The short version
Yarite is two things: an iPhone app and this website. They work very differently.
| What we receive | |
|---|---|
| The Yarite app | Nothing. The app has no account and no server. Everything you enter stays on your phone. |
| yarite.app | Aggregate measurement of how the page is used. No name, no email, no account, nothing that identifies you. |
If you read nothing else: we never receive the people you keep in Yarite.
1. Who we are
Yarite is a product of Ourfires LTD, registered in England and Wales, company number 10271109, registered office 41 Devonshire Street, London W1G 7AJ, United Kingdom. VAT GB412141456. Registered with the Information Commissioner's Office, reference C1950730.
We are the data controller for what this policy describes: website measurement, and any email you send us. We have not appointed a Data Protection Officer and are not required to. Any privacy question: support@yarite.app.
2. The app
The app has no backend and no account. There is nothing to sign up for and no server that holds your data.
Your phone stores the people you add, which circle each one is in, when you last reached out, and your settings. We do not receive any of it and have no way to see it.
Contacts. If you import people, the app asks for access to your iPhone's Contacts and copies only the entries you pick. Nothing is uploaded. You can refuse and add people by hand, and you can withdraw the permission at any time in iOS Settings.
Reaching out. When you tap to call, message, email, or open WhatsApp, iOS passes that action and the number or address it needs to the relevant app on your phone. What happens after that is up to whoever provides that app.
Reminders are scheduled locally by your phone. Nothing is sent from a server.
Backups. If you use iCloud Backup, or back your phone up to a computer, the app's data is in that backup. The backup is yours and Apple handles it under Apple's terms. We have no access to it.
Deleting the app deletes everything it held. There is nothing left with us, because there never was anything with us.
3. Buying the unlock
The app is free for up to 15 people. Unlimited people is a one-time in-app purchase.
You buy it from Apple, not from us. For customers in the UK and Europe the seller is Apple Distribution International Ltd. (Cork, Ireland), which takes the payment, issues the receipt, and handles that transaction under its own privacy policy. We never see your card details, your billing address, or your name. Apple reports sales to us in aggregate.
Refunds are handled by Apple, at reportaproblem.apple.com. We cannot issue or refuse one.
4. The website
yarite.app is one page pointing at the App Store. No signup, no form, no account, no payment.
Server logs. Our host records what any web server records for each request: IP address, browser and device type, the page, the referring page, and the time. This is how the site is served and kept secure.
Measurement. If you allow it, we use PostHog to see how the page is used: pages viewed, when a visit ends, and the browser characteristics any website receives, such as screen size, language, and time zone. It goes to PostHog's servers in Frankfurt. We ask first — see section 4A.
With measurement allowed, PostHog stores an identifier on your device so that several visits from you are recognised as the same visit rather than counted as strangers. That identifier is a random value. It is not your name, your email, or anything you have told us, because you have told us nothing.
Three things it still does not do:
- It does not know who you are. IP addresses are discarded the moment PostHog receives them. The identifier says "the same browser as before", never "this person".
- It does not follow you elsewhere. No cross-site tracking, no advertising pixels, no tag manager. The identifier works on this site and nowhere else.
- It does not record you. Session recording is switched off, so nothing of your screen, clicks, or typing is captured.
If you refuse, we still count the visit, but nothing is stored on your device and every visit is a stranger.
Campaign links. If you arrive from a campaign link, the tags on it (utm_source and similar) are recorded with the visit so we know which campaign brought people here. If you allow the campaign-measurement category, we also keep those tags on your device for 28 days, so that a visit today can be connected to the link you followed last week.
4A. Cookies and your choice
We ask before storing anything on your device, and nothing is stored until you say yes.
When you first arrive, a banner asks. Refusing is one click, exactly as prominent as accepting, and the site works identically either way. There is no paywall, no nagging, and no reduced version of the page for people who say no.
Two things you can allow, separately:
| What it stores | Why | |
|---|---|---|
| Measurement | A random identifier, kept for 12 months | So repeat visits are recognised as repeat visits |
| Campaign measurement | The campaign tags from the link you followed, kept for 28 days | So we can tell which campaign brought someone here |
Plus one cookie we set whichever way you answer: ya_consent, which remembers your answer for a year. Without it we would have to ask again on every page. It stores your choice and nothing else.
Changing your mind is not a special request. Refuse at any time and we delete what was stored. If you accepted and want that undone, use the banner again or clear this site's data in your browser; both have the same effect.
We do not fingerprint your device, and we do not treat refusal as an invitation to identify you another way.
The app is not a browser and sets no cookies at all. None of this applies to it.
5. Why we do it
| What for | Which data | Our lawful basis |
|---|---|---|
| Running and protecting this website | Server logs | Legitimate interests: keeping our own site up and safe |
| Remembering your cookie answer | The ya_consent cookie | Legal obligation: we have to record what you chose |
| Understanding how the page is used so we can improve it | The measurement in section 4 | Your consent, given in the banner and withdrawable at any time |
| Replying to you | Your email and what you wrote | Legitimate interests: answering someone who wrote to us |
| Meeting legal obligations | Whatever the law requires | Legal obligation |
You do not have to give us anything. Nothing on this site asks you for personal data, and there is no contract or legal requirement to provide any.
No automated decisions and no profiling. The app's daily list is arithmetic running on your own phone, on the circles you chose. It decides nothing about you, and we never see it.
6. Who else is involved
We do not sell personal data and we run no advertising. Two providers, both acting only on our instructions:
- Vercel Inc. hosts the site and keeps the server logs. United States.
- PostHog, Inc. provides the measurement. Data stored in Frankfurt.
Apple is not on that list: it sells the app on its own account, not ours. See section 3.
We also disclose personal data where the law requires it.
7. Data leaving the UK
Both providers are US companies, so some data reaches the United States. Those transfers rely on the UK Extension to the EU-US Data Privacy Framework, and otherwise on the standard contractual protections in each provider's agreement with us. Ask us at support@yarite.app if you would like the details.
8. How long we keep it
- Server logs: for the period our host retains them, which is days rather than months. We copy them nowhere.
- Measurement: 12 months, and only if you allowed it.
- The identifier on your device: 12 months, or until you withdraw or clear it.
- Campaign tags on your device: 28 days, and only if you allowed that category.
- Your cookie answer (
ya_consent): 12 months. - Your emails: while we are dealing with what you wrote about, and for 12 months after, unless we need them longer for a legal claim.
App data has no retention period here. We never hold it.
9. Your rights
You can ask us for a copy of your personal data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, or ask for it in a portable form.
You can withdraw consent. Where we rely on your consent, which is the measurement in section 4, you can take it back at any time through the banner, and it is as easy to withdraw as it was to give. Withdrawing does not make what we already did unlawful, and it stops us going further.
You can also object. Where we rely on legitimate interests, which is the rest of section 5, you can tell us to stop at any time and you do not have to give a reason.
Email support@yarite.app. We will reply within one month.
These rights cover what we hold. They do not reach what is on your phone, because we have no access to it: that is yours, and deleting the app removes it.
10. Complaints
If you are unhappy with how we have handled your data, tell us: support@yarite.app, or by post to Ourfires LTD, 41 Devonshire Street, London W1G 7AJ, United Kingdom. We will acknowledge it within 30 days, look into it, and tell you the outcome.
You can also complain to the Information Commissioner's Office at ico.org.uk. You do not have to come to us first.
11. Security
The site is served over HTTPS only. Access to our hosting and measurement accounts is limited and protected by multi-factor authentication where the provider supports it.
The app's security is its design: no account, no server, nothing transmitted, so there is no store of your data with us to breach. What is on your phone is protected by your passcode and by iOS.
12. Children
Yarite is made for everyone. There is nothing in it beyond the people you put there: no feed, no messages from us, no advertising, no recommendations, and no connection to other users.
Because the app collects nothing and sends nothing anywhere, a younger user is in the same position as anyone else. We hold no data about them, so there is nothing for us to profile, share, or lose. The website measures visits in aggregate without identifying anyone, whatever their age.
13. Changes
We may update this policy. The current version is always here, with the version number and date at the top. If a change matters, we will say what changed.
14. Contact
Privacy questions, requests, and complaints: support@yarite.app.
Ourfires LTD, 41 Devonshire Street, London W1G 7AJ, United Kingdom. Company number 10271109. VAT GB412141456. ICO reference C1950730.