Privacy Policy

Yaven is a macOS menu-bar assistant that helps you triage and reply to messages, drafts in your voice, and acts on your connected accounts only when you approve. This policy explains what data Yaven processes and why.

Our approach in one line

Yaven is local-first. Your emails, messages, drafts, and the profile it builds about you are stored on your own Mac. We do not upload them to our servers or sync them to a cloud.

What data we process, and why

1. Content you ask Yaven to act on — emails, messages, calendar events, and what is on your screen at the moment you press a Yaven shortcut. This is stored locally on your Mac. When you ask Yaven to draft a reply or answer a question, the relevant text and/or a single screenshot is sent for that one request to our AI provider (Anthropic) to generate the response, and to the relevant service through our integration provider (Composio) when you approve an action. iMessage is read only on your Mac and only ever leaves your machine as a draft you have approved.

2. Account connections — when you link Gmail or Google Calendar, the connection is held by our integration provider (Composio). We can see which services you connected, never their contents.

3. Anonymous usage analytics — to improve the product we collect event counts (such as app opens, app version, which permissions you granted, and character counts) via PostHog. We never collect the content of your messages, emails, or drafts. You can turn analytics off at any time in Settings, which stops collection and clears the local analytics identity.

4. Technical data in transit — requests to our relay carry an account identifier so the correct account is used. The relay stores nothing; it only logs errors transiently for debugging.

How Yaven uses Google user data

Yaven's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. When you connect a Google account, Yaven requests only the scopes needed to read and triage your mail, draft and send replies you approve, and show your calendar. Specifically:

• Gmail — to read messages for triage and summaries, and to create, save, and send the replies you approve.
• Google Calendar — to show your upcoming events and your next-meeting countdown.
• Basic profile (email, name) — to identify your account.

We do not use Google user data for advertising, we do not sell it, and we do not use it to train generalized AI or machine-learning models. Google user data is used only to provide and improve the user-facing features above, and is transferred to others only as needed to provide those features (our AI and integration providers, listed below) or with your consent.

Permissions Yaven asks macOS for

• Accessibility — to deliver the global shortcuts and type drafts into your reply boxes.
• Screen Recording — so the draft and ask features can see what is on screen at the moment you press the shortcut. Yaven does not watch or record your screen in the background.
• Full Disk Access — only if you connect iMessage, to read your local Messages database on your Mac.
• Notifications — for approval and completion alerts.

Who we share data with

We use a small number of processors, each handling data only for the purpose listed:

• Anthropic — generates drafts and answers. Inputs are not used to train models.
• Composio — brokers your account connections and relays approved API calls.
• Cloudflare — hosts our stateless relay, which holds no API keys in the app and stores no request content.
• PostHog — anonymous analytics, only if you have not disabled it.

We do not sell your personal data, and we do not use your messages to train AI models. Our processors are based in the United States; where personal data is transferred outside the UK/EEA, the transfer is covered by each provider's data processing agreement and Standard Contractual Clauses (or equivalent).

How long we keep data

Content and the context profile are stored on your Mac for as long as you keep Yaven installed; removing the app removes the local data. Analytics events, if enabled, are retained by PostHog for the period set in our analytics configuration. Relay logs are transient.

Your choices and rights

Because most of your data lives on your own device, you can delete it directly: Settings → Delete all data erases everything Yaven stored on your Mac and signs you out. To revoke Yaven's access to your Google account at any time, visit your Google Account permissions. Depending on where you live, you may have rights to access, correct, delete, restrict, port, or object to the processing of your personal data. To exercise any right that involves data held by our processors, contact us at the address below and we will respond within one month.

Children

Yaven is not intended for anyone under 16.

Changes

We will post changes here and, for material changes, notify you in the app or by email.

Contact

Questions about this policy or your data? Email support@yaven.us.