Yaara respects your privacy. This Privacy Policy explains what we collect, how we use it, and your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
Yaara is the Data Fiduciary for the personal data processed through the App. Registered office: Mumbai, Maharashtra, India.
To make conversations feel continuous and personal, Yaara builds and stores a memory of key facts from your conversations — for example your name, city, preferences, goals, family details you mention, and topics you've discussed. This memory is created automatically from your chat content and may be shared across different Companions so they can respond in a consistent, personalised way. You can view what we hold via a data export request, and deleting your account permanently removes this memory within 30 days. You can ask us to correct or erase specific information at any time by writing to help@yaara.app.
Chat messages you send are transmitted to third-party Large-Language-Model (LLM) providers to generate replies. The providers Yaara relies on today are Anthropic (Claude Haiku 4.5 and Claude Sonnet 5), accessed via the Anthropic API. These third parties process your messages solely to produce the response and, per their published terms, do not use consumer API traffic to train foundational models.
Message content leaves India only for the duration of the round-trip API call. Nothing is stored on the LLM provider's servers beyond what is required for standard operational logging (typically 30 days).
Where you share health-related or other sensitive information, we process it only to provide the personalisation you've requested, store it with the same security measures described in this policy, and delete it when you delete your account. We do not use it for advertising or share it except with the AI providers needed to generate responses, as described above.
Account data, subscription metadata, and chat history are stored in Yaara's MongoDB database hosted on managed cloud infrastructure. Yaara operates from Mumbai, Maharashtra, India; database servers may be located in India or in other jurisdictions where our cloud provider operates (see "International transfers" below).
Chat history is retained while your account is active. When you delete your account (via the app or via this public request page), we permanently remove your personal data within 30 days, except where a specific record must be retained by law (e.g. tax invoices — see the Account Deletion page for the full retention list).
You can request a machine-readable export of all data we hold about you at any time by writing to help@yaara.app with the subject "Data export". We will respond within 30 days.
You have the right to:
To exercise these rights, write to help@yaara.app.
We use industry-standard measures (bcrypt password hashing, JWT auth, TLS in transit, database access controls). No system is 100% secure — for your safety, please do not share highly sensitive identifiers such as Aadhaar numbers, credit-card, or bank details in chats. While some Companions are designed to discuss health and wellness topics, please avoid sharing information you would not want stored, and never rely on Yaara for medical, legal, or financial decisions.
Yaara is not intended for users under 18. We do not knowingly collect data from minors. Parents/guardians can contact help@yaara.app to request removal.
Data may be processed on servers outside India (e.g. AI model providers). We ensure such transfers comply with applicable Indian law.
We will notify you of material changes to this policy via the App or email.
Grievance Officer, Yaara
Email: help@yaara.app
Address: Mumbai, Maharashtra, India
Response time: within 15 days of receipt.