Privacy Policy

Last updated: April 1, 2026

      Short version: YARAI does not sell your data. We store your scans and profile locally on your device. Anonymous usage analytics are collected to improve the app. Camera and photo access is used only for scanning — no images are stored on our servers.
    

1. Who we are

YARAI ("we", "us", "our") is a mobile application for Android that helps users analyze beauty and skincare product ingredients. The app is developed and operated by the YARAI team.

Contact: hello@yarai.app

2. Information we collect

Information stored locally on your device

Your skin profile (skin type, age range, concerns, sensitivities) — entered voluntarily during onboarding
Products you have scanned and their ingredient analysis results
Skincare routines you have created
Whether you have verified your invite code (a simple true/false flag)

This data lives in a local SQLite database on your device. It is never transmitted to our servers in identifiable form.

Information transmitted to our servers

Scanned product data (brand name, product name, ingredient list) is sent to our backend cache to improve lookup speed for all users. No personal profile data is included.
Your invite code is sent once to verify access. It is not linked to any personal identifier.

Analytics

We use PostHog to collect anonymous usage events (e.g., "user scanned a product", "user opened routines tab"). These events do not include personally identifiable information.
PostHog assigns a random anonymous ID to your device. This ID cannot be traced back to you.

3. Camera and photo access

YARAI requests camera and photo library access solely to scan product barcodes and ingredient labels. Images captured during scanning are:

Sent to the Google Cloud Vision API for text extraction (OCR)
Sent to Google Gemini AI for product identification
Never stored permanently on our servers — only the extracted text is processed

Google's use of data sent to their APIs is governed by Google's Privacy Policy.

4. Third-party services

Google Cloud Vision API — OCR text extraction from product images
Google Gemini AI — Product name and ingredient identification
Google Custom Search — Product image lookup
Open Beauty Facts — Public product database lookup (no personal data sent)
PostHog — Anonymous analytics
Railway — Backend infrastructure for the product cache database

5. Data retention

Local data (scans, profile, routines) remains on your device until you uninstall the app or clear app data.

Product cache entries on our backend servers are retained indefinitely to benefit all users. They contain no personal information.

Anonymous analytics events are retained for up to 12 months.

6. Children's privacy

YARAI is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with information, please contact us and we will delete it.

7. Your rights

Because most data is stored locally on your device, you can delete it at any time by clearing the app's data or uninstalling the app.

For data held on our servers (product cache entries, analytics), you may contact us at hello@yarai.app to request deletion.

8. Security

We use industry-standard practices to protect data in transit (HTTPS) and at rest. Our backend API uses shared secret authentication to prevent unauthorized access.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects when changes were last made. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Reach us at hello@yarai.app