Privacy Policy — Yuwi Agent

Last updated: 22 August 2026

This policy covers Yuwi Agent (wtf.yuwi.agent), which can operate your phone on your behalf.

Everything in the Yuwi assistant policy applies here too. Section 3 below is the part that is different, and it is the part worth reading. If you do not want an app that can see and control your screen, use Yuwi (wtf.yuwi.assistant) instead — it is the same assistant with that ability absent from the app entirely, not merely switched off.


1. Who we are

Yuwi Agent is operated by Shubh Ketan Agarwal Family Office LLP ("we", "us").

Contact: yuwi.developer@gmail.com

2. What Yuwi Agent does

Everything Yuwi does — answering questions about your Gmail, Calendar, Drive and Contacts, remembering things, reminders, scheduled tasks — plus operating other apps on your phone to complete goals you give it ("book a cab home", "order the groceries").

3. Accessibility Service — prominent disclosure

Yuwi Agent uses the Android AccessibilityService API.

Why. It is the only way an app can read what is on screen and tap on your behalf. Without it the agent cannot do the one thing it exists to do.

What it collects. While a session is running, and only then, the app captures:

When. Only while a session you started is running. The agent does not run in the background, does not observe you between sessions, and can be stopped at any time from the app or its persistent notification.

Where it goes, and this is the important part. Screen content is sent to Google's Gemini API to decide the next action, and it is also stored by us — screenshots and UI layouts are written to our own storage, alongside a record of what the agent did, so that sessions can be reviewed and the assistant can learn your preferences.

This means screenshots taken during a session are retained on our servers. Depending on which apps you automate, those images may contain personal information — messages, addresses, order details, anything visible on screen. Do not use the agent inside an app whose contents you are not willing to have stored. You can delete all of it at any time (section 7).

What we ask you not to do. Do not use the agent inside banking, payment or brokerage apps. The agent pauses for your confirmation on steps a model identifies as financial or irreversible, but that is a safeguard, not a guarantee — it depends on a model's judgement, and we will not claim it is more than that.

Turning it off. Revoke the Accessibility permission at any time in Android Settings → Accessibility → Yuwi Agent. The rest of the assistant continues to work without it.

4. Google user data we access

Identical to Yuwi: https://mail.google.com/, calendar.readonly, calendar.events, drive.readonly, drive.file and contacts.

Scope Used for
https://mail.google.com/ Answering mail questions, searching your history, and mail actions you confirm
calendar.readonly, calendar.events Calendar questions; creating, changing and deleting events you confirm
drive.readonly Searching your documents; reading spreadsheets to calculate answers
drive.file Writing meeting-prep documents into your own Drive
contacts Creating and updating contacts you confirm

Every action that writes, sends or deletes is shown to you and runs only after you confirm it.

5. What we store, and where

Everything listed in the Yuwi policy — the search index of your Gmail, Calendar and Drive; your encrypted Google refresh token; assistant memory; mail triage verdicts; conversations; generated analysis code; device tokens and settings — plus, for this app only:

Wake-word detection runs entirely on your device and uploads nothing.

6. Who else sees your data

We do not sell, rent or trade your data, and we do not use it for advertising.

7. Limited Use

Yuwi Agent's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Screen content captured by the Accessibility Service is held to the same standard: it is not used to train models, not sold, and not used for advertising.

8. Deleting your data

In the app: Settings → Your data → Delete.

Everything stops immediately; deletion follows after 30 days, which exists so an accidental deletion can be undone. Restore is available throughout. Delete now skips the window.

Deletion removes your search index and its backups, your stored session screenshots and UI layouts, your stored Google token (also revoked at Google), memory, commitments, conversations, triage records, scheduled tasks and reminders, prep routines, stored analysis code, notification tokens and your profile.

Revoking access at myaccount.google.com/permissions stops all Google access immediately; use in-app deletion to remove what was already stored.

9. Security

HTTPS in transit; encrypted at rest. The Google refresh token carries a second layer of encryption on top of that, under a key kept separately from the data it protects.

We are a small operation and hold no SOC 2 or ISO certification.

10. Children

Not intended for anyone under 16.

11. Changes

Material changes are announced in the app before they take effect.

12. Contact

Shubh Ketan Agarwal Family Office LLP — yuwi.developer@gmail.com