Privacy policy

One person builds and runs yapyap: Sander Boer (Xiduzo), based in the Netherlands. I am the data controller for this website. If anything below is unclear, write to me at [email protected] and a human (me) will answer.

This policy covers the yapyap website at yap-yap.app and the yapyap app. They are deliberately different: the website knows a little, and I designed the app to keep me knowing nothing.

I keep a privacy-friendly, cookieless analytics tool (Umami) that I host myself. It counts page views and rough referrers so I know the site works and where visitors arrive from. It does not set cookies, build a profile of you, fingerprint your device, or follow you across other sites. The numbers are aggregate.

The legal basis is my legitimate interest in seeing whether the site reaches anyone. The measurement needs no consent because it identifies no one.

yapyap runs on your own computer or phone. The app processes and stores recordings, transcripts, summaries, and any notes on your device. The app does not upload them to me, and I have no way to read them. There is no account to sign into and nothing syncing to a cloud you do not control.

If I ever stop maintaining yapyap, your copy keeps working with your data right where it is. That is not a privacy footnote. It is the entire reason the app exists.

yapyap works fully offline out of the box. If you decide to connect a third-party AI provider (your own cloud transcription or language model), the audio or text you send goes directly from your device to the provider you chose. It travels under their terms, with your key. That traffic does not pass through me. It is opt-in, it is yours to disable, and the local default never sends anything anywhere.

As few hands as I could manage. The website relies on these processors, each doing one narrow job:

• Resend delivers any email I send you, such as your licence key or an occasional product update.
• Cloudflare serves and protects the site. It processes your IP address to route traffic and block abuse.
• Umami (self-hosted) is the cookieless analytics above.

I do not sell, rent, or trade your data, and I never will. I would give your data to someone else only if the law genuinely compelled me to, and there is vanishingly little to give.

The site sets no tracking or advertising cookies. There is no consent banner because there is nothing to consent to.

Analytics data is aggregate and identifies nobody, and I retain it only as long as it is useful. If you email me, I keep the thread until it is answered and stale, then it goes.

Because I am in the EU, the GDPR applies, and it gives you real leverage. You can ask to see what I hold, correct it, delete it, export it, or object to my using it. In practice I hold almost nothing about you. Say the word and what little there is goes.

Email [email protected] for any of the above. If you think I mishandled your data, you can also complain to your local data protection authority (in the Netherlands, the Autoriteit Persoonsgegevens).

yapyap and this site are not for children under 16, and I do not knowingly collect their data.

If this policy changes, I will update the date at the top. For anything material, I will say so on the corrections page rather than quietly edit this one.