanish Data Protection Agency (AEPD).

11. Automated decisions, profiling and crisis detection

Somia uses artificial intelligence techniques and automated algorithms to:

• adapt conversation content to your emotional state and context
• recommend experiences or exercises that may help you at a given time
• summarize memories and events from your conversations
• detect indicators of possible serious crises and trigger protection mechanisms

These operations are forms of profiling, but they do not involve automated decisions producing legal effects concerning you or similarly significantly affecting you within the meaning of Article 22 of the GDPR.

If you consider that any decision based on this type of processing significantly affects you, you can contact us to request human review, express your point of view or object.

The crisis detection system is complementary and not infallible. It does not replace your responsibility to contact emergency services or health professionals in risk situations.

12. Cookies, local storage and similar technologies

Within Somia we mainly use:

Technical and authentication cookies needed to maintain your session, apply your basic preferences and ensure service security.

Local storage on your device, such as localStorage or IndexedDB, to store memories, events and settings in encrypted or otherwise protected form in your browser or app.

Other equivalent technologies in native devices to keep your preferences locally.

We currently do not use third party analytics or advertising systems embedded in the core Somia apps. If in future we implement audience measurement or marketing tools, we will provide appropriate notice and consent and opt out mechanisms.

You can configure your browser to block or delete cookies. Please note that doing so may affect the basic functioning of the service.

13. Data security

Yeshcube implements appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration and destruction, taking into account the state of the art, the costs of implementation, the nature of the data and the risks involved.

Among other measures, we use:

• encryption of communications via HTTPS
• secure storage of passwords and session tokens
• strict access controls in our databases, with row level security so that each user can only access their own data
• secure management of keys, secrets and provider access credentials
• auditing and logging of access to critical functions
• periodic review of retention and audio configurations with our voice partners and AI providers

Despite these measures, no system is completely invulnerable. If we detect a security breach that may significantly affect your rights, we will notify the competent authority and, where appropriate, the affected individuals, within the deadlines established by law.

14. Minors

Somia's services are aimed primarily at individuals aged 16 or over, or at the minimum age required by the law of your country to provide valid consent without parental or guardian intervention.

We do not knowingly collect personal data from minors who have not obtained the necessary consent. If we detect that we are processing data from a minor without the required safeguards, we will take reasonable steps to delete such data as quickly as possible.

15. Changes to this privacy policy

We may amend this Privacy Policy to adapt it to:

• legislative or regulatory changes
• guidance from supervisory authorities
• updates to our services, products or technology partners
• improvements in data protection and privacy safeguards

In case of significant changes, we will notify you through visible notices in our apps or websites and will indicate the new effective date. Where required by law, we will seek your renewed consent for certain processing activities.

We encourage you to review this policy periodically.

16. Somia Bloom pilot at the Universitat de València Science Park

This section applies to the Somia Bloom pilot run at the Universitat de València Science Park (https://pcuv.somia.io). Where it differs from the previous sections, it prevails for the pilot.

16.1 Data we process in the pilot

• account: email address and password, stored as a hash and never in plain text
• pilot confirmations and consents, with their date and version
• declared profile, if you allow us to remember it: name or alias, what you work on, sector and what takes up most of your day
• visit check-in, if you check in from the confirmation email: the profile you enter, whether you want it remembered, the experience you choose and the date you accept the agreement; your answers about how you feel are always given in the cabin
• brief answers about how you feel before and after each experience
• the WHO-5 questionnaire by email, if you choose to answer it: five answers about your well-being over the last two weeks, at two moments of the pilot (section 16.10)
• your rating of the experience at the end, if you choose to give it: usefulness, satisfaction, comfort, privacy, intention to repeat, difficulties and, if you write one, a free comment
• session data: chosen experience, start, end and whether the practice was completed or stopped

Somia's memory, if you allow it: short notes Somia writes at the end of each conversation and the ones you add or correct

• visit bookings: date, time, language and status; if you book without signing in using your account email, the appointment is added to your account

Your voice is processed in real time to hold the conversation and is not recorded.

• live follow-up of the experience: the screen you are on, timings, interruptions and the technical state of the cabin, and the transcript of the conversation while it lasts (section 16.9)

16.2 Somia's memory in the pilot

Memory only works if you tick “Remember these details”, and you can switch it off at any time in “My area”. Somia keeps three kinds of notes: what describes your work and how you organize yourself, topics left open and a short summary of your latest conversations, five at most. The notes are stored on our server, not on your device.

In “My area” you can see what Somia remembers, correct it, delete it, add your own notes, mark a topic as resolved, switch memory off or forget everything. Anything you delete leaves an encrypted, irreversible fingerprint whose only use is to stop Somia from saving it again. You can also ask Somia during the conversation (“forget that”).

Somia does not keep health data, diagnoses, medication, contact details or details about other people. What you state carries more weight than Somia's notes, and what you say in the conversation carries more weight than any earlier note.

16.3 Answers about how you are arriving

The answers you give at the start of the visit about how you feel, how calm you are and your energy are passed to Somia as one sentence to adapt that same session. They are not added to its memory. Together with the other questionnaires and session data, they are used to evaluate the pilot; evaluation reports contain only aggregated, anonymized results.

At the end you can rate the experience or press “I'd rather not rate it”. The free comment is stored with no link to your account, your answers or your session: only with the day, the experience and the language, and without any contact details or links it contains. The team reviews it before using it and only quotes in the pilot report, without attributing them to anyone, comments that do not allow anyone to be identified.

16.4 Legal bases in the pilot

• taking part in the pilot and the account: performance of the relationship you accept when you register
• processing of your voice and of the wellbeing data you share: your explicit consent
• pilot evaluation: your consent
• remembered profile and memory between visits: your consent, which you can withdraw by switching memory off
• account and booking emails: performance of the relationship and of the service you request
• the WHO-5 questionnaire by email: your explicit consent, which you give when you answer and can withdraw
• live follow-up of the experience by the team: legitimate interest in looking after its safety and proper running
• the pilot mailing list: legitimate interest in keeping those who take part informed about the pilot and about Somia Bloom, which you can object to at any time
• news about Somia and Somia Bloom by email: your consent, which you give by ticking the box when you register or book and can withdraw at any time

16.5 Providers in the pilot

• web hosting and database: SiteGround
• voice and conversational artificial intelligence: ElevenLabs, configured without voice recording and with transcripts kept for 30 days
• account and booking emails: Resend
• the pilot mailing list: yeshmail, yeshcube's email platform, hosted on Railway and sending through Resend

Some of these providers may process data outside the European Economic Area, with the safeguards described in section 8.

16.6 Retention, export and deletion in the pilot

The account, the remembered profile and the memory are kept while the account exists or until you delete them. Closed or replaced notes are deleted after 90 days. The check-in of a visit is kept until the day after the appointment and is deleted earlier if the appointment is cancelled, if you use “Forget my data” or if you delete your account; in the cabin, the check-in profile becomes part of the data of that visit.

In “My area” you can download your data in a structured file (JSON) and delete your account. Deleting it erases the account, the remembered profile and the memory, cancels your pending bookings and removes your name and your work from the study records. Questionnaire answers and session data are kept for the pilot evaluation, unlinked from your account, unless you request their erasure at legal@yeshcube.com.

Cancelling an appointment or deleting your account does not unsubscribe you from the pilot mailing list (section 16.11): every email includes an unsubscribe link for that. If you request the erasure of your data at legal@yeshcube.com, we also remove you from that list.

16.7 Guest access

Guest access does not create an account. The context you give is used only during that visit and is not retrieved in another visit.

16.8 Account management by the pilot team

To deal with incidents and requests, the pilot team can:

• correct the sign-in email or the notice language; in that case we notify both the previous and the new address
• send you a link to create a new password; the team never sees or chooses your password
• close your open sessions or suspend the account in case of misuse, and reactivate it later
• delete your memory and your remembered profile, or delete the account, when you ask

The team sees your email, the dates of your sign-ins, your appointments, the experiences you have done and your consents. It does not see your profile, what Somia remembers or your questionnaire answers, the WHO-5 included. It only sees your conversations while they happen, as explained in section 16.9. Every action of the team is recorded without your email or your name.

16.9 Live follow-up of the experience

While you do an experience in the cabin, a member of the pilot team may follow its progress live to help with any technical or wellbeing issue: the screen you are on, the time elapsed and remaining, interruptions (for example, a dropped connection or you stopping the experience), the technical state of the cabin (network, battery, version) and the transcript of the conversation with Somia. The cabin says so before you start.

The follow-up does not show your email, your name, your profile, your answers or what Somia remembers. The transcript is deleted from our server 15 minutes after the conversation ends, and at the latest two hours after it starts; it is not added to Somia's memory, to the download of your data or to the evaluation of the pilot. Every time a member of the team reads a transcript, it is recorded. The rest of the follow-up data, with no text of the conversation, is kept for 30 days. Legal basis: the legitimate interest in looking after the safety and proper running of the experience.

16.10 WHO-5 questionnaire by email

If you have an account, we will email you the World Health Organization's WHO-5 Well-Being Index at two moments: the morning after your first completed experience and the morning after the third, never earlier than two weeks after the first email. If you have not answered the first one, the email we send you five days after your first experience reminds you of it. Each link expires after seven days. In between we write to invite you to book your next experience: the morning after the second and, if you have not come back and have no appointment, five days after the first and after the second. You only receive these emails while you keep your wellbeing and evaluation consents, and you can ask us to stop sending them by replying to any of them.

Answering is voluntary and is not part of any healthcare: it is not a diagnosis and nobody will contact you because of your answers. Before sending them you tick a consent box. If you press “I don't want to answer”, we will not send you the questionnaire again.

Your answers are stored without your email and used only to evaluate the pilot, in grouped results. The answers from the two moments are linked by a random key so that they can be compared. If you delete your account, your answers are unlinked from it and kept for the evaluation, unless you ask for their erasure at legal@yeshcube.com.

16.11 Pilot mailing list

When you create an account or make a booking, we add your email to the Somia Bloom pilot mailing list in yeshmail, yeshcube's email platform, with your first name and surname (if you gave them in a booking), your language and whether you came through an account, a booking or both. We use it to keep you informed about the progress and results of the pilot and about the continuation of Somia Bloom. It does not receive your profile, what Somia remembers, your questionnaire answers or anything from your conversations.

Legal basis: legitimate interest in keeping the people who take part in the pilot informed. It is not consent to receive advertising and it is not a condition for taking part.

The registration and booking forms include an unticked box to also receive news about Somia and Somia Bloom by email. It is optional: if you tick it, we record the date and note it on your yeshmail contact; if you do not, you will not receive that news. You can withdraw this consent at any time with the unsubscribe link in every email or by writing to legal@yeshcube.com, without affecting what was sent before.

You can unsubscribe with the link included in every email or by writing to legal@yeshcube.com. We keep your data on the list until you unsubscribe or request its erasure; if you unsubscribe, we keep only your email marked as unsubscribed so that we do not write to you again.

17. Contact

For any questions related to this Privacy Policy or to the processing of your personal data, you can contact:

Yeshcube Tech, S. L.

C. de la Travesía, SN

Poblados Marítimos

46024 Valencia, Spain

General email: hello@yeshcube.com

Privacy email: legal@yeshcube.com