Consumer Health Data Privacy Policy

YAZA is intended for adults. You must be 18 or older to use YAZA. See our Terms of Use for the full requirement.

The words you type in conversation with yaza. If you choose to join our waitlist, we also collect the email address you provide — kept entirely separate from your conversations, used only to notify you when access opens. Nothing else is required: no real name, no health questionnaire, no diagnosis, no symptom tracker.

A random anonymous identifier is kept in your browser so that your messages stay together in one conversation. To limit abuse, we also keep a one-way scrambled form of your network (IP) address, which cannot be turned back into the address, together with a message counter.

Only to generate a response to you. Within a single conversation, yaza can also look back at earlier parts of that same conversation, so you don't have to repeat yourself. yaza does not carry what you said in one conversation into another.

Directly and only from you, when you type it. We do not buy, infer, or purchase data about you from anywhere else.

• Anthropic, through their business API (not the free Claude.ai chat app), to generate yaza's responses. Under Anthropic's commercial terms, your messages are not used to train their models, and Anthropic automatically deletes inputs and outputs from its systems within 30 days — longer only if a conversation is flagged as violating its usage policy, or if the law requires it.
• OpenAI, through their business API (not the free ChatGPT app), to create a private numerical representation of your messages so yaza can search earlier parts of the same conversation. The same no-training commitment applies here.
• Supabase, our database provider, to store your conversation securely.

We deliberately built yaza on these companies' business-grade products rather than their free consumer apps, specifically because business terms carry stronger data protection by default. None of these three companies may sell your data, or use it for any purpose beyond providing this specific service to us. We do not sell consumer health data. We do not use it for advertising. We have no advertising business at all.

Conversations are stored in our database, linked only to a random anonymous identifier, and are automatically deleted 30 days after the conversation began. You can delete a conversation yourself at any time with the delete control in the app, or ask us to delete it by email.

Temporary records used for abuse prevention are also deleted automatically: the scrambled network identifier and its counter after 30 days and, in the rare fallback mode, a short-lived copy of a conversation after 45 minutes of inactivity (removed by an hourly cleanup). Waitlist emails are kept until you ask us to remove them.

Anthropic and OpenAI keep their own copies for a limited time under their business terms, as described above. Deleting a conversation here does not instantly delete those copies.

You can ask us, at any time, to show you what we hold, to delete it, or to withdraw any consent you've given — by writing to hello@withyaza.com. We will respond within 45 days.