Privacy Policy

1. Information We Collect

We believe in data minimization. Yaara only collects the data strictly necessary to provide bill-splitting, group ledgers, and optional cross-device synchronization.

A. Information You Provide Directly

• Account Details: When you choose to connect with friends via cloud sync, you may provide an email address or display name. Using Yaara completely offline requires no account creation whatsoever.
• Ledger & Financial Records: Expense titles (e.g., "Supermarket", "Internet Bill"), monetary amounts, dates, split proportions, and notes entered into your groups.
• Receipt Photos: Photos or camera captures of paper receipts that you voluntarily attach to an expense for bookkeeping proof.
• Assisted Entries: If you choose receipt, voice, or text interpretation, we send your selected image, recording, or text, along with the selected currency and participant names, to our backend and the configured AI service to prepare a draft for your review.
• Support and Notifications: Support messages you submit and device push tokens and notification preferences needed to provide requested updates.

B. Device Permissions & Hardware Access

To deliver core features, the Yaara Android application requests specific permissions. We only access these APIs upon direct user action:

2. Offline-First Architecture & Data Storage

Unlike traditional cloud-only banking applications, Yaara is built with an offline-first local repository:

• Local Storage: Yaara uses SQLite and application storage for cached records, drafts, and queued changes. Authentication credentials use platform-backed secure storage. Yaara does not apply separate database encryption. Offline recording is supported; sign-in, invitations, synchronization, assisted interpretation, and other server actions require a connection.
• Cloud Sync (Supabase): Connected accounts synchronize records through HTTPS/TLS to our Supabase backend. This is encryption in transit, not end-to-end encryption: our backend must process records to validate and synchronize them. Relevant records are shared with authorized participants in the corresponding ledger or group.
• Zero Bank Integration: Yaara does not connect to your bank accounts, credit cards, or digital wallets. Yaara is a social bookkeeping ledger, not a payment gateway. No monetary funds pass through Yaara.

3. How We Use Your Information

We use your information exclusively to:

• Calculate mathematically accurate group balances, proportional shares, and debt reconciliations.
• Synchronize shared balances between verified group members who enter your invite link or code.
• Process the receipt images, voice recordings, or text you submit for assisted entry through our backend and configured AI provider to create a draft for your review.

4. Third-Party Sharing & Advertising

We never sell, rent, or monetize your personal or financial data.

We do not use Google AdMob, Meta Audience Network, or any behavioral ad trackers. The infrastructure providers we rely on strictly process operational data under strict confidentiality:

• Supabase: Encrypted cloud database and authentication infrastructure.
• Expo / EAS and platform notification services: Application distribution, updates, and delivery of push notifications using device tokens and notification payloads.
• Google Gemini: The configured assisted-entry integration uses Google's Gemini service to interpret entries you choose to submit. Availability depends on server configuration. Avoid including information that is unnecessary for the entry.

5. Data Retention & Account Deletion

You have full sovereignty over your information:

• Local Data: Clearing application storage or uninstalling normally removes the app's local data. Files you export, images you save elsewhere, and operating-system backups may remain outside the app.
• Cloud Account Deletion: Open Settings > Account & security > Delete my account, review the retention notice, type DELETE, and confirm. You may need to transfer ownership of groups with other signed-in members first. Account deletion removes your sign-in identity and access. It does not erase every shared ledger entry.
• Shared Record Retention: Shared financial history is retained with anonymized participant labels so other participants can keep their records. Original notes, saved messages, and shared receipts may still contain names or other information. These shared records are not covered by a promise of complete deletion within 30 days. Contact us with a specific data-removal request so we can assess it.

Request Yaara account or data deletion on the web

You can request deletion without using the app. Email contact@yaara.webcraftio.com with the subject Yaara account deletion request, preferably from the email address registered to your Yaara account. State whether you want your account deleted or want specific data removed. Never send your password, authentication codes, or full financial history. Webcraftio may ask you to verify ownership before acting.

Account deletion removes your sign-in identity and access. The shared-history retention described above also applies to web requests. Records downloaded or retained by other participants and files exported outside Yaara cannot be removed from their devices by deleting your account.

6. Children's Privacy

Yaara is not directed at children under the age of 13. We do not knowingly collect personal identifiable information from children. If you believe a child has provided us with personal information, please contact us and we will promptly remove it.

7. Compliance with Google Play Developer Policies

This privacy policy adheres strictly to Google Play's User Data policies, including requirements for Prominent Disclosure, Data Safety questionnaires, and runtime permission transparency.

8. Contact Information

If you have questions, feedback, or data privacy requests regarding Yaara, please reach out to our engineering team:

• Organization: Webcraftio
• Website: https://webcraftio.com/
• Email: contact@yaara.webcraftio.com