Privacy Policy

Yora is a personal AI assistant that learns about you to help you better over time. Your data is private and belongs to you. Yora is operated by the developer at hello@yorame.de and is hosted at yorame.de.

We collect only what you give us or explicitly tell Yora to connect:

• Your email address and Google profile name (used for authentication only)
• Content of conversations with Yora (messages you send and Yora's responses)
• Data from third-party services you explicitly connect via OAuth (listed below)
• Basic usage statistics (page views, feature usage counts) to improve the service

When you connect your Google account to Yora via the Integrations page, you can authorize Yora to access the following scopes:

• Gmail (read): Read recent incoming emails so Yora can summarize your inbox, surface important threads, and extract commitments/tasks. Yora does NOT read your entire mailbox history. Only recent messages.
• Gmail (send): Send emails that you compose with Yora's help, only after you explicitly ask Yora to send them. Yora never sends email without your direct instruction.
• Gmail (modify / labels): Mark emails as read, archive, or apply labels when you explicitly request it during a conversation with Yora. Never done in the background.
• Google Calendar (read): Read upcoming events so Yora can give you accurate daily briefings, meeting summaries, and scheduling help.
• Google Calendar (write events): Create events only when you explicitly ask Yora to schedule something. Yora never creates events silently.

How Google user data is used: Data retrieved from your Google account is used exclusively to generate your personal AI assistant responses inside Yora. It is processed in real-time by Yora's AI (Anthropic Claude) to craft replies and maintain context across conversations. Selected facts you choose to save are stored as memories in your private database.

Yora's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we do NOT do with Google user data:

• We do NOT transfer Google user data to any third party except as necessary to provide the service (e.g. Anthropic Claude for AI inference, Supabase for encrypted storage, OpenAI for embeddings)
• We do NOT use Google user data for targeted advertising
• We do NOT use Google user data to train AI models (yours or anyone else's)
• We do NOT sell, rent, or share Google user data with anyone
• We do NOT read any Google user data without you first taking an explicit action inside Yora

You can disconnect your Google account at any time from the /integrations page inside Yora. Disconnecting revokes Yora's access immediately and deletes the tokens. To additionally delete all cached data from past syncs, email hello@yorame.de.

Your data is used only to make Yora work better for you:

• Generate personalized AI responses based on your context
• Maintain a memory of facts you choose to save
• Run the third-party integrations you explicitly connected (Gmail, Calendar, etc.)
• Send proactive alerts you opted in for (morning briefings, relationship reminders)

We never sell your data. We never use your data to train public AI models. We never share your data with advertisers.

To deliver Yora's functionality, we use the following sub-processors. Data sent to these providers is used only for service delivery (not training, not advertising):

• Supabase: database, authentication, and encrypted vector memory (EU region)
• Anthropic Claude: AI response generation (per Anthropic's zero-retention policy for API users)
• OpenAI: text embeddings for memory search (API mode, no training)
• ElevenLabs: voice output generation (opt-in feature)
• Resend: transactional email delivery (auth emails, briefings you opted into)
• Vercel: web hosting and serverless functions

Your data is stored encrypted at rest in Supabase (Frankfurt, EU region). Authentication, database, and vector memory all run in the European Union. In-transit data is secured with TLS 1.3. AI provider API calls transit the United States but are covered by provider zero-retention agreements.

We retain your data for as long as your account is active. When you delete your account, all conversations, memories, integrations, and personal data are permanently deleted within 30 days. You can trigger this at any time from the Settings page or by emailing hello@yorame.de.

You have the following rights over your data:

• Access: View all your memories, conversations, and connected accounts inside Yora
• Correction: Edit or delete any memory from the Memory page
• Deletion: Disconnect any integration instantly from the Integrations page. Delete your entire account by emailing hello@yorame.de
• Portability: Request an export of all your data in JSON format
• Revocation: You can revoke Yora's access to your Google account at any time via https://myaccount.google.com/permissions

Yora is not directed at children under 13 (or 16 in the EU). We do not knowingly collect data from minors. If you are a parent and believe your child has created an account, email us at hello@yorame.de and we will delete the account and all associated data.

We may update this privacy policy. Material changes will be communicated by email to all active users at least 14 days before taking effect. The "Last updated" date at the top of this page always reflects the latest revision.

Questions about privacy, data deletion requests, or any privacy-related concerns? Email us at hello@yorame.de and we will respond within 7 business days.