Privacy Policy

1. Who is the data controller

The publisher of the Yuna platform (hereinafter "Yuna", "we") is the controller of your personal data.

2. What Yuna is, and what it is not

Yuna is a financial analysis and information tool. Yuna does not provide personalised investment advice and holds no authorisation from the AMMC (Moroccan Capital Markets Authority). The content produced is provided for informational purposes, may contain errors, and does not replace your own decision. All investment carries a risk of capital loss.

3. What data we collect

• Account and identity: email address, name (if you log in via Google), login credentials, registration date.
• Investor profile (retail, self-declared and optional): level of financial expertise, investment universe, investment objective, management style, risk profile and risk tolerance, horizon, amount bracket (which you may leave blank). This information is used to adapt the level of detail and the pedagogy of Yuna's explanations, and to direct its opinions towards the investments and the profile you have declared. These opinions remain general information: they do not constitute personalised investment advice within the regulated meaning.
• Usage content: your questions and the assistant's responses, the files you upload in the chat, the positions of the portfolio you track (relevant offerings). These positions are saved on your account: this is necessary for the service to work, so that Yuna can analyse your portfolio and show it identically on all your devices. You can turn this backup off at any time in the app settings; your positions are then kept only on your device, and Yuna can no longer analyse or sync them.
• Subscription and billing: plan subscribed to, usage history, billing data.
• Payment: a secure token ("saved card") provided by our payment provider, the last 4 digits and the expiry date of your card. We never store your full card number.
• Technical data: IP address, logs, error information, audience measurement data.
• Connected AI agents (if you connect an agent such as Claude or ChatGPT to Yuna): the technical identifier of the authorized agent and, for each request it sends us on your behalf, the tool called, its parameters (for example a fund name or a period), the date, the duration, the status and the cost charged to your plan. We do not receive your conversation with the agent.
• Yuna's memory (as long as you keep it on): the lasting facts you share with Yuna in the chat and that she remembers from one conversation to the next, for example what you are preparing or your investment constraints. Each fact remembered is shown to you under the answer, and remains viewable and deletable in the settings. Yuna never remembers your identity or your contact details, and only remembers information relating to your health, your beliefs or your opinions if you expressly ask her to or agree to it.

4. Why we use it (purposes)

• Provide and operate the financial analysis service.
• Personalise the level and tone of responses according to your profile.
• Manage your account, your subscription and billing.
• Ensure security, prevent fraud and fix anomalies.
• Send you service-related emails (confirmation, sharing of a response, important information).
• Charge to your plan the requests made by the AI agents you connect, and prevent abusive use such as data scraping.
• Remembering, from one conversation to the next, what you have shared with Yuna, as long as the memory is on.

5. To whom your data is disclosed (processors)

To operate the service, we use technical providers who process data on our behalf, solely on our instructions and under a contract compliant with Law 09-08. These are the following categories of provider:

• hosting, cloud infrastructure, authentication and file storage;
• artificial intelligence model providers, who generate the analyses from your requests;
• sending of service emails and technical monitoring (error detection);
• payment providers (in Morocco and internationally, as well as the app stores for in-app purchases), for subscription management.

We may also disclose your data to legally authorised authorities where the law requires it. We do not sell your personal data.

AI models. Before transmitting your questions to an AI model, we remove direct identifiers (name, email address, account identifier), so that the models do not receive data identifying you directly. The files you upload (documents, images, statements) are transmitted to the model provider in their original form, as their content is required for the analysis you request. When you ask for a calculation on an uploaded file, that file is also copied into the conversation's isolated computing environment, which deletes it no later than twenty-four hours after your last calculation. We invite you not to disclose in the chat any sensitive information or information that could identify you.

Discovery plan. On the Discovery plan, the exchanges with the assistant, meaning your requests and the generated answers, may be used by the model provider to improve its own models. This is the consideration for the pricing that makes this plan accessible. Those exchanges are transmitted to it in the pseudonymised form described above: pseudonymisation limits what can be linked back to you, it does not prevent the content from being used. The Pro ×5 plan is served by a model whose pricing tier does not grant that right to the provider.

Connected AI agents. When you connect an agent from a third-party provider (Anthropic, OpenAI or another) to Yuna, you choose that provider: it is not our processor and handles your exchanges with it under its own privacy policy. We only send it the answers to the requests it makes on your behalf, that is, market data (funds, equities, rates, indicators, regulatory texts); your investor profile, your conversations with Yuna and your portfolio are not accessible through this channel. The agent connects through an authorization you grant on a Yuna page: your password is never shared with it. You can withdraw this access at any time by removing the Yuna connector in your agent's settings, or by writing to contact@yuna.ma.

6. Transfers outside Morocco

Some of our providers (hosting, AI model providers, email sending) are located outside Morocco. In accordance with articles 43 and 44 of Law 09-08, any transfer of data to a foreign country is carried out only to a country ensuring an adequate level of protection, or after completion of the formalities required with the CNDP, and where applicable on the basis of your consent collected at the time of your registration.

7. How long we keep it

We keep your data for periods proportionate to their purpose:

You may request the deletion of your data before these periods (see article 9), subject to legal retention obligations.

8. How we protect it

Encryption of communications (HTTPS), access control, partitioning of data by user, and storage of payment in token form without ever keeping the full card number.

9. Your rights

In accordance with Law 09-08, you have a right of access, rectification, objection and deletion of your data. You may exercise these rights directly from your personal area (where account deletion is available on a self-service basis) or by writing to contact@yuna.ma. You may also refer the matter to the CNDP (Commission Nationale de controle de la protection des Donnees a caractere Personnel, the Moroccan data protection authority, www.cndp.ma).

The detailed account deletion procedure, the data erased and the data we are required to keep are described on the dedicated page: Delete your account

10. Cookies

We use cookies strictly necessary for the operation of the service (login, security) and audience measurement cookies, which help us understand how the site is used and improve it. They are never used for advertising and are never sold. In the European Economic Area and the United Kingdom, audience measurement cookies are set only after you agree, through a dedicated mechanism. Elsewhere they are active by default and you can refuse them at any time, using the "Cookies" link at the bottom of every page or from your settings. Your refusal is kept and any identifiers already set are deleted.

We also set an installation identifier, a random value placed by the site and kept for 400 days: it is used only to check that the trial credit has been granted once per device. This value is hashed on our servers, identifies no one and is never used for advertising. It is a strictly necessary cookie, falling under fraud prevention.

11. Changes

We may update this policy. The applicable version is the one published on yuna.ma, dated at the top of the document.