Privacy Policy

Yaara respects your privacy. This Privacy Policy explains what we collect, how we use it, and your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

Data Fiduciary

Yaara is the Data Fiduciary for the personal data processed through the App. Registered office: Mumbai, Maharashtra, India.

What we collect

• Account data: name, email address, hashed password.
• Onboarding intents (e.g. "loneliness", "career") that you voluntarily select.
• Chat content: messages you send to Companions and the AI-generated replies. Stored to preserve conversation continuity.
• Subscription & payment metadata: plan, amount, expiry. All payments are handled by Google Play Billing (Android) or Apple In-App Purchase (iOS); we never see or store your card, UPI or bank details.
• Basic device metadata (app version, platform) for debugging.
• Advertising and measurement data: your device's Advertising ID, basic device information (such as device model and OS version), app install and app-open events, in-app actions such as signing up, sending your first message, viewing our plans, starting a purchase, and the product and price of purchases or subscriptions made through Google Play. If you are signed in, we also share a one-way hashed (scrambled) version of your email address and your Yaara user ID so Meta can match app activity to our ads. We never share your chat messages, Companion conversations, memories, onboarding choices, or any health or wellness information for this purpose.
• Health and wellness information: Some Companions (for example fitness, wellness, and lifestyle guides) are designed to help with health and wellness topics. If you choose to share health-related information in chats — such as fitness goals, dietary preferences, or health conditions — this is stored as part of your chat history and memory, and used solely to personalise the guidance those Companions provide. Yaara is not a medical service and does not provide medical diagnosis or treatment; always consult a qualified healthcare professional for medical decisions.

What we do NOT collect

• We do not collect your contacts, photos, microphone, location, or biometric data (unless you explicitly opt in for a specific feature).
• We do not sell your data to third parties.
• We do not use your chat content, Companion memories, onboarding choices, or any health or wellness information for advertising.

How we use your data

• To deliver the App and Companion conversations.
• To personalise a Companion's responses (e.g. remembering your name and preferences).
• To verify and honour subscriptions purchased through Google Play or the Apple App Store.
• To measure how well our ads work, for example whether someone installed Yaara or subscribed after seeing one of our ads, and to show our ads to people more likely to find Yaara useful.
• To send you service-related communication (never marketing without your consent).
• To meet legal or regulatory obligations.

Personalisation and memory

To make conversations feel continuous and personal, Yaara builds and stores a memory of key facts from your conversations — for example your name, city, preferences, goals, family details you mention, and topics you've discussed. This memory is created automatically from your chat content and may be shared across different Companions so they can respond in a consistent, personalised way. You can view what we hold via a data export request, and deleting your account permanently removes this memory within 30 days. You can ask us to correct or erase specific information at any time by writing to help@yaara.app.

AI processing by third-party LLM providers

Chat messages you send are transmitted to third-party Large-Language-Model (LLM) providers to generate replies. The providers Yaara relies on today are Anthropic (Claude Haiku 4.5 and Claude Sonnet 5), accessed via the Anthropic API. These third parties process your messages solely to produce the response and, per their published terms, do not use consumer API traffic to train foundational models.

Message content leaves India only for the duration of the round-trip API call. Nothing is stored on the LLM provider's servers beyond what is required for standard operational logging (typically 30 days).

Other third-party services

• Advertising measurement (Meta): We use the Meta (Facebook) SDK to measure the performance of our ads on Facebook and Instagram. It sends Meta your device's Advertising ID, basic device information, app install and open events, the in-app actions and purchase details described above, and, when you are signed in, a hashed version of your email address and your Yaara user ID. Meta processes this under its own Data Policy (https://www.facebook.com/privacy/policy). You can limit this at any time by resetting or deleting your Advertising ID in Android settings (Settings → Google → Ads, or Settings → Privacy → Ads). Deleting your Yaara account stops any further data being sent to Meta from your account.
• Web search: When a Companion needs current information, your query may be sent to search providers (Tavily and Serper) to retrieve results. Only the search query is sent, not your full conversation.
• Push notifications: We use Firebase Cloud Messaging and SuprSend to deliver notifications to your device.
• Fraud prevention: We generate and retain a device/usage fingerprint to prevent abuse of free-tier limits and fraudulent sign-ups. This is used only for security and abuse prevention.

Sensitive personal data

Where you share health-related or other sensitive information, we process it only to provide the personalisation you've requested, store it with the same security measures described in this policy, and delete it when you delete your account. We do not use it for advertising or share it except with the AI providers needed to generate responses, as described above.

Where your data is stored, and for how long

Account data, subscription metadata, and chat history are stored in Yaara's MongoDB database hosted on managed cloud infrastructure. Yaara operates from Mumbai, Maharashtra, India; database servers may be located in India or in other jurisdictions where our cloud provider operates (see "International transfers" below).

Chat history is retained while your account is active. When you delete your account (via the app or via this public request page), we permanently remove your personal data within 30 days, except where a specific record must be retained by law (e.g. tax invoices — see the Account Deletion page for the full retention list).

You can request a machine-readable export of all data we hold about you at any time by writing to help@yaara.app with the subject "Data export". We will respond within 30 days.

Your rights under the DPDP Act

You have the right to:

• Access the personal data we hold about you.
• Correct inaccuracies.
• Erase your account and personal data.
• Withdraw consent at any time.
• Nominate a person to exercise these rights on your behalf.
• File a complaint with the Data Protection Board of India.

To exercise these rights, write to help@yaara.app.

Security

We use industry-standard measures (bcrypt password hashing, JWT auth, TLS in transit, database access controls). No system is 100% secure — for your safety, please do not share highly sensitive identifiers such as Aadhaar numbers, credit-card, or bank details in chats. While some Companions are designed to discuss health and wellness topics, please avoid sharing information you would not want stored, and never rely on Yaara for medical, legal, or financial decisions.

Children

Yaara is not intended for users under 18. We do not knowingly collect data from minors. Parents/guardians can contact help@yaara.app to request removal.

International transfers

Data may be processed on servers outside India (e.g. AI model providers and Meta for advertising measurement). We ensure such transfers comply with applicable Indian law.

Changes

We will notify you of material changes to this policy via the App or email.

Grievance Officer (India IT Rules 2021)

Grievance Officer, Yaara

Email: help@yaara.app

Address: Mumbai, Maharashtra, India

Response time: within 15 days of receipt.