Privacy policy

YapFlow is provided by an independent developer (“we”, “us”, see hosythoang.xyz). YapFlow turns your voice into clean notes and to-do lists. This policy explains what we collect, why, who helps us process it, and how you can delete it.

What we collect

• Voice recordings. Recorded on your device and uploaded for processing. We delete the audio from our servers as soon as your note has been generated, and from your device once it has uploaded.
• Notes you create. The transcript, the cleaned-up text, summary, tags, action items (with due dates and priority), any rewrites you generate, and any edits you make.
• Account data. An anonymous account identifier created when you first open the app. If you choose to back up your account, your email address and a hashed password.
• Preferences. What you told us you use YapFlow for, your preferred writing tone, and your device’s time-zone offset (so that “Friday at 5pm” is interpreted in your local time).
• Subscription status. Whether you have an active subscription and when it expires. We never see your card or store payment details.
• Usage and diagnostics. Anonymous events such as “recording started”, which screens you open and whether a feature worked, plus your app version, platform and technical error reports. These never contain the text or audio of your notes, your email or your contacts. You can turn this off at any time in Settings, Privacy.
• Integration tokens. Only if you connect Notion or Todoist: the access token you provide, stored so we can send your notes and tasks there on your request.
• Calendar. If you ask YapFlow to add an action item to your calendar, it uses the system calendar form. We do not read your calendar.

How we use it

• To transcribe your recordings and generate your notes, tasks and rewrites.
• To let you search and ask questions across your own notes (“Ask your notes”). This uses numeric representations (embeddings) of your notes.
• To provide subscriptions and enforce plan limits.
• To keep the service secure, find and fix problems, and understand which features are used so we can improve them.

We do not sell your data, we do not use your recordings or notes for advertising, and we do not track you across other companies’ apps and websites.

Who processes your data

We use these service providers, only to run the features above:

• Supabase: database, authentication and file storage.
• Groq: speech-to-text on your audio.
• Google (Gemini API): turning transcripts into notes, rewrites, answers and embeddings.
• RevenueCat, Apple and Google: subscriptions and payments.
• Notion / Todoist: only when you connect them and ask us to export.

These providers may process data in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

• Audio: removed from our servers right after processing completes (or when you delete your account).
• Notes, tasks and the data above: kept until you delete them or delete your account.
• Usage and diagnostic data: kept for up to 90 days, and deleted with your account.

Your choices and rights

• Delete everything: in the app, go to Settings, Account, “Delete account and data”. This permanently removes your notes, tasks, styles, integrations and account from our servers and your device. Deleting your account does not cancel a subscription; cancel that in your Apple ID or Google Play settings (see support). You can also request deletion from the data deletion page.
• Edit: you can edit or remove any note or task in the app.
• Analytics: you can turn off usage analytics in Settings, Privacy.

Depending on where you live (for example the EEA, UK or California) you may have rights to access, correct, export or delete your data, and to object to or restrict processing. Write to [email protected] and we will respond within the time required by law.

Security

Data is encrypted in transit. Access to each user’s data is restricted to that user by database access rules, and AI provider keys are kept on our servers, never in the app. No system is perfectly secure, so please keep your password private.

Children

YapFlow is not directed to children under 13 (or under 16 where that is the local age of digital consent), and we do not knowingly collect their data.

Changes

If we make material changes we will update the date above and, where appropriate, tell you in the app.

Contact

[email protected]