Privacy Policy

Last updated: May 16, 2026

      Short version: YARAI does not sell your data. We store your scans and profile locally on your device. Anonymous usage analytics are collected to improve the app. Camera and photo access is used only for scanning — no images are stored on our servers.
    

1. Who we are

YARAI ("we", "us", "our") is a mobile application that helps users analyze beauty and skincare product ingredients. The app is available on iOS and Android and is developed and operated by the YARAI team.

Contact: hello@yarai.app

2. Information we collect

Information stored locally on your device

Your skin profile (skin type, age range, concerns, sensitivities) — entered voluntarily during onboarding
Products you have scanned and their ingredient analysis results
Skincare routines you have created
Your subscription status (active or inactive)

This data lives in a local SQLite database on your device. It is never transmitted to our servers in identifiable form.

Information transmitted to our servers

Scanned product data (brand name, product name, ingredient list) is sent to our backend cache to improve lookup speed for all users. No personal profile data is included.
Subscription purchases are processed by Apple (App Store) or Google (Play Store). We do not receive or store your payment details.

Analytics

We use PostHog to collect anonymous usage events (e.g., "user scanned a product", "user opened routines tab"). These events do not include personally identifiable information.
PostHog assigns a random anonymous ID to your device. This ID cannot be traced back to you.

3. Camera and photo access

YARAI requests camera and photo library access solely to scan product ingredient labels. Images captured during scanning are:

Sent to the Google Cloud Vision API for text extraction (OCR)
Sent to Google Gemini AI for product identification
Never stored permanently on our servers — only the extracted text is processed

Google's use of data sent to their APIs is governed by Google's Privacy Policy and the Google Cloud Privacy Notice.

Before any data is sent to Google's AI services, YARAI asks for your explicit consent within the app. You can use YARAI without granting AI consent — you will still be able to view previously scanned products and manually created routines, but scanning new products and AI-generated routine plans require consent.

4. Third-party AI services and data protection

YARAI uses the following third-party services to provide its core functionality:

Google Cloud Vision API — Receives product label photos for text extraction (OCR). Only the image is sent; no personal identifiers are included.
Google Gemini AI — Receives extracted text from product labels to identify the product and its ingredients. No personal data is included in the request.
Google Custom Search — Used to look up product images. Only the product name and brand are sent.
Open Beauty Facts — Public product database lookup. No personal data sent.
Railway — Backend infrastructure for the product cache database. Stores only product data (brand, name, ingredients), not personal information.

Google Cloud Vision and Google Gemini process data under Google's data protection terms, which provide protections equivalent to those described in this policy. No personal data (name, email, contacts, location, or device identifiers) is ever shared with any third-party service.

5. Data retention

Local data (scans, profile, routines) remains on your device until you uninstall the app or clear app data.

Product cache entries on our backend servers are retained indefinitely to benefit all users. They contain no personal information.

Anonymous analytics events are retained for up to 12 months.

6. Children's privacy

YARAI is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with information, please contact us and we will delete it.

7. Your rights

Because most data is stored locally on your device, you can delete it at any time by clearing the app's data or uninstalling the app.

For data held on our servers (product cache entries, analytics), you may contact us at hello@yarai.app to request deletion.

8. Security

We use industry-standard practices to protect data in transit (HTTPS) and at rest. Our backend API uses shared secret authentication to prevent unauthorized access.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects when changes were last made. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Reach us at hello@yarai.app