Privacy Policy

1. Who We Are

Yaply ("we", "our", "us") is an AI-powered travel operating system available at yaply.live and on the Google Play Store. We are operated by Yaply Technologies, India.

2. Information We Collect

Account Information:

• Name and email address (when you register)
• Profile photo (optional, from Google if you sign in with Google)
• Passport country (to personalise visa and travel recommendations)

Trip Data:

• Trip destinations, dates, and preferences you enter
• Expenses you log in the expense tracker
• Diary entries and travel journals you write
• Places you save in the discover feature

Usage Data:

• Features you use within the app
• Device type and operating system
• IP address (for rate limiting and security)

What we do NOT collect:

• We do not track your real-time location without permission
• We do not access your contacts or photos without permission
• We do not record audio without your explicit action
• We do not share data with advertisers

3. How We Use Your Information

• To generate personalised trip plans and recommendations
• To provide live translation and camera scan features
• To show emergency contacts relevant to your destination
• To save your trips, expenses and travel diary
• To improve the app and fix bugs
• To send important account notifications (not marketing spam)

4. AI Features and Third-Party Services

Yaply uses the following third-party services to power our AI features:

• Groq AI — for generating trip plans, translations and tools (groq.com)
• DeepL — for high-quality translations (deepl.com)
• Google OAuth — for sign-in with Google (google.com)
• Google Places API — for location search and nearby stations

When you use AI features, your input (destination, preferences, text) is sent to these services to generate responses. We do not send personally identifiable information beyond what is necessary.

5. Data Storage and Security

• Your data is stored on secure servers hosted on Render.com
• Passwords are hashed using bcrypt — we never store plain text passwords
• Authentication uses JWT tokens with 30-day expiry
• We use HTTPS encryption for all data in transit
• We implement rate limiting to prevent abuse

6. Data Retention

We retain your account data as long as your account is active. If you delete your account, we delete all your personal data within 30 days. Trip data and expenses are deleted immediately upon account deletion.

7. Your Rights

You have the right to:

• Access all data we hold about you
• Correct inaccurate data
• Delete your account and all associated data
• Export your trip data
• Withdraw consent at any time

To exercise any of these rights, email us at privacy@yaply.live

8. Children's Privacy

Yaply is not intended for children under 13 years of age. We do not knowingly collect data from children under 13. If you believe we have collected data from a child, please contact us immediately.

9. Cookies

We use minimal cookies only for authentication (keeping you logged in). We do not use advertising cookies or tracking cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notification. Continued use of Yaply after changes constitutes acceptance of the updated policy.

11. Google Play Store

The Yaply Android app (available on Google Play Store) uses the same privacy practices described in this policy. The app uses a Trusted Web Activity (TWA) wrapper around our web application. No additional data is collected by the Android wrapper.