1. Who operates Loci
Loci is operated by Yumi Nexus (Wenxi Jiao), Auckland, New Zealand. Contact support@yumi.nexus for support, privacy questions, access, correction or deletion requests. This policy covers the Loci iPhone and Mac app and its product, support and legal pages.
2. What we collect
Your Yumi user ID links your Loci workspace across devices. The shared sign-in service processes the account email, provider information and identity profile needed to authenticate you. Loci stores the information you choose to enter: job applications, employers, role descriptions, contacts, stages, notes, interviews, meeting links, tasks and optional personal profile details. Profile details may include your name, email, phone, current place, career goals and work eligibility notes. You choose which fields to fill; avoid adding sensitive information you do not need.
3. Files and images
When you save a selected PDF, DOCX, PNG, JPEG or WebP file, Loci keeps a local copy and queues it for upload. Cloud storage includes the selected file, filename, title, version, notes, size, content hash and application links. Images may be screenshots or other related pictures. Loci does not scan your whole photo library or import files you have not selected.
4. Local saves and automatic sync
Records, drafts, queued changes, conflicts and saved or downloaded files are kept in the app’s account-specific storage. Supported devices store sign-in credentials in the system Keychain. Loci saves locally first and syncs while the app is active or returns to the foreground and a connection is available. Signing out preserves local records and unsynced changes so you can return with the same account. Initial sign-in and downloading uncached files need a connection. Files you export or share are outside the app’s storage and remain under your control.
5. Cities, time zones and permissions
The map displays the job cities you select or unambiguously match from the place text you enter. Selected city names and coordinates sync as part of the application. The bundled city search and world overview do not use device GPS, online map tiles or a third-party geocoding service. A city on a job application is not a measurement of your current location. A current place you voluntarily enter in your profile is stored with that profile. Times use device local time unless you select a time zone; the event time and selected zone are synced. Current features do not request camera, full photo-library, location, notification or calendar access.
6. How information is used
We use information to provide the records, files, time conversion, map, export, cross-device sync and account controls you request; prevent duplicate operations and data loss; protect accounts and diagnose operational faults; and respond to support or legal requests. Loci does not send applications to employers, promise hiring outcomes or make employment decisions. The Loci app has no advertising, advertising identifiers, tracking SDKs or AI content processing. We do not sell or rent your personal information.
7. Providers and international processing
Loci uses Google Firebase Authentication through Yumi Identity and Google Cloud Run, Firestore and Cloud Storage for its backend. Loci business records and attachments are currently hosted in the Sydney region of Australia. Authentication, the shared identity service, service operations and support may involve processing in other countries under the relevant providers’ terms and safeguards; not all account processing is confined to Sydney. Apple provides distribution, device security, system file selection and optional sign-in services. We use providers to deliver the requested service, restrict access and seek protections appropriate to the information. External job and meeting links are opened only at your direction and follow the destination’s privacy rules.
8. Operational information and security
Infrastructure providers process request details such as time, network address, status and limited security or error events. Application error logs avoid request bodies, files and sign-in tokens. Access is authenticated and account-scoped; network transport uses TLS and private cloud storage uses provider access controls. No system can guarantee absolute security. Loci’s product and legal pages do not embed advertising or analytics SDKs; the main Yumi website and shared sign-in service have their own privacy notices.
9. Retention and deletion
Live Loci content remains until you delete it or request workspace deletion. In the app, open Profile → Privacy & deletion. Delete Loci data only removes Loci applications, events, tasks, profile, attachments and sync receipts; it does not delete your shared Yumi identity or change other apps. Deletion requires a connection, a recent verification and explicit confirmation. Cleanup can continue after you close the page, including when an upload is in flight. The status page confirms completion; do not assume a submitted request has already finished.
10. Deleted copies, recovery and minimal records
A compatible Loci app clears its affected local cache, files, drafts and queue after it reconnects and receives the deletion result. Devices that stay offline, old app versions, exported files and copies shared elsewhere cannot be erased remotely; update or remove local copies separately. The service keeps a minimal account ID and workspace-generation deletion marker to reject old devices’ queued writes; these markers contain no application content or file bytes and remain while needed to prevent resurrection. Random request-status receipts are retained for 30 days and then scheduled for automatic expiry. Deleted attachments may remain in Google Cloud’s restricted soft-delete recovery storage for up to seven days. Limited operational and required audit logs follow provider retention rules and are not used to restore your workspace.
11. Deleting the shared Yumi account
This is a separate, broader choice. It deletes the shared Yumi sign-in, its identity profile and Loci data. As you explicitly choose to preserve other apps, the Loci deletion service does not erase those apps’ business records, files or independent account data. You may lose the ability to sign in again or access that data through the deleted identity. Open each app and export or manage its data before confirming; recreating an account with the same email does not guarantee access to old data. Existing independent app sessions and local copies follow those apps’ own controls. App Store subscriptions are managed separately with Apple and are not cancelled by deleting a Yumi account. If Sign in with Apple is linked, the account flow requires Apple reauthentication and revocation of the Apple access token before full account deletion. Other apps’ entitlement and subscription records are preserved separately from the deleted shared identity profile. A minimal identity deletion marker blocks old sign-in tokens from recreating that profile.
12. Your choices and rights
You can edit your records, export applications as CSV, back up record data as JSON and save original attachments separately. You can request access to or correction of personal information, ask about its use or raise a privacy complaint using support@yumi.nexus. We may verify your identity. You may also contact the New Zealand Office of the Privacy Commissioner at privacy.org.nz or another competent authority. The automatic in-app deletion flow does not require sending an email to support.
13. Children and changes
Loci is designed for people managing job applications and is not directed to children. Contact us if a child has provided information so we can investigate and respond appropriately. We may update this policy when functionality, providers or obligations change. The current version and effective date are shown here; material changes will be communicated in the app or by another appropriate method.