Privacy Policy

1. What Information Does the Platform Collect?

We may collect information from you directly, from your device when you give the mobile app permission, automatically when you use the Platform, and from your interactions with websites you choose to automate. Some of this information may be considered "personal information" under various applicable laws. We consider information that identifies you as a specific, identified individual (such as your name, email address, or account credentials) to be personal information.

Note that we may de-identify personal information so that it is non-personal, such as aggregating or converting it to a code, sometimes using a function commonly known as a "hash." We will treat de-identified information as non-personal to the fullest extent allowed by applicable law.

Information You Provide Directly

• Account Information: When you create an account or sign in, we collect your name, email address, and user ID. If you add a phone number to your account, we also collect that number and its verification status. You may also add a profile photo. When using the Chrome extension, we access your existing web application session to authenticate you.
• Messages, Files, and Media: The messages you send, and the photos, videos, voice notes, and documents you attach to a chat or add to the canvas.
• Requests to the AI Assistant: The questions and instructions you give the Yantra assistant, and the results it produces for you.
• Health and Fitness Information: Data you choose to sync from Health Connect or Apple Health, readings from Bluetooth health devices you pair, and information you log yourself. See Section 4.
• Configuration Settings: You may provide server configuration details, preferences, and settings through the Platform. These are stored locally in your browser or in your account.
• Payment Information: When you buy a subscription, your card details are sent directly to our payment processor. We do not store full card numbers. Purchases made through the App Store or Google Play are processed by Apple or Google.
• Communications: Information you provide when contacting our support team or providing feedback.

Information From Your Device (Mobile Apps)

The mobile apps ask for each of these permissions only when you use the feature that needs it. You can turn any of them off at any time in your device settings.

• Contacts: If you allow it, the app reads the names, phone numbers, and photos in your address book to show which of your contacts already use Yantra so you can start a chat. Only the phone numbers are sent to our servers, where they are compared with the verified phone numbers of Yantra users at the time of the request. We do not store your contact list or use it for any other purpose. Names and photos stay on your device.
• Microphone and Speech Recognition: When you use voice input, the app records what you say and turns it into text. Depending on your device, this is done by your phone's built-in speech recognition service (provided by Apple or Google) or by our speech-to-text service provider. We do not keep voice input recordings after they are transcribed. Voice notes you send in a chat are kept as messages.
• Camera and Photo Library: Used only when you take or choose a photo, video, or document to attach. Only the items you pick are uploaded.
• Health Connect and Apple Health: Only if you connect them. See Section 4.
• Bluetooth: Used to connect to health devices you pair, such as a scale or blood-pressure monitor. On Android 11 and earlier, Android requires the location permission to scan for Bluetooth devices. Yantra asks for it only when you pair a device, and does not read or store your location.
• Notifications: If you allow notifications, we store a push token for your device so we can deliver them. Notification content is delivered through Apple's and Google's push notification services.

Information We Collect Automatically

• Authentication Tokens: The Platform reads session cookies and authentication tokens from Yantra web application domains to authenticate API requests to our backend services.
• Usage Information: We collect information about how you interact with the Platform, including features used, pages visited, and search queries performed.
• Device Information: Browser type, operating system, device type, screen resolution, and your device's language and region settings (used to show prices in your currency).
• Log Data: Our servers record your IP address, request times, and error details when you use the Platform. We use this to keep the Platform secure, prevent abuse, and fix problems.
• Location (Web Application, Optional): If you allow your browser to share your location, the web application uses it to show local results, such as weather and nearby places. If you do not, the weather panel may estimate your approximate city from your IP address. We use location only to provide these features.
• Tab Metadata (Extension): When using the Chrome extension, we access browser tab information including tab IDs, page URLs, page titles, and window identifiers to route automation commands to the correct browser tabs.
• Page Content (Extension): When you activate browser automation on a tab, the extension captures page content through Chrome DevTools Protocol (CDP), including DOM snapshots, accessibility tree data, page screenshots, and JavaScript execution results.
• Navigation Events (Extension): The extension monitors page navigation events on relay-attached tabs to maintain automation state.

Information We Do Not Collect

The Platform does not collect:

• Your device's location in the mobile apps
• Text messages (SMS) stored on your device
• Files on your device other than those you choose to upload
• Browsing history of tabs not actively attached to the relay
• Keystrokes or form input on non-automated tabs
• Full payment card numbers (these are handled by our payment processor)

2. How Does the Platform Use the Information It Collects?

We use information collected from or about you, including personal information, as disclosed in this Policy, including to:

• Enable AI Search and Automation: Provide search results, AI-driven browser automation, and task completion services.
• Provide Messaging: Deliver your messages and attachments, and help you find contacts who already use Yantra.
• Provide Fitness Features: Show your health scores, trends, and coaching, as described in Section 4.
• Authenticate Your Session: Verify your identity and maintain secure connections between the Platform and our backend services.
• Personalize Your Experience: Customize search results, recommendations, and interface preferences based on your usage patterns.
• Maintain Relay Connections: Manage WebSocket connections to the relay server, monitor connection health, and automatically reconnect when connections are interrupted.
• Process Payments: Manage your subscription and billing.
• Communicate With You: Respond to your questions, send important notices, and provide customer support.
• Keep the Platform Secure: Detect and prevent fraud, abuse, and unauthorized access.
• Improve the Platform: Diagnose technical issues, analyze usage patterns, and improve reliability and performance.
• Comply with Legal Requirements: Fulfill legal obligations and enforce our terms and policies.

We do not use your content, including your health data, to train AI models, and we do not use it for advertising.

3. Under What Circumstances Does the Platform Share or Disclose Information?

We do not sell your personal information to third parties. We do not share your personal information with third parties for those third parties' own direct marketing purposes. We may share information in the following circumstances:

AI Processing

Your requests to the assistant, the files you attach, and the information needed to complete them are processed by the Yantra AI backend and by AI model providers that process it on our behalf to generate a response. For example, when you ask the fitness coach a question, the coach reads the health data it needs to answer you. Search queries, page content, accessibility data, screenshots, and tab metadata from relay-attached tabs are sent to the Yantra AI backend over secure connections. This data is processed to complete your requested tasks and is not used for advertising or marketing.

Service Providers

We use third-party service providers that act on our behalf, such as providers of cloud hosting and storage, AI models and speech-to-text, sign-in and authentication, payment processing, email, SMS and push notification delivery, and map and place search. We give these providers only the information they need to provide their service to us.

Other Yantra Users

The people you chat with see the messages and files you send them, and your name and profile photo. Members of a workspace you belong to can see your name, profile photo, and the content you share in that workspace. If you verify a phone number for Yantra Chat, people who have that number in their contacts can see that you use Yantra.

Messaging Services You Choose

If you choose to receive messages from Yantra over SMS, WhatsApp, Telegram, or iMessage, the content of those messages is delivered through that service and is also subject to its privacy policy.

Business, Tax, and Legal Purposes

To the extent permitted by law, we may disclose your information to third parties to protect the integrity of the Platform, enforce our Terms of Use, or comply with lawfully authorized government requests such as subpoenas or court orders.

Business Transfers and Transitions

We may, in evaluating or engaging in a sale of assets, merger, or other corporate transaction, transfer or assign your personal information, which you agree that we may do without your further consent.

With Your Consent

We may share information when you direct us to do so, for example when you connect a third-party account and ask Yantra to act in it.

4. Health and Fitness Data

The Yantra mobile apps can read health and fitness data from Health Connect (Android) and Apple Health (iOS), and can read measurements from Bluetooth health devices you pair. This only happens if you choose to connect them. This section explains what we access, how we use it, who can see it, how long we keep it, and how to delete it.

What We Read

• Health Connect (Android): steps, distance, active calories burned, exercise sessions, elevation gained, heart rate, resting heart rate, heart rate variability, sleep, weight, body fat, lean body mass, VO2 max, oxygen saturation, respiratory rate, body temperature, blood pressure, and blood glucose.
• Apple Health (iOS): steps, walking and running distance, active energy, resting energy, exercise minutes, workouts, heart rate, resting heart rate, heart rate variability, sleep, wrist temperature during sleep, time in daylight, mindful minutes, weight, body fat, lean body mass, body mass index, waist circumference, VO2 max, oxygen saturation, respiratory rate, body temperature, blood pressure, and blood glucose.

You choose which types to share, and you can change this at any time in Health Connect or the Health app. When you first connect, Yantra reads the last 30 days. After that, it reads the data added since the last sync each time you open the app. Yantra does not read your health data in the background.

What We Write

Only if you turn on "Also save to Health Connect" (or Apple Health) for a paired device, Yantra saves that device's readings: weight, body fat, lean body mass, body mass index (iOS), blood pressure, heart rate, oxygen saturation, body temperature, and blood glucose. Yantra writes only readings taken from your paired devices, and never changes or deletes data written by other apps.

Bluetooth Health Devices

Yantra can read scales, blood-pressure monitors, heart-rate straps, pulse oximeters, thermometers, and glucose meters that use standard Bluetooth health profiles. For scales that keep a profile for each user, Yantra sends your age, sex, and height to the scale so it can calculate body composition.

Information You Log

You can also add health information yourself on the Fitness page or by telling the coach, such as body measurements, meals, lab results, or cycle tracking. We treat it the same way as the data described above.

How We Use It

• Only to provide the fitness features you see in Yantra: your daily Sleep, Recovery, and Strain scores, trends in your weight, body composition, and blood pressure, health alerts, and coaching.
• Your health data is sent over an encrypted connection to Yantra's fitness service and stored with your account, so these features work across your devices and on the web.
• When you chat with the fitness coach, or reply to a coach message, the coach reads the health data it needs to answer you, such as your recent sleep, recovery, and workouts. That data is processed by AI model providers on our behalf only to generate the reply.
• If you turn on coach messages by SMS, WhatsApp, Telegram, or iMessage, those messages may include health information, such as your Recovery score, and are delivered through that service.

What We Never Do

• We do not sell your health data or transfer it to advertising platforms, data brokers, or information resellers.
• We do not use your health data to serve ads, including personalized ads.
• We do not use your health data to determine credit-worthiness, lending, insurance, or employment eligibility.
• We do not use your health data to train AI models.
• Yantra staff do not look at your health data unless you ask us to (for example, in a support request), it is needed for security, or the law requires it.

Limited Use

Yantra's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. Data from Apple HealthKit is not used for advertising or data mining, and is not shared with third parties except as needed to provide Yantra's health and fitness features.

How Long We Keep It and How to Delete It

• We keep your health data with your account until you delete it or delete your account.
• Stop syncing: in the app, open Health and tap Disconnect. Choose "Stop and delete synced data" to also delete the data Yantra synced from Health Connect or Apple Health.
• Delete by source: on the Fitness page, use "Remove data" on any source, including your Bluetooth devices.
• Remove access: on Android, you can also remove Yantra's access in Health Connect settings. On iOS, open the Health app, then Apps, then Yantra.
• Delete your account: we delete your health data within 30 days, as described in Section 5.
• Readings from paired devices are also kept on your phone for up to 120 days, and are removed when you uninstall the app.

Yantra's fitness features are for general wellness only. They are not a medical device and do not diagnose or treat any condition.

5. Data Retention and Deletion

We keep personal information only as long as we need it to provide the Platform, for the purposes described in this Policy, or as required by law. How long we keep each kind of information:

• Account information: for as long as your account exists.
• Messages, files, and AI conversations: until you delete them or delete your account. Some deleted items, such as files, are kept in a recoverable state and are erased when you delete your account, or sooner if you ask us.
• Health and fitness data: until you delete it or delete your account (see Section 4). Records of coach messages we text you are deleted after 45 days.
• Contacts: not kept. Phone numbers from your contacts are used only while we look for matches.
• Voice input: not kept after it is turned into text. Voice notes you send in a chat are kept as messages.
• Verification codes: stored only in hashed form and expire after 10 minutes.
• Server logs: kept for up to 30 days.
• Billing and tax records: kept for as long as tax and accounting laws require, even after you delete your account.
• Security records and SMS consent records: kept as long as needed to protect the Platform, prevent fraud, and honor your messaging choices.
• Data on your device: data the mobile apps and the Chrome extension store on your device stays there until you uninstall them or clear their data.

Deleting Your Account

You can delete your account at any time:

• In the mobile app: open the menu, tap Account, then Delete Account.
• On the web: sign in at yantra.app/account/details and choose Delete account.
• By email: write to support@yantra.app from the email address on your account.

When you delete your account, we immediately remove your name, email address, phone numbers, and profile photo from it, and remove you from your workspaces and teams. We delete the rest of the data associated with your account, including your messages, files, AI conversations, and health data, within 30 days. We keep only what we must keep for legal, tax, security, or fraud-prevention reasons, as listed above. Messages and files you shared with other people, such as in a group chat or a shared workspace, may remain available to them.

You can also delete individual chats, AI conversations, files, or health data without deleting your account, or ask us to delete specific data by writing to support@yantra.app.

6. Third Party Content and Links

This Policy does not apply to the practices of third parties that we do not own or control, including any third-party websites and services that may be linked to or from the Platform. The Platform may interact with websites at your direction, and those websites are governed by their own privacy policies and terms of service. We encourage you to review the privacy policies of any websites you interact with through the Platform.

The Chrome extension accesses the following first-party domains for authentication and configuration purposes only: *.yantra.app, *.cdebase.dev, *.cdebase.io, and dev-cdebase.auth0.com.

7. General Audience Platform

The Platform is not intended for individuals younger than the age of eighteen (18), and we request that these individuals do not use the Platform. We do not knowingly collect information from individuals younger than eighteen (18).

8. How We Handle Data Security

We use commercially reasonable security measures to protect against loss, misuse, and alteration of your personal information under our control, including:

• Encryption: All communication between the Platform, including the mobile apps, and our backend services uses encrypted HTTPS and secure WebSocket (WSS) connections. Your data is stored on cloud infrastructure that encrypts data at rest.
• Token-Based Authentication: Access to the data in your account requires a signed token that identifies you, and your health data can be read only with a token for your own account.
• Hashed Codes: Verification codes are stored only in hashed form.
• Local Storage Isolation: Configuration and session data stored in your browser uses Chrome's built-in storage APIs, which are isolated per-extension.
• No Persistent Server Storage of Page Content: Page content, screenshots, and DOM data transmitted during automation sessions are processed in real-time and are not permanently stored on our servers after the automation task is completed.
• Access Controls: Strict access controls and authentication requirements for all backend services, and limited staff access to personal data.

However, no system can be 100% secure. While we strive to safeguard your personal information, we cannot guarantee or warrant the security of any information you disclose or transmit to us. You use the Platform and provide us with information at your own initiative and risk.

9. Mobile Messaging and SMS

If you give us a mobile number, we may send you text messages to verify that number, to deliver an invitation to an organization, and to send account or security notices. We use a third-party messaging provider to transmit these messages on our behalf.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except with the messaging service providers that transmit messages on our behalf and that are contractually restricted from using that information for their own purposes.

You can stop text messages at any time by replying STOP to any message from us, or by removing the number under Account Settings > Personal Information. We retain a record of your opt-in and opt-out choices so that we can honor them.

Full details, including message frequency, supported keywords, and rate disclosures, are in our SMS Terms of Service.

10. Your Choices About the Information We Collect

Mobile App Permissions

You can turn off access to contacts, the microphone, the camera, photos, Bluetooth, notifications, Health Connect, or Apple Health at any time in your device settings. Features that need that access stop working until you turn it back on.

Health Data

You can stop syncing and delete your health data at any time, as described in Section 4.

Extension Controls

You can disconnect the Chrome extension from the relay server at any time using the popup interface. You can detach individual tabs from automation. When disconnected, no page content or tab data is transmitted to our servers.

Uninstall

You may uninstall the Chrome extension at any time through Chrome's extension management page. Uninstalling removes all locally stored data, including configuration settings, session state, and authentication tokens.

Clear Data

You can reset the extension's configuration to defaults using the "Reset to Defaults" button on the options page, which clears all stored configuration and authentication data.

Account Deletion

You can delete your account in the mobile app, on the web, or by writing to support@yantra.app. See Section 5 for how and what we delete.

11. Consent to International Transfer of Your Information

We are a US-based company. If you are located outside of the United States, please be aware that the information that we collect from you will be transferred to, and stored at, a destination outside of your country. By using the Platform or providing us with any information, you fully understand and unambiguously consent to this transfer to, and processing, usage, sharing, and storage of your information in the United States and other jurisdictions, which may have different or less protective privacy laws than those in your country.

12. Changes to This Privacy Policy

To the extent allowed by applicable law, we reserve the right to change this Policy at any time without prior notice. If we make material changes to this Policy, we will revise the "Updated and Effective" date at the top of this Policy. We may also provide notice through the Platform, the app store listings, or the Chrome Web Store listing. Your continued use of the Platform following these changes constitutes acceptance of the revised Policy.

13. Contact Us

If you have any questions, comments, or concerns regarding our Policy and/or practices, please send an email to: support@yantra.app

CDMBase LLC
d/b/a Yantra

14. Notice to California Residents

California Civil Code Section 1798.83 permits residents of California to request certain details about how their personal information has been shared during the calendar year with third parties for those third parties' own direct marketing purposes. We do not share personal information about you with third parties for their own direct marketing purposes.

If you are a California resident and have questions about our practices, please send your request via email to support@yantra.app with "Your California Privacy Rights" in the subject field. You must include your name, street address, city, state, and zip code.

15. Notice to Nevada Residents

Nevada S.B. 220 provides consumers with the ability to opt out of the sale of their personal information. We do not sell your personal information as defined in S.B. 220. However, you may still submit an opt-out request, and if our practices were to change in the future, we would honor your request. If you are a Nevada resident and would like to opt out, please contact us at support@yantra.app.