Privacy Policy

1. Who we are

YakYak ("we", "our") provides role-based message translation and clarity tools via our website (yakyak.dev) and our Chrome extension ("Yak Yak"). This policy explains how we collect, use, and protect your information across both. We are committed to privacy by design and minimal data use.

2. What we collect

Depending on how you use YakYak (web or Chrome extension), we may collect:

• Personally identifiable information: When you create an account (web or extension), we store identifiers, email address, and display name. We need this to provide the service and communicate with you.
• Authentication information: Sign-in is handled by our auth provider (Supabase). Passwords are not stored or accessible by us; they are used only for authentication. We do not use authentication data for any purpose other than securing your account.
• Website content / message data: When you use YakYak to rewrite text—on the web app or in the Chrome extension—we process the text you select or paste and the rewritten output. In the extension, only the text you explicitly select (or paste into the popup) is sent to our servers; we do not read or collect other content from the pages you visit. When you are signed in, we may store conversation and message data (your input and our AI-generated output) to provide history. We do not store message content when you use the "try it" flow on the landing page without signing in.
• Usage and technical data: We may collect logs (e.g. request metadata, errors) and analytics to run and improve the service. We avoid collecting more than necessary.

We do not collect health information, financial or payment information, location (beyond what may appear in server logs such as IP), web browsing history, or user activity such as keystroke logging or general click/scroll monitoring. We do not use or transfer your data to determine creditworthiness or for lending purposes.

3. How we use your data

• To provide, maintain, and improve YakYak (including translation and role-based rewriting).
• To process your messages with our AI (artificial intelligence) systems: we send your input (and where applicable conversation context) to third-party AI providers (e.g. Google Gemini) to generate rewritten or translated text. This processing is necessary for the core service. Our provider's use of data is governed by their privacy terms; we do not use your content to train general-purpose AI models for purposes unrelated to serving you.
• To communicate with you about your account or the service, where permitted by law.
• To comply with law and protect security and rights.

4. Who has access (YakYak staff and AI)

• Our team: Only authorized YakYak personnel (employees and contractors) who need access to run the service, support you, or comply with the law can access personal data. They are bound by confidentiality and internal policies.
• AI providers: Your message content is sent to our AI provider(s) (e.g. Google) to generate responses. We choose providers with strong security and privacy practices and contractual commitments.
• Other third parties: We do not sell your personal data. We do not transfer user data to third parties except for approved use cases necessary to operate the service (e.g. AI processing for rewriting, authentication, hosting). We may use processors (e.g. hosting, auth) under strict agreements; we do not allow them to use your data for their own purposes. We do not use or transfer your data for purposes unrelated to YakYak's single purpose (rewriting messages for different audiences), or for creditworthiness or lending.

5. Chrome extension (Yak Yak)

Our Chrome extension ("Yak Yak") uses the same backend and this same privacy policy. Data collected through the extension (e.g. selected text you choose to rewrite, account sign-in) is used only to provide the rewrite service and optional history. We certify that we do not sell or transfer user data to third parties outside approved use cases; we do not use or transfer user data for purposes unrelated to the extension's single purpose; and we do not use or transfer user data for creditworthiness or lending. The extension's permissions (e.g. activeTab, storage, host access to yakyak.dev and our auth provider) are used only for that single purpose. We do not run remote code in the extension; all logic is bundled in the extension package you install.

6. Retention

We keep account and conversation/message data only as long as needed to provide the service and as required by law. You can delete your account (and we will remove associated data in line with our systems and legal obligations). Specific retention periods can be set out in your account or support documentation.

7. Your rights (pro-privacy)

• Access and portability: You can request a copy of your personal data.
• Correction: You can update your profile and ask us to correct inaccuracies.
• Deletion: You can request deletion of your account and associated data, subject to legal retention.
• Object/restrict: Where the law gives you the right to object or restrict processing, we will honour it.
• Withdraw consent: Where we rely on consent, you can withdraw it at any time.

To exercise these rights, contact us at privacy@yakyak.dev. We will respond within the time required by applicable law. If you are in the EEA/UK, you may also have the right to lodge a complaint with a supervisory authority.

8. International transfers

If we transfer data outside your country, we do so with appropriate safeguards (e.g. standard contractual clauses or other mechanisms) as required by law.

9. Children

We do not knowingly collect data from children under 16 (or lower age where applicable). If you believe we have, contact us and we will delete it.

10. Changes

We may update this policy; we will post the new version and, for material changes, notify you as required by law. Continued use after the effective date means acceptance of the updated policy.

11. Contact

For privacy questions or to exercise your rights: privacy@yakyak.dev. Data controller: YakYak.