Privacy Policy

1. Introduction

Yap With AI ("Company," "we," "us," or "our") operates the Yap mobile application (the "App") and our website at https://yapwith.ai (the "Website"), collectively referred to as the "Service." This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use the Service.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use the Service.

The Service is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use the Service or provide any personal information to us.

If you have any questions or concerns about this Privacy Policy, please contact us at [email protected].

2. Information We Collect

Information You Provide Directly

• Account Information: When you create an account, we collect your name, email address, and any profile details you choose to provide.
• Voice and Audio Recordings: When you use the voice conversation feature, we collect and process your voice and audio recordings to facilitate AI-powered conversations.
• Conversation Transcriptions: We generate and store transcriptions of your voice conversations to provide and improve the Service.
• Text Messages: Any text-based messages you send through the App are collected and processed.
• Feedback and Communications: Information you provide when you contact us for support, submit feedback, or otherwise communicate with us.

Information Captured by the Service

• Screenshots: When you directly or indirectly indicate that the AI companion should see your screen, the App may capture a screenshot of your device display. We use our own in-house models to detect when a screenshot is appropriate based on your conversation. Screenshots are sent to third-party AI service providers (see Section 4) for visual analysis, and the resulting description or the screenshot itself may be provided to the AI companion so it can understand and respond to on-screen content. The App does not continuously record or monitor your screen.

Information Generated by the Service

• AI Responses: Content generated by the AI in response to your interactions, including text responses and audio outputs.

Information Collected Automatically

• Device Information: We collect information about the device you use to access the Service, including device type, operating system and version, unique device identifiers, and mobile network information.
• Usage Data: We collect information about how you interact with the Service, including features used, actions taken, time and duration of sessions, and in-app navigation patterns.
• Log Data: Our servers automatically record information when you access the Service, including IP address, access times, pages viewed, and referring URLs.
• Analytics and Error Reporting: We use Mixpanel (including session replay functionality) for analytics and user interaction tracking, Google Analytics 4 (GA4) for website analytics, and Sentry for crash and error reporting. Sentry collects technical diagnostic data such as device information, error logs, and performance metrics to help us identify and fix issues with the Service. Mixpanel is integrated into both the App and the Website to track usage, session activity, and in-app behavior across all platforms.

Cookies and Tracking Technologies

Our Website and App use the following tracking technologies:

• Mixpanel (Website and App): Uses localStorage on the Website and device-level identifiers within the App to store analytics identifiers, track session data, and record user interactions including session replays.
• Google Analytics 4 (Website): Uses cookies (such as _ga and \_ga_\* cookies) to distinguish users and track website interactions.
• A/B Testing: We may use cookies, localStorage, or device-level storage to assign you to test groups for the purpose of improving the Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, operate, and maintain the Service, including processing your voice recordings, generating AI responses, and delivering AI-generated content.
• Service Improvement: To understand how users interact with the Service and to develop, test, and improve features, functionality, and performance.
• Personalization: To personalize your experience and tailor content and features to your preferences and usage patterns.
• Communications: To send you service-related notices, updates, security alerts, and administrative messages.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent, unauthorized, or illegal activity, and to protect the rights and safety of our users and the Company.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests.
• Analytics: To analyze trends, usage patterns, and activities in connection with the Service using tools such as Mixpanel and GA4.
• AI Training and Voice Data: We do not use your voice recordings or voice data to train artificial intelligence models. Anonymized transcripts and interaction data (stripped of all personally identifying information) may be used to analyze usage patterns and improve the Service.

4. How We Share Your Information

We may share your information with the following categories of recipients:

• Third-Party AI Service Providers: We transmit certain user data to the following third-party AI service providers to generate AI responses and deliver the core functionality of the Service:
• OpenAI (OpenAI, L.L.C.): Receives voice recordings and text messages to power voice-based conversations with AI companions, including generating companion voice responses and transcriptions for both user and companion speech. May also receive screenshots or screenshot descriptions to provide the AI companion with visual context of your screen.
• Google Gemini (Google LLC): Receives screenshots for visual analysis and description generation, which may then be used to provide context to the AI companion.
• Grok (xAI Corp.): Receives screenshots for visual analysis and description generation, which may then be used to provide context to the AI companion.

These providers process your data in accordance with their own privacy policies and our data processing agreements. We may update the specific providers we use as our Service evolves; any changes will be reflected in this Privacy Policy.

• Analytics and Error Reporting Providers: We share usage and interaction data with Mixpanel and Google Analytics 4 to understand how the Service is used. We share crash and error data with Sentry to diagnose and resolve technical issues.
• Infrastructure and Hosting Providers: We use third-party cloud infrastructure and hosting services to store and process data necessary to operate the Service.
• App Store Providers: As the Service is distributed through the Apple App Store and Google Play Store, certain information may be shared with Apple and Google in connection with app distribution, in-app purchases, and compliance with their respective policies.
• Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with any merger, acquisition, sale of assets, financing, or transfer of all or a portion of our business, your information may be transferred as part of that transaction.

We do not sell your personal information. We have not sold personal information in the preceding 12 months and do not intend to sell personal information.

5. Data Retention

We retain your personal information for as long as your account is active and as needed to provide you with the Service. The following retention practices apply:

• Active Accounts: We retain your data, including voice recordings, transcriptions, and conversation history, for the duration of your active account.
• Account Deletion: When you delete your account, we will permanently delete your personal identifying information (name, email address, and authentication credentials) within 30 days. Conversation data, transcripts, and usage data will be retained in de-identified form - stripped of all information that could be used to identify you - for the purpose of improving the Service. We do not use retained de-identified data to re-identify former users. If you wish to request complete deletion of all data, including de-identified data, please contact [email protected].
• Analytics Data: Analytics data collected through Mixpanel and GA4 is retained in accordance with the respective provider's data retention policies and our configurations.
• Legal Hold: Notwithstanding the foregoing, we may retain certain information for longer periods as required by applicable law, to resolve disputes, enforce our agreements, or as necessary for legitimate business purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols.
• Encryption of data at rest using industry-standard encryption methods.
• Access controls that limit access to personal information to authorized personnel who need it to perform their job functions.
• Regular review and update of our security practices.

In the event of a data breach that affects your personal information, we will notify you and any applicable regulatory authorities as required by applicable law.

While we take reasonable measures to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee the absolute security of your personal information.

7. Your Rights and Choices

Regardless of where you reside, we provide all users with the following rights with respect to their personal information:

• Access: You may request access to the personal information we hold about you.
• Deletion: You may request deletion of your personal information. Deleting your account will remove your personal identifying information within 30 days. De-identified data may be retained as described in Section 5. For complete deletion, contact [email protected].
• Correction: You may request that we correct inaccurate or incomplete personal information.
• Opt-Out: You may opt out of non-essential communications from us at any time.

How to Exercise Your Rights: You may exercise your rights by using the account deletion and data management features within the App, or by contacting us at [email protected]. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

Identity Verification: To protect your privacy and security, we may need to verify your identity before processing certain requests. We may ask you to provide information to confirm your identity before we can act on your request.

Appeals (US State Privacy Laws): If we deny your privacy request, you may appeal our decision by emailing [email protected] with the subject line "Privacy Appeal" within 45 days of our decision. We will review and respond to your appeal within a reasonable period and as required by applicable law.

8. EEA, UK, and Switzerland (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, this section provides additional information about how we process your personal data in accordance with the General Data Protection Regulation (GDPR) and equivalent UK and Swiss data protection laws.

Data Controller: Yap With AI is the data controller responsible for your personal data. You can contact us at [email protected].

Legal Bases for Processing: We process your personal data on the following legal bases:

• Performance of a Contract (Article 6(1)(b)): Processing necessary to provide the Service to you, including processing voice recordings, generating AI responses, and maintaining your account.
• Legitimate Interests (Article 6(1)(f)): Processing necessary for our legitimate interests, including improving the Service, analytics, fraud prevention, and security, where these interests are not overridden by your fundamental rights. This includes retaining de-identified and anonymized data after account deletion for the purpose of service improvement and analytics, where such data can no longer be used to identify you.
• Consent (Article 6(1)(a)): Where required by law for optional processing, such as certain analytics or tracking technologies. You may withdraw consent by contacting [email protected]. Withdrawal will not affect the lawfulness of processing before withdrawal.
• Legal Obligation (Article 6(1)(c)): Processing necessary to comply with legal obligations to which we are subject.

Your Data Subject Rights: Under the GDPR, you have the following rights:

• Right of Access (Article 15): The right to obtain confirmation as to whether your personal data is being processed and to access that data.
• Right to Rectification (Article 16): The right to have inaccurate personal data corrected.
• Right to Erasure (Article 17): The right to have your personal data deleted in certain circumstances.
• Right to Restriction of Processing (Article 18): The right to restrict the processing of your personal data in certain circumstances.
• Right to Data Portability (Article 20): The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Article 21): The right to object to processing based on legitimate interests or for direct marketing purposes.
• Right Not to Be Subject to Automated Decision-Making (Article 22): The right not to be subject to a decision based solely on automated processing that produces legal effects or significantly affects you.

International Data Transfers: Your personal data may be transferred to and processed in the United States and other countries outside the EEA, UK, or Switzerland. When we transfer your data outside these regions, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission and supplementary measures where necessary.

Right to Complain: You have the right to lodge a complaint with your local data protection authority if you believe that our processing of your personal data violates applicable data protection law.

Voice Data and Biometric Processing: We want to clarify that while we process voice recordings, we do not use your voice data for biometric identification purposes. Voice recordings are processed solely to generate transcriptions and facilitate AI-powered conversations.

9. California Residents (CCPA/CPRA)

If you are a California resident, this section provides additional disclosures required under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA").

Categories of Personal Information Collected:

• Identifiers: Name, email address, unique device identifiers, IP address, account name.
• Personal Information under Cal. Civ. Code § 1798.80(e): Name, email address.
• Internet or Other Electronic Network Activity: Browsing history, interaction with the Service, usage data, analytics data.
• Audio, Electronic, Visual, or Similar Information: Voice recordings, conversation transcriptions, AI-generated audio outputs, screenshots captured during conversations.
• Inferences: Inferences drawn from the above categories to create profiles reflecting your preferences and interactions.
• Sensitive Personal Information: Voice recordings (processed solely for the purpose of providing the Service).

Sources of Personal Information: We collect personal information directly from you, automatically through your use of the Service, and from third-party analytics providers.

Purposes of Collection: We collect personal information for the purposes described in Section 3 of this Privacy Policy, including providing the Service, improvement, personalization, communications, security, and analytics.

Third Parties with Whom We Share Information: We share personal information with the categories of third parties described in Section 4, including AI service providers, analytics providers, infrastructure providers, app store providers (Apple, Google), and as required by law.

Your CCPA/CPRA Rights:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your information.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information.
• Right to Opt Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising. As such, there is no need to opt out.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of your sensitive personal information to purposes necessary to provide the Service.

Authorized Agents: You may designate an authorized agent to make requests on your behalf. We may require verification of the agent's authority and your identity before processing such requests.

Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. We do not offer financial incentives for the collection, sale, or deletion of personal information.

Shine the Light: We do not disclose personal information to third parties for their direct marketing purposes.

10. US Voice and Biometric Data Notice

This section provides notice to users in states with biometric privacy laws, including Illinois (Biometric Information Privacy Act, "BIPA"), Texas (Capture or Use of Biometric Identifier Act, "CUBI"), and Washington (Biometric Identifiers law).

We do not create voiceprints or biometric identifiers. While the Service collects and processes voice recordings to generate transcriptions and facilitate AI-powered conversations, we do not analyze, extract, or create voiceprints, voice templates, or any other biometric identifiers from your voice data. Your voice recordings are not used for biometric identification or authentication purposes.

Retention and Destruction: Voice recordings are retained for the duration of your active account. When you delete your account, all voice recordings that can be linked to your identity are permanently destroyed within 30 days. De-identified voice data (stripped of all personally identifying metadata) may be retained for the purpose of improving transcription accuracy and Service quality. If you wish to request complete deletion of all voice data, including de-identified data, please contact [email protected].

Consent: By using the voice conversation features of the Service, you acknowledge and consent to the collection and processing of your voice recordings as described in this Privacy Policy. If you no longer wish to consent, you should discontinue use of voice features and may delete your account. You can also contact [email protected] with questions or requests.

No Sale of Voice Data: We do not sell, lease, trade, or otherwise profit from your voice recordings or any data derived from them. Voice data is shared only with the third-party AI service providers identified in Section 4 (currently OpenAI, Google Gemini, and Grok) as necessary to provide the Service.

11. Canadian Residents (PIPEDA)

If you are a resident of Canada, we process your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

Privacy Officer: We have designated a Privacy Officer who is responsible for our privacy program. You can contact our Privacy Officer at [email protected].

Consent: We collect, use, and disclose your personal information with your knowledge and consent, except where permitted or required by law. By using the Service, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

Purpose Limitation: We collect and use your personal information only for the purposes identified in this Privacy Policy. We will not use or disclose your personal information for purposes other than those for which it was collected, except with your consent or as required by law.

Access and Correction: You have the right to access the personal information we hold about you and to request correction of any inaccurate information. To exercise these rights, please contact us at [email protected].

Complaints: If you have a concern about our privacy practices, please contact us first at [email protected]. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.

Cross-Border Transfers: Your personal information may be transferred to and processed in the United States, where our servers and third-party service providers are located. By using the Service, you consent to this transfer. We ensure that appropriate safeguards are in place to protect your information in accordance with applicable Canadian privacy law.

12. Australian Residents (Privacy Act)

If you are a resident of Australia, we handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Collection, Use, and Disclosure: We collect personal information that is reasonably necessary for our functions and activities as described in this Privacy Policy. We will only use or disclose your personal information for the purposes for which it was collected, for related purposes you would reasonably expect, or as otherwise permitted by law (APPs 3, 6).

Cross-Border Disclosure (APP 8): Your personal information may be disclosed to overseas recipients, including our third-party AI service providers and infrastructure providers located in the United States. Before disclosing personal information overseas, we take reasonable steps to ensure that the overseas recipient handles your information in accordance with the APPs.

Access and Correction: You have the right to request access to and correction of the personal information we hold about you (APPs 12, 13). To make a request, please contact us at [email protected]. We will respond to your request within a reasonable period.

Complaints: If you believe we have breached the APPs, you may lodge a complaint with us at [email protected]. We will investigate your complaint and respond within 30 days. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC).

Sensitive Information: Voice recordings may be considered sensitive information under the Privacy Act. We collect this information only with your consent and only for the purposes of providing the Service. You may withdraw your consent by discontinuing use of voice features or deleting your account.

13. Children's Privacy

The Service is intended for users who are at least 18 years of age. We do not knowingly collect, use, or disclose personal information from anyone under the age of 18.

If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information as promptly as possible.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at [email protected] so that we can take appropriate action.

14. Third-Party Links

The Service may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to any third-party services, and we are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by providing additional notice through the App or via email.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of those changes. We encourage you to review this Privacy Policy periodically.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Yap With AI

Privacy Officer: [email protected]

General Support: [email protected]