Privacy Policy

Last updated: October 11, 2026

Yarvy is a personal assistant that helps you manage tasks, goals, and notes. This policy explains what we collect, how it is used, and the choices you have. We aim to keep it plain and short.

What we collect

• Account details: your name and email address, and a securely stored password or the sign-in identifier from Google or Apple if you use those.
• Waitlist: if Yarvy is full when you sign up, your email address and when you tried, so we can email you when your spot opens.
• Your content: the tasks, goals, notes, lists, and chat messages you create, plus facts the assistant infers about you from your messages to help it be more useful.
• Approximate location: a rough location derived from your network address, used only to show local weather. We do not store precise GPS location.
• Usage records: basic activity and AI usage logs used to run the service and keep costs in check.
• Product analytics: how Yarvy is used, so we can improve it: actions such as signing up, sending a message, or creating a task, which device type you use (web, installed app, iPhone, Android), your country, and where you came from when you signed up (for example a link we shared). These records never include what you write, and they stay on our own systems. We do not use a third-party analytics service.
• Error reports: when something breaks, which screen or server step failed and the technical error message, with your account ID if you are signed in. Error reports are part of product analytics and are deleted after 90 days.
• Website visits: on yarvy.io we count page views, which buttons and sections are used, and where visitors came from. Visits by people who aren't signed in are counted with a code made from the network address and browser that changes every day, so that code can't link one day to the next; the network address itself is not stored. Outside the EU and similar places, the visitor cookie described below does recognise a returning browser. If you then create an account, your earlier visits from that browser, and where you first came from, are linked to your account.

How your content is used by AI

To turn what you type into tasks and helpful replies, your messages and recent conversation, your name, what Yarvy has saved or worked out about you, and the relevant parts of your tasks, goals, lists, notes, and recent activity are sent to the company whose AI models answer for your account: OpenAI or Anthropic. Which one answers can differ between accounts and can change over time. That provider processes this content to generate responses. Every message you send, and every reply Yarvy writes, is also checked by OpenAI's moderation service for unsafe content, whichever provider answers. We only send what is needed for the assistant to do its job.

To decide how much work a message needs, your message and a short excerpt of Yarvy's previous reply are also sent to TypeSafe AI, which returns a routing decision and no text. We do not attach your account name, email, account ID or IP address to this request. The message content itself can contain personal information you or the assistant included. TypeSafe does not use this content to train its models, and may retain it as needed to operate its service. See TypeSafe's privacy policy.

For OpenAI, we request that generated responses are not saved as retrievable response records. This does not mean zero retention: OpenAI may keep abuse-monitoring logs containing content for up to 30 days by default, and longer where required by law. Prompt caching may also temporarily retain processed representations. API content is not used to train OpenAI models by default unless data sharing is explicitly enabled. See OpenAI's data controls. Anthropic does not use API content to train its models by default and may keep it for a limited time for safety and legal reasons; prompt caching may also temporarily retain processed representations there. See Anthropic's privacy policy.

We check messages for unsafe requests and send a hashed account identifier with generation requests to help detect misuse. We keep safety categories and actions, not an extra copy of the flagged message, in our safety records. A safety flag does not automatically suspend an account. You can contact support if a message is blocked by mistake.

Who we share data with

• OpenAI: AI processing of your content, and safety checks on every message and reply, as described above.
• Anthropic: AI processing of your content for the accounts it answers, as described above.
• TypeSafe AI: deciding how to route each message, as described above.
• Google and Apple: Google Firebase handles authentication, including email/password sign-in. If you choose Google or Apple sign-in, that provider also confirms your identity.
• Cloudflare: our hosting and database provider, which stores your data on our behalf.
• Resend: sends our account and waitlist emails, such as letting you know your spot is ready. It receives your email address and the message we send. See Resend's privacy policy.
• Stripe, RevenueCat and the app stores: when you start or manage a paid subscription, these providers process payments or manage your subscription, depending on where you subscribe. We share the account identifiers needed to connect a purchase to your account, and your email with Stripe for web billing. We receive subscription status and limited payment details, such as the card brand and last four digits, but not your full card number. See Stripe's privacy policy.

We do not sell your personal data, and we do not use it for advertising.

Cookies

We use a sign-in cookie to keep you logged in. On yarvy.io we may also set a first-party visitor cookie, yv_vid, which holds a random id and the date of your first visit, so we can tell a returning visitor from a new one. It lasts up to 400 days. We set it only outside the EU, the EEA, the UK, Switzerland and Brazil, and never when your browser sends Do Not Track or Global Privacy Control. We do not use advertising cookies or third-party tracking cookies.

How long we keep it

We keep your account and content for as long as your account is active. You can delete your account yourself in Settings > Delete account, or ask us to. That removes your tasks, goals, notes, lists, messages, and inferred facts, and cancels a subscription you started on the Yarvy website's current checkout. An older web subscription, or one bought through the App Store or Google Play, has to be cancelled first, from the Plan page or in that store. Product analytics, AI usage records (counts and costs, never what you wrote) and subscription history (plan changes and prices) are kept while Yarvy runs, except error reports, which are deleted after 90 days; when you delete your account they move to a random identifier that is not linked to your account or email. We also keep the sign-in identifier of a deleted account and when it was deleted, so a device that was still signed in can't quietly create a new account. A waitlist entry is kept until you create your account or ask us to remove it (reply to the waitlist email, or email us). The sign-in record Google Firebase made when you tried to sign up stays until then too, and we delete it with the entry if you ask.

Your choices

You can download a copy of your data at any time in Settings > Download my data, on the web or in the iPhone and Android apps. You can also ask us to send you a copy of your data, correct it, or delete your account and everything in it. To make a request, email us using the address below and we will take care of it.

Age

Yarvy is only for people 18 and older, and you confirm that when you create an account. If you tell us you're under 18, or we learn an account belongs to someone under 18, we delete the account and everything in it.

Changes

If we update this policy, we will change the date at the top of this page.

Contact

Questions or requests: support@yarvy.io.