The short version
Yarite is two things: an iPhone app and this website. They work very differently.
| What we receive | |
|---|---|
| The Yarite app | Only what you allow: anonymous counts of how the app is used, and crash reports. Never the people you keep in it. The app has no account, and everything you enter stays on your phone. |
| yarite.app | Aggregate measurement of how the page is used. No name, no account, nothing that identifies you. The one exception is the email address you type in yourself if you sign up for our newsletter. |
If you read nothing else: we never receive the people you keep in Yarite.
1. Who we are
Yarite is a product of Ourfires LTD, registered in England and Wales, company number 10271109, registered office 41 Devonshire Street, London W1G 7AJ, United Kingdom. VAT GB412141456. Registered with the Information Commissioner's Office, reference C1950730.
We are the data controller for what this policy describes: website measurement, and any email you send us. We have not appointed a Data Protection Officer and are not required to. Any privacy question: support@yarite.app.
2. The app
The app has no account and no server holding your data. There is nothing to sign up for.
Your phone stores the people you add, which circle each one is in, when you last reached out, and your settings. We do not receive any of it and have no way to see it.
Usage measurement, if you allow it. The first time you open the app it asks whether it may send anonymous counts of how it is used. If you say yes, it sends events such as "a person was added", "a reach-out was logged", "the daily reminder was turned on", each with the circle involved and nothing more. It also sends crash reports so we can fix what broke.
What it never sends, whatever you answer: names, phone numbers, email addresses, notes, photos, and anything else you typed. The app has no account, so nothing it sends is linked to you as a person; it is a random identifier for the installation, and it goes to PostHog in Frankfurt, the same provider described in section 4.
If you say no, the app sends nothing at all and never asks again. You can change your mind either way, whenever you like, under Settings → Share anonymous usage. This is why the App Store privacy label reads "Data Not Linked to You" rather than "Data Not Collected".
Contacts. If you import people, the app asks for access to your iPhone's Contacts and copies only the entries you pick. Nothing is uploaded. You can refuse and add people by hand, and you can withdraw the permission at any time in iOS Settings.
Reaching out. When you tap to call, message, email, or open WhatsApp, iOS passes that action and the number or address it needs to the relevant app on your phone. What happens after that is up to whoever provides that app.
Reminders are scheduled locally by your phone. Nothing is sent from a server.
The newsletter link. The app's Settings has a link to the newsletter page on this website. Tapping it opens that page in a browser sheet; the app itself sends nothing and never sees what you type there. What happens on the page is section 4.
Backups. If you use iCloud Backup, or back your phone up to a computer, the app's data is in that backup. The backup is yours and Apple handles it under Apple's terms. We have no access to it.
Deleting the app deletes everything it held. There is nothing left with us, because there never was anything with us.
3. Buying the unlock
The app is free for up to 15 people. Unlimited people is a one-time in-app purchase.
You buy it from Apple, not from us. For customers in the UK and Europe the seller is Apple Distribution International Ltd. (Cork, Ireland), which takes the payment, issues the receipt, and handles that transaction under its own privacy policy. We never see your card details, your billing address, or your name. Apple reports sales to us in aggregate.
Refunds are handled by Apple, at reportaproblem.apple.com. We cannot issue or refuse one.
4. The website
yarite.app is one page pointing at the App Store, plus the newsletter signup below. No account, no payment.
Newsletter. If you type your email address into the form at yarite.app/newsletter and press Subscribe, we keep it in order to send you our newsletter: a short note now and then about what is new in Yarite. That is all we use it for. We do not add it to any other list, and we do not sell or share it. Every email we send has an unsubscribe link, and using it removes you at once. The address is stored by Resend, the service that sends the email for us (section 6).
Server logs. Our host records what any web server records for each request: IP address, browser and device type, the page, the referring page, and the time. This is how the site is served and kept secure.
Measurement. If you allow it, we use PostHog to see how the page is used: pages viewed, when a visit ends, and the browser characteristics any website receives, such as screen size, language, and time zone. It goes to PostHog's servers in Frankfurt. We ask first — see section 4A.
With measurement allowed, PostHog stores an identifier on your device so that several visits from you are recognised as the same visit rather than counted as strangers. That identifier is a random value. It is not your name, your email, or anything you have told us, because you have told us nothing.
Three things it still does not do:
- It does not know who you are. IP addresses are discarded the moment PostHog receives them. The identifier says "the same browser as before", never "this person".
- It does not follow you elsewhere. No cross-site tracking, no advertising pixels, no tag manager. The identifier works on this site and nowhere else.
- It does not record you. Session recording is switched off, so nothing of your screen, clicks, or typing is captured.
If you refuse, we still count the visit, but nothing is stored on your device and every visit is a stranger.
Campaign links. If you arrive from a campaign link, the tags on it (utm_source and similar) are recorded with the visit so we know which campaign brought people here. If you allow the campaign-measurement category, we also keep those tags on your device for 28 days, so that a visit today can be connected to the link you followed last week.
4A. Cookies and your choice
We ask before storing anything on your device, and nothing is stored until you say yes.
When you first arrive, a banner asks. Refusing is one click, exactly as prominent as accepting, and the site works identically either way. There is no paywall, no nagging, and no reduced version of the page for people who say no.
Two things you can allow, separately:
| What it stores | Why | |
|---|---|---|
| Measurement | A random identifier, kept for 12 months | So repeat visits are recognised as repeat visits |
| Campaign measurement | The campaign tags from the link you followed, kept for 28 days | So we can tell which campaign brought someone here |
Plus one cookie we set whichever way you answer: ya_consent, which remembers your answer for a year. Without it we would have to ask again on every page. It stores your choice and nothing else.
Changing your mind is not a special request. Refuse at any time and we delete what was stored. If you accepted and want that undone, use the banner again or clear this site's data in your browser; both have the same effect.
We do not fingerprint your device, and we do not treat refusal as an invitation to identify you another way.
The app is not a browser and sets no cookies at all. None of this applies to it.
5. Why we do it
| What for | Which data | Our lawful basis |
|---|---|---|
| Running and protecting this website | Server logs | Legitimate interests: keeping our own site up and safe |
| Remembering your cookie answer | The ya_consent cookie | Legal obligation: we have to record what you chose |
| Understanding how the page is used so we can improve it | The measurement in section 4 | Your consent, given in the banner and withdrawable at any time |
| Understanding how the app is used so we can improve it | The measurement in section 2 | Your consent, given on first launch and withdrawable in the app's Settings |
| Sending you the newsletter | The email address you typed into the signup form | Your consent, given by subscribing and withdrawable with the unsubscribe link in any email |
| Replying to you | Your email and what you wrote | Legitimate interests: answering someone who wrote to us |
| Meeting legal obligations | Whatever the law requires | Legal obligation |
You do not have to give us anything. The newsletter form is the only thing on this site that asks for personal data, it is entirely optional, and there is no contract or legal requirement to provide any.
No automated decisions and no profiling. The app's daily list is arithmetic running on your own phone, on the circles you chose. It decides nothing about you, and we never see it. The usage measurement in section 2 is counted in aggregate and is not used to build a profile of anyone.
6. Who else is involved
We do not sell personal data and we run no advertising. Three providers, all acting only on our instructions:
- Vercel Inc. hosts the site and keeps the server logs. United States.
- PostHog, Inc. provides the measurement, for both the website and the app. Data stored in Frankfurt.
- Resend, Inc. stores the newsletter list and sends the newsletter. United States.
Apple is not on that list: it sells the app on its own account, not ours. See section 3.
We also disclose personal data where the law requires it.
7. Data leaving the UK
All three providers are US companies, so some data reaches the United States. Those transfers rely on the UK Extension to the EU-US Data Privacy Framework, and otherwise on the standard contractual protections in each provider's agreement with us. Ask us at support@yarite.app if you would like the details.
8. How long we keep it
-
Server logs: for the period our host retains them, which is days rather than months. We copy them nowhere.
-
Measurement: 12 months, and only if you allowed it.
-
The identifier on your device: 12 months, or until you withdraw or clear it.
-
Campaign tags on your device: 28 days, and only if you allowed that category.
-
Your cookie answer (
ya_consent): 12 months. -
Your newsletter address: until you unsubscribe, or until we close the list.
-
Your emails: while we are dealing with what you wrote about, and for 12 months after, unless we need them longer for a legal claim.
-
App measurement: 12 months, and only if you allowed it. The people you keep in Yarite have no retention period here, because we never receive them.
9. Your rights
You can ask us for a copy of your personal data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, or ask for it in a portable form.
You can withdraw consent. Where we rely on your consent, which is the measurement in section 4 and the newsletter, you can take it back at any time: through the banner for measurement, through the unsubscribe link in any email for the newsletter. Both are as easy to withdraw as they were to give. Withdrawing does not make what we already did unlawful, and it stops us going further.
You can also object. Where we rely on legitimate interests, which is the rest of section 5, you can tell us to stop at any time and you do not have to give a reason.
Email support@yarite.app. We will reply within one month.
These rights cover what we hold. They do not reach what is on your phone, because we have no access to it: that is yours, and deleting the app removes it.
10. Complaints
If you are unhappy with how we have handled your data, tell us: support@yarite.app, or by post to Ourfires LTD, 41 Devonshire Street, London W1G 7AJ, United Kingdom. We will acknowledge it within 30 days, look into it, and tell you the outcome.
You can also complain to the Information Commissioner's Office at ico.org.uk. You do not have to come to us first.
11. Security
The site is served over HTTPS only. Access to our hosting and measurement accounts is limited and protected by multi-factor authentication where the provider supports it.
The app's security is its design: no account, and none of your people, notes or history ever transmitted, so there is no store of your relationships with us to breach. The one thing the app can send, if you allow it, is the anonymous usage measurement in section 2, over HTTPS. What is on your phone is protected by your passcode and by iOS.
12. Children
Yarite is made for everyone. There is nothing in it beyond the people you put there: no feed, no messages from us, no advertising, no recommendations, and no connection to other users.
Because the app never sends the people a user keeps in it, and because its usage measurement is anonymous, optional, and identifies nobody, a younger user is in the same position as anyone else. We hold nothing that says who they are, so there is nothing for us to profile, share, or lose. The website measures visits in the same aggregate way, whatever the visitor's age.
13. Changes
We may update this policy. The current version is always here, with the version number and date at the top. If a change matters, we will say what changed.
14. Contact
Privacy questions, requests, and complaints: support@yarite.app.
Ourfires LTD, 41 Devonshire Street, London W1G 7AJ, United Kingdom. Company number 10271109. VAT GB412141456. ICO reference C1950730.