This Privacy Policy explains what information Yantagram ("Yantagram", "we", "us", or "our") handles when you use the Yantagram mobile application, the optional internet relay and push notification services, and this website (together, the "Services"). It should be read together with our Terms of Service.
In short: Yantagram is designed so that we know as little about you as possible. There are no accounts, and we do not ask for your name, phone number, or email. Your messages are end-to-end encrypted and stored only on your device. We do not use analytics, advertising, or tracking tools, and we do not sell or share your personal information.
The following information is created and stored on your device, in encrypted storage. We do not collect it and cannot access it:
This information is deleted when messages expire under your disappearing message settings, when you use the panic wipe, or when you uninstall the application. Because we never receive it, we cannot recover it for you.
The application asks for these permissions, and uses them only on your device:
You can change these permissions at any time in your device settings, though some features may stop working.
To form the Bluetooth mesh, your device broadcasts signals that other nearby devices running Yantagram can detect, including a device identifier, and it forwards encrypted messages for other users. Nearby devices can observe that a Yantagram device is present and the timing and size of encrypted traffic, but they cannot read your messages. Any device can be operated by anyone, and we do not control what other users do with what their devices observe.
When the internet relay is enabled, the application sends encrypted messages through relay servers so they can reach contacts who are not nearby. You can turn the relay off in the application's settings. When it is on, the relay we operate receives:
Encrypted messages are set to expire and are deleted from the relay within 7 days. If you add third-party relays in the application's settings, those relays are operated by others under their own policies, and we are not responsible for how they handle data.
When the internet relay is enabled, the application registers with our push notification service so your device can be woken when a message arrives for it. The service stores your device's push token, its platform (iOS or Android), and the routing tags described above. It never receives your identity, contacts, or message contents. Your registration is deleted when you turn the relay off, or automatically if it is not refreshed for 14 days.
Push notifications are delivered by Apple Push Notification service or Google Firebase Cloud Messaging, which process your push token under their own privacy policies. Notifications we send do not contain message contents.
Optional in-app purchases are processed by the Apple App Store or Google Play. We do not receive your name, payment details, or billing address. Purchases are verified on your device and are not linked to your Yantagram identity. Apple and Google handle purchase data under their own privacy policies.
If you email us, for example to request beta access or ask for support, we receive your email address and whatever you choose to include. We use it only to respond to you and to manage the beta, and we delete it when it is no longer needed for those purposes.
This website does not use cookies, analytics, or tracking tools. It stores your light or dark theme preference in your browser's local storage. Our hosting provider processes your IP address and standard request information to deliver the website, and fonts are loaded from Google Fonts, which receives your IP address when your browser requests them.
We use the limited information described above only to provide, operate, secure, and improve the Services, prevent abuse, respond to you, and comply with the law. We do not sell or "share" personal information as those terms are defined under California law, and we do not use it for advertising or profiling.
We disclose information only:
Because of how Yantagram is designed, we hold very little information to disclose, and we cannot provide message contents, contacts, or identities, because we do not have them.
Messages are end-to-end encrypted, and data on your device is stored in encrypted form. However, no method of transmission or storage is completely secure, and Yantagram's security has not been formally audited by an independent third party. We cannot guarantee the security of any information.
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. We will not discriminate against you for exercising these rights.
Because Yantagram has no accounts, most of your data is under your direct control: you can turn off the relay to delete your push registration, use the panic wipe, or uninstall the application to delete everything on your device. For other requests, contact us at dev@yantagram.com. Because we do not link the information we hold to an identity, we may be unable to locate information about you, and we may need to ask you for information to verify a request. You may also have the right to complain to your local data protection authority.
Where the GDPR or similar laws apply, we process information on the basis of performing our contract with you (to deliver messages and notifications), our legitimate interests (to secure the Services and prevent abuse), and compliance with legal obligations.
Our relay and push notification servers are located in the United States. If you use the Services from outside the United States, the limited information described in this policy will be transferred to and processed in the United States, where data protection laws may differ from those in your country.
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or the higher minimum age that applies in your country). If you believe a child has provided us with personal information, contact us and we will delete it.
We may update this Privacy Policy from time to time. The current version will always be posted on this page with its effective date. If we make material changes, we will make reasonable efforts to notify you, for example through the application or this website.
If you have any questions or requests about this Privacy Policy, contact us at dev@yantagram.com.