About this policy
YAA Your AI Assistant is developed and operated by Gautam Bhadre in a personal capacity. This policy covers this informational website and the YAA app features described below. The app remains in testing; available features depend on your installed version, platform and settings. Website browsing does not create a YAA account. Support and privacy enquiries: bhadre.gautam@gmail.com.
Account and Google sign-in
YAA processes your email address and the profile name, photo and account identifiers supplied through the sign-in method you choose. Email sign-in uses a one-time code. Google sign-in opens Google’s own authentication flow; YAA does not ask you to type your Google password into this website or the YAA app. Authentication and account services are provided through Supabase.
Your content and synchronisation
The app processes the conversations, notes, tasks, reminders, schedules, attachments and preferences that you create or submit. Its source uses account-specific encrypted local databases for supported records and account-scoped cloud synchronisation. Conversation synchronisation is controlled separately in Chat settings. Attachment upload is an explicit online action. Installation, device permissions and the selected settings affect available features.
Optional AI processing
When you enable online AI and submit a request, your request and permitted app context are sent through YAA’s authenticated gateway to the configured AI provider, including OpenAI where selected. A configured local AI endpoint receives requests when that mode is chosen. Review sharing and consent settings before submitting sensitive information. AI responses can be inaccurate. This website’s illustrative workflow does not send your input to an AI service.
Saved memory and your choices
Personal Memory is saved through explicit controls and can be inspected, corrected, deleted or disabled. Sharing saved content with AI is controlled separately and is off by default in the app settings. Chat Only excludes saved-content recall. Deleting a memory prevents fresh retrieval of that record but does not remove copies already present in old conversations, exports or already-dispatched requests. Recall is bounded keyword matching, not unlimited memory.
Voice, location and integrations
If you submit a voice recording for transcription, the recording is processed by the configured service. Recording can use temporary files and encrypted recovery checkpoints until sent or deleted. Device read-aloud uses the chosen system speech service; online voice may send reply text to the configured provider. Location is requested for features you choose, such as nearby search; a manual area is available. Optional calendar or other integrations process the information needed for the authorised action. Device permissions can be managed in your operating system.
Purposes and service providers
We use information to authenticate accounts, store and synchronise records, schedule reminders, provide the optional AI features you choose, respond to support and maintain reliability. Cloudflare Pages delivers this website. App services include Supabase for authentication and account data, Google for Google sign-in, Brevo for configured email-code delivery, and the AI service selected in the app, including OpenAI where configured. These providers receive information needed for their respective services. Information may be processed outside your country. We do not sell your personal information or use this website for advertising profiling.
Retention, deletion and export
Supported records can be edited, exported or deleted using app controls. Profile includes account-deletion controls. Deleted records may remain in a recycle bin until purged. Synchronisation deletion markers and operation receipts prevent older offline copies or retries from recreating records and may be retained until account deletion as part of synchronisation. Exported references to cloud attachments are not copies of the attachment files. Removing the app does not itself delete cloud data. Provider backups and logs may follow separate retention schedules; no fixed universal retention period or zero-retention promise is made. Support correspondence is kept while needed to resolve the enquiry, maintain relevant service records or meet applicable obligations. Retention varies by record type and provider; contact us about a specific record or deletion request.
This website and support
This website is delivered through Cloudflare Pages. Cloudflare processes technical connection and request information, which can include IP address, requested URL, browser information and timestamps, to deliver and protect the site. Its processing is described in the Cloudflare Privacy Policy. This package adds no advertising trackers or analytics scripts. Day/night preference is stored in browser local storage and can be cleared through browser settings. Demonstration forms validate locally and do not send or store entries; they do not register you for beta access. If you email support, we receive the address and message you send and use them to handle your enquiry. Do not email passwords or sign-in codes.
Security and requests
YAA’s design includes secure sessions, account-scoped storage and user authorisation for consequential app actions. No system can guarantee absolute security. Keep your device and account secure, and do not share sign-in codes. Contact bhadre.gautam@gmail.com for questions or requests about access, correction, export or deletion. The operator may need to verify a request before acting on account data.
Policy updates
Version dated 8 November 2026, prepared for initial website publication. This policy applies when this version is published. Material changes will be identified with an updated version date. The website and app may be updated separately; review the policy associated with the version and features you use.
Related document: Terms of Use