Privacy Policy

This page states what Yapholic stores, where, who else can access it, and how to have it removed.

What stays in your browser

• Prep notes. What you type during the thinking minute is never sent to us. It stays in the page and is discarded when you close it.
• Settings. Genre, style, prep and speaking lengths, sound and theme are stored in your browser’s local storage.
• Audio. The tool does not request microphone access and does not record anything.

What we store if you create an account

Your email address, and your password stored as a one-way hash that cannot be read back. Creating an account attaches the rounds already recorded in that browser to it, so a streak built without an account is not lost. Signing in with Google stores the identifier Google provides in place of a password, along with the email address and name on that Google account.

If you arrived through an affiliate link, the account records who referred you so that they can be credited. If you use your own affiliate link, we store the PayPal address you provide for payouts.

What we store when you finish a round

One row is written on our server, containing:

• the topic text and its genre;
• the prep and speaking lengths that were set, and how long you actually spoke;
• the time it finished, and your timezone offset, so that a day means your day;
• an anonymous device identifier.

That is the entire row. It exists so that a streak can be counted on the server and survive a browser cache being cleared.

Cookies

Five cookies are used, and none of them is for advertising.

• Device identifier. A random value set on your first visit, in an HttpOnly cookie that page scripts cannot read. It is not linked to a name, an address or an IP-based profile, and it is what ties your rounds together into a streak.
• Session. Set when you sign in, so that subsequent requests are recognised.
• Referral code. Set for 60 days if you arrive through a link ending in ?ref= and a code. It identifies the affiliate who referred you, not you, and is read only when an account is created or a purchase is made. It expires on its own.
• Timezone and currency, so that a day is counted in your timezone and prices are shown in the currency you selected.

Clearing this site’s cookies makes you a new, unrelated visitor, and an anonymous streak starts again.

Sharing

A shared streak page and a shared genre are both off by default. When enabled, each shows the name on your account if you have provided one, and never your email address. Disabling sharing invalidates the existing link immediately; enabling it again creates a new one.

Generating topics

Pro can generate topics from a prompt you write. That prompt is sent to the model provider that answers it. We store the prompt, which model answered, how many topics were returned and the token counts. No other information about your account is sent, and the feature runs only when you use it.

Reading a round back

With Pro, what you said in a round is sent once to a model provider, which answers with whether you did what the topic asked and one thing to try next time. That answer is stored with the round. Nothing about your account is sent with it, and it happens only for rounds you record.

Analytics

We use PostHog to measure how many people complete a round and how many return. It runs on the live site only, and is configured narrowly:

• autocapture is disabled, so the contents of inputs and the labels you click are not collected;
• session recording is enabled, so the pages you visit are recorded, but text you type is masked before the recording leaves your browser, and prep notes are masked both as they are written and where they are shown back to you;
• events carry the settings a round was run with - genre, style, lengths - and never what you wrote.

PostHog is identified with the same anonymous device identifier. If you have an account, your email address is associated with that identifier so that a recording can be matched to you if you contact us about a problem. Blocking analytics does not affect how the site works.

Who else can access it

Our hosting provider, PostHog as described above, Crisp for the chat widget, Brevo for transactional email, and Dodo Payments for purchases - they are the merchant of record, and we neither see nor store card details. No one else, unless required by law. An affiliate whose link you followed can see that an account was created and what it purchased, and never your name or email address.

What we do not do

• No advertising, and no advertising trackers.
• No sale or rental of personal data.
• No profiling across other sites.
• No marketing email.

Children

The tool is suitable for classroom use and collects no personal details from anyone without an account. It is not directed at children under 13, and we do not knowingly hold information that could identify one.

Your rights

Clearing this site’s cookies and site data removes the link between you and the rows stored on our side. To have those rows deleted, or to request a copy of what is held, write to [email protected], including the date and approximate time of a round so that it can be located.

Changes to this policy

If what is collected changes, this page is updated and the date at the top changes with it. Questions go to [email protected]. Yapholic is operated from India.