Effective Date: October 8, 2026
Last Updated: October 8, 2026
Legal Entity: YAP Technologies Holding Company, a Delaware corporation
Business Address: 6231 Residencia, Newport Beach, CA 92660, United States
This Privacy Policy explains how the legal entity identified above ("YAP," "we," "us," or "our") collects, uses, shares, retains, and protects information in connection with the YAP mobile application, the theyapapp.co website, and related services (the "Service"). It also describes privacy choices and rights. This Policy is incorporated into our Terms of Use.
The short version
YAP analyzes conversations you are part of and produces conversational statistics, summaries, and other results.
Conversation audio leaves your device and is transmitted over encrypted connections to YAP's infrastructure and third-party processors used for transcription and speaker diarization.
YAP does not sell your personal information or use conversation content for advertising.
AssemblyAI, OpenAI, and pyannoteAI do not use YAP conversation content to train their models under YAP's current settings and/or the providers' applicable terms. YAP does not opt in or consent to such training.
Those processors may temporarily retain content to provide their services, maintain security, prevent abuse, and meet legal obligations. Relevant retention practices are described below.
You are responsible for obtaining any consent required from every conversation participant before starting a YAP.
You can revoke microphone access in iOS Settings and can request deletion of your account and associated data.
1. Scope and Who This Applies To
This Policy applies to information we handle when you use the Service. It does not apply to information handled by third parties whose services you access independently, including Apple, your mobile carrier, or an app or platform to which you choose to share YAP output.
The Service is intended for users who are at least 13 years old. Users between 13 and 17 may use it only with the consent of a parent or legal guardian, and a higher minimum age may apply in some jurisdictions. See Section 14.
2. Other People in the Conversation
When you use YAP, the microphone may capture the voices of people who are not YAP users. Their audio may be transmitted off your device to YAP's infrastructure and to service providers that process audio or transcript data on YAP's behalf.
You are responsible for telling every participant that YAP is analyzing the conversation and for obtaining any consent required by applicable law before you enable recording or analysis. Laws concerning recording, interception, and analysis of conversations vary by jurisdiction. This Policy describes YAP's data practices; it does not obtain consent on your behalf.
If you participated in a conversation analyzed using YAP and wish to make a privacy request, contact privacy@theyapapp.co. Our ability to identify data relating to a non-user may be limited.
3. Information We Collect
3.1 Conversational audio, transcripts, and derived analytics
When you enable a YAP session, the Service accesses your device microphone and captures conversational audio. Audio is transmitted off your device over encrypted connections for processing.
AssemblyAI. YAP uses AssemblyAI for pre-recorded speech-to-text processing. YAP has opted out of AssemblyAI's model-improvement program. AssemblyAI states that opted-out Customer Data is not used to train its AI or machine-learning models or for benchmarking. For asynchronous/pre-recorded processing, AssemblyAI states that deletion of customer-uploaded audio begins at 24 hours and occurs within 48 hours. Final transcription artifacts may otherwise be retained until deleted unless a time-to-live (TTL) is configured. YAP will use a short retention setting and/or delete transcription artifacts after successful ingestion into YAP.
pyannoteAI. YAP uses pyannoteAI for speaker diarization and related speaker-processing functionality. Under pyannoteAI's current terms, Media API audio uploads are deleted within 48 hours, temporary worker-side audio copies are deleted after processing, and job outputs such as diarization segments and confidence information are deleted within 24 hours. Certain request inputs and technical job metadata may be retained for service operation, records, debugging, billing, and support. pyannoteAI states that it does not use customer audio files or outputs to train, improve, or develop its models without the customer's explicit consent. YAP does not provide that consent.
OpenAI. YAP uses the OpenAI API to analyze transcripts and structured conversational information and generate certain results. OpenAI states that API data is not used to train or improve its models unless the customer explicitly opts in. YAP does not opt in. Applicable YAP requests are configured with storage disabled (for example, store: false where supported). Under OpenAI's standard API controls, abuse-monitoring logs may nevertheless contain customer content and may be retained for up to 30 days, unless longer retention is required by law or reasonably necessary to protect OpenAI's services or third parties.
Users can view the full transcript of their own sessions in the app. YAP may retain transcripts, structured results, and derived analytics in its own systems as necessary to provide History and other user-facing features. YAP does not use conversational audio, transcripts, or derived analytics for advertising or to train YAP machine-learning models.
3.2 Speaker diarization and biometric identifiers
YAP uses speaker diarization to distinguish speakers within a conversation. Diarization determines which portions of a session were spoken by different participants; it is not intended to determine a person's real-world identity.
YAP does not identify who a speaker is. Within a session, speakers are distinguished automatically, and the user assigns names to those speakers manually. YAP does not recognize a person's voice across different sessions.
YAP does not intentionally create a persistent voiceprint or voice template for recognizing a person across unrelated YAP sessions, and does not use voice data to authenticate a person or compare a participant against a biometric database.
We do not sell, lease, trade, or otherwise profit from voice data. If YAP later introduces persistent speaker recognition or another feature that creates or uses biometric identifiers, we will update this Policy and obtain any consent required by applicable law before enabling that feature.
3.3 Account, device, purchase, and support information
If you create or use an account, we may collect an email address, username or display name, authentication identifier, and account preferences and settings.
We may receive limited device and operational information necessary to operate and secure the Service, such as app version, operating-system version, device or installation identifiers, IP address, request timestamps, server logs, and error information. Apple may also provide diagnostics where a user has chosen to share them with developers.
If you purchase YAP+, Apple processes the payment. YAP may receive transaction identifiers, product information, subscription status, entitlement status, and related purchase metadata from Apple and RevenueCat. YAP does not receive your full payment-card number or financial-account credentials.
If you contact us, we collect the information you choose to provide, such as your email address, message content, attachments, screenshots, and related metadata.
4. How We Use Information
We use information to provide transcription, diarization, analytics, summaries and shareable results; create and secure accounts and History; manage YAP+ subscriptions; detect fraud and abuse; diagnose errors and maintain reliability; respond to support and privacy requests; send service-related communications; and comply with law and protect our rights, users, and Service.
We may create aggregated or de-identified statistics that cannot reasonably be linked to a particular person. We maintain such information in de-identified form and do not attempt to re-identify it.
5. Legal Bases for Processing
Where applicable, YAP processes personal data to perform its contract with you, based on consent where consent is required, to pursue legitimate interests such as security and service reliability, and to comply with legal obligations. Where processing could reveal special-category data, YAP relies on an applicable legal basis and, where required, explicit consent.
Where we rely on consent, you may withdraw it at any time without affecting processing already carried out. For minors in the EEA or UK, the age at which a child may independently consent to an online service varies by jurisdiction; where parental authorization is legally required, it must be obtained before use.
6. How We Share Information
We do not sell personal information and do not share personal information for cross-context behavioral advertising.
We disclose information to service providers and processors used to operate the Service, including cloud hosting and infrastructure providers, AssemblyAI for pre-recorded transcription, pyannoteAI for speaker diarization, OpenAI for transcript and structured-data analysis, authentication providers, RevenueCat for subscription management, and support or operational providers.
We may also disclose information at your direction; when reasonably necessary to comply with law or valid legal process, enforce our Terms, protect rights or safety, or prevent fraud or illegal activity; in connection with a merger, financing, acquisition, reorganization, or sale of assets; or for another purpose that we explain and you authorize.
Shareable results. YAP can generate award cards, recaps, and similar results that you may choose to share through your device's share sheet or other apps. These results can include the names you assigned to conversation participants, statistics about their participation, and short excerpts or summaries of the conversation. Results are shared only when you choose to share them. Once shared, copies are controlled by the recipients and the apps or platforms you used, and YAP cannot delete them. Please consider the other participants before sharing.
7. Retention
AssemblyAI uploaded audio: deletion begins at 24 hours and occurs within 48 hours for asynchronous/pre-recorded uploads under AssemblyAI's current published policy.
AssemblyAI final transcription artifacts: subject to YAP's TTL/deletion configuration. YAP will use short retention and/or delete artifacts after successful ingestion.
pyannoteAI Media API audio: deleted within 48 hours under pyannoteAI's current terms. Temporary processing copies are deleted after processing. Job outputs are deleted within 24 hours. Certain request/configuration data and technical metadata may be retained longer for operational purposes.
OpenAI API content: not used for model training by default. Under standard API controls, abuse-monitoring logs may retain customer content for up to 30 days, subject to OpenAI's stated exceptions.
YAP transcripts, results, and History: retained as needed to provide saved History until deleted by the user or account deletion, subject to operational backup and legal-retention requirements.
Account, purchase, and support records: retained as reasonably necessary to provide the Service, manage subscriptions, comply with law and accounting obligations, resolve disputes, and enforce agreements.
You may request deletion of your account and associated data through the in-app deletion mechanism or by contacting privacy@theyapapp.co. Some information may remain for a limited period in backups or where retention is required by law or necessary for security, fraud prevention, dispute resolution, or enforcement of our agreements.
8. Security
We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit, access controls, and security measures appropriate to the nature of the data. No system is perfectly secure, and we cannot guarantee absolute security. If a security breach triggers a legal notification obligation, we will provide the required notices.
9. Your Choices
You may revoke microphone access in iOS Settings; decide when to start and stop a YAP session; choose whether to share YAP results (and what they reveal about other participants); manage notifications in iOS Settings; unsubscribe from marketing email where applicable; and use the in-app account/data deletion mechanism or contact privacy@theyapapp.co.
10. California Privacy Rights
If you are a California resident, applicable law may give you rights to know or access, correct, delete, and obtain a portable copy of personal information, and to receive information about categories of information collected, purposes of use, and categories of recipients. You also have the right not to be discriminated against for exercising applicable privacy rights.
YAP does not sell personal information or share it for cross-context behavioral advertising. Conversation audio may constitute sensitive personal information because it can contain the contents of communications. YAP uses such information to provide the requested Service, maintain security, and maintain the quality and safety of the Service, rather than to infer characteristics for advertising.
To exercise an applicable California privacy right, email privacy@theyapapp.co with the subject "Privacy Request" or use the in-app privacy/deletion controls. We may verify your identity before completing a request.
11. Privacy Rights in Other U.S. States
Residents of other U.S. states with comprehensive privacy laws may have rights to access, correct, delete, or obtain a copy of personal data, and in some states to appeal a denied request or obtain information about recipients. YAP does not engage in targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. Use the process in Section 10 to submit a request.
12. EEA, UK, and Switzerland Privacy Rights
Where applicable, you may have rights to access, correct, delete, restrict or object to processing, receive portable data, withdraw consent, and lodge a complaint with a supervisory authority. YAP does not use conversation analytics to make solely automated decisions that produce legal or similarly significant effects.
Submit requests to privacy@theyapapp.co.
13. International Data Transfers
YAP is based in the United States and uses service providers that may process information in the United States and other jurisdictions. If you access the Service from outside the United States, your information may be transferred to countries with different data-protection laws. Where required, YAP will use legally recognized transfer mechanisms and contractual safeguards.
14. Children and Teens
The Service is intended for users aged 13 and over and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. If we learn that we have done so, we will take appropriate steps to delete it and terminate the associated account.
Users aged 13 to 17 may use the Service only with the consent of a parent or legal guardian. Where local law sets a higher age at which a child may independently consent to an online service, that higher age applies.
Because YAP captures the voices of everyone present, users must also comply with applicable consent requirements for other participants, including minors.
15. Do Not Track and Global Privacy Control
The Service does not use conversation data for cross-context tracking or behavioral advertising. Our website may recognize legally required browser-based privacy signals, such as Global Privacy Control, where applicable.
16. Advertising and Future Changes
The Service does not currently use conversational audio, transcripts, or derived conversation analytics for advertising, ad targeting, or audience building. If we materially change our data practices, we will update this Policy before the change takes effect and obtain consent where required.
17. Changes to This Policy
We may update this Policy from time to time. If a change is material, we will provide notice as required by applicable law and update the "Last Updated" date. Where consent is legally required for a new use, we will obtain it before that use begins.
18. Contact Us
YAP Technologies Holding Company
6231 Residencia, Newport Beach, CA 92660, United States
Privacy requests and questions: privacy@theyapapp.co
General and support: info@theyapapp.co
Security reports: privacy@theyapapp.co (subject line "Security")
Provider-policy basis for the processor disclosures
The processor descriptions above are based on the providers' published terms and data-control documentation current as of October 7, 2026. Provider practices may change, and YAP should periodically review these disclosures for accuracy.
AssemblyAI: model-training opt-out; asynchronous production retention.
OpenAI: API data controls, including default no-training and standard abuse-monitoring retention.
pyannoteAI: Terms of Use, including media/job retention and the no-training-without-explicit-consent commitment.