Consumer Health Data Privacy Policy
This policy is separate from our general Trust & Privacy page, and describes specifically how we handle information that may reveal something about your emotional or mental state — as required under Washington State's My Health My Data Act.
Age requirement
YAZA is intended for adults. You must be 18 or older to use YAZA. See our Terms of Use for the full requirement.
What we collect
The words you type in conversation with yaza. If you choose to join our waitlist, we also collect the email address you provide — kept entirely separate from your conversations, used only to notify you when access opens. Nothing else is required: no real name, no health questionnaire, no diagnosis, no symptom tracker.
Why we collect it
Only to generate a response to you, and — if you create an account — to let yaza recall earlier parts of your own conversation, so you don't have to re-explain yourself.
Where it comes from
Directly and only from you, when you type it. We do not buy, infer, or purchase data about you from anywhere else.
Who processes it, and why
- Anthropic, through their business API (not the free Claude.ai chat app), to generate yaza's responses. Under these API terms, your data is never used to train their models and is automatically deleted from their systems within days.
- OpenAI, through their business API (not the free ChatGPT app), to create a private numerical representation of your messages so yaza can search your own past conversation. The same no-training commitment applies here.
- Supabase, our database provider, to store your conversation securely.
We deliberately built yaza on these companies' business-grade products rather than their free consumer apps, specifically because business terms carry stronger data protection by default. None of these three companies may sell your data, or use it for any purpose beyond providing this specific service to us. We do not sell consumer health data. We do not use it for advertising. We have no advertising business at all.
How long we keep it
Account conversations are kept while your account is active. Anonymous session data is automatically deleted after 45 minutes of inactivity. Anonymous trial records are automatically deleted after 30 days.
Your rights
You can ask us, at any time, to show you what we hold, to delete it, or to withdraw any consent you've given — by writing to hello@withyaza.com. We will respond within 45 days.