Last updated: 1 November 2026. This policy explains what the Yaari app and website (yaari) collect, why, who processes it and how you can delete it. It is written for India's Digital Personal Data Protection Act, 2023 and the IT Rules, 2021; people in other countries have the same rights, listed below.
Yaari is only for adults aged 18 or older. We do not knowingly process children's data. Accounts that appear to belong to someone under 18 are removed.
| Data | Why |
|---|---|
| How you sign in | One of: your mobile number (sign-in by one-time code, and one account per number); a guest account, which has no number or email and exists only in the browser that made it (if you sign out of it, clear that browser's data or lose the device, it can't be opened again); or, where offered, your Google, Kakao, Facebook or Apple account, from which we receive what that service sends at sign-in (its account id, and usually your email address, name and picture). |
| Name, gender, date of birth, city, bio, profile photo | Your profile. Other people see your name, gender, age (not your date of birth), city, bio and photo only after they have been matched with you. Gender and date of birth cannot be changed after sign-up, to prevent fake profiles. |
| Interests and extra profile photos (optional) | Up to 5 interest tags you choose and up to 4 more photos. They show on your profile to the same people who can see your profile. Your interests also help random chat prefer someone who shares one (after language); the person you meet sees which ones you share. Each photo is checked for nudity on your own device before it is added. |
| Posts, chat messages, photos and videos you send | To deliver them to the people you choose. Media is stored privately and shown only to people you have been matched with. On the website, a photo for a post or a highlight is checked for nudity on your own device before it is added. |
| Automatic word filter and spam limits | Our own server (no outside service) compares what you write with a list of swear words and slurs. In chat, room and group messages, posts, comments, your bio and status, room notices and polls, a listed word is replaced with stars before it is stored. A name, @ID, room title or tag, group name or highlight title containing one is refused. The same line sent again and again, or links and phone numbers sent repeatedly to people who aren't your friends, are held back as spam. Nobody reads your messages for this. |
| Matches, reports and blocks | To run matching, keep blocked people away from you, and act on reports. Reports are reviewed by a person on our team; an account reported by several people is suspended automatically while we review it. |
| Video calls | In the app and on the website, the other person's video is checked for nudity on your own device; no picture leaves it. If nudity is detected, the video is hidden and a report (who, when, no images) goes to our safety team. Calls themselves are not recorded. |
| Rooms | To run rooms (talk, music and games): chat, live audio, shared music and Ludo. People in the same room see your name, age, city and photo, and while you are on the stage anyone browsing rooms can see them too. Your voice is relayed live only while someone is on the stage, and is not recorded. On the website, your device decides when you are speaking (voice activity detection), so that noise between your words isn't sent; the sound isn't sent anywhere for this check. Room chat (including photos and question cards), raised hands, song votes, reactions and Ludo results are stored so everyone in the room sees them; the room's settings (who may join, its code, its announcement) are stored with the room. |
| Photos in rooms | Before a photo is sent to a room, it is checked for nudity on your own device; nothing leaves your device for this check, and a photo that looks like nudity is not sent. Photos are stored privately and shown only to people in that room (or there in the last day), blurred until they tap to view. |
| Notifications | Your in-app notifications (friend requests and acceptances, a friend's new messages, room invites) record who, what kind and when, never the message text. To send phone notifications, the app stores a notification token for your device with its language and time zone (so nothing is sent at night, 23:00 to 08:00 your time, except friend requests); a notification carries only the sender's name and the kind of event. We note when you last had the app open so no notification is sent while you are using it. Phone notifications are delivered by Google Firebase Cloud Messaging. You can turn them off in your phone's settings; signing out removes the token from use. |
| Translations (Android app) | When you tap Translate on a chat line, its text is sent to Anthropic (Claude) to be translated, and the translation is kept for 30 days so the same line isn't translated twice. We count how many lines you translate each day (up to 400). |
| Diagnostics | To find and fix crashes and see whether the main steps work (signing up, getting a match, sending a first message, opening or joining a room, starting Ludo or a video call, buying Plus). When something breaks we receive the error message and the place in the code where it happened, the app version, the platform (web or Android) and the screen, linked to your account if you are signed in. For the main steps we receive only the step's name and the time. On the website we also count visits (the country worked out from your connection, the device type and the page that sent you; the address itself is not kept) and the app language. Diagnostics never contain your messages, photos, phone number or what you say in calls, and they are never used for advertising. The Android app keeps them on our own server (Supabase); the website sends errors to Sentry and the steps and visits (usage statistics) to PostHog (in the EU), which process them only for us. You can turn usage statistics off in Settings; in Europe they stay off unless you allow them. |
| Identity check (ID document and a live selfie) | So that each person has one account and gender, age and country are real. The check runs in Didit's verification page: you photograph an identity document and take a short live selfie, which is compared with the document photo. We receive and keep only your gender, date of birth, nationality and issuing country, and a one-way fingerprint (salted hash) of the document number, used to stop the same document verifying another account; we do not keep your name, document number, document images or selfie. After the check, your gender, date of birth and country on Yaari come from the document and cannot be changed. People under 18 are not allowed. Others see only that you are verified. |
| Chat ratings (manners) | After a random chat in which you both wrote, each of you can rate the chat as good or not good with up to three tags. Ratings from the last 90 days make a manners score; others see the score and the good tags you received, never who rated or any bad tags. A very low score pauses random chat. |
| Purchase records from Google Play | To grant Premium or the 24-hour gender pass. We receive a purchase token from Google; we never see your card or UPI details. |
Video calls and room audio are relayed live and are not recorded by Yaari. In the Android app, screenshots and screen recording are blocked in chats, video calls and other people's profiles; a website cannot block them.
On the website, your browser's local storage keeps what the site needs to work and the choices you make: your sign-in session, language, light or dark theme, whether you have seen the welcome tour, display and sound settings (room sounds, volumes, blurring photos), short-lived links to photos you have already loaded, and your answer about usage statistics. The website sets no advertising or analytics cookies and stores nothing in your browser for diagnostics or statistics.
We do not sell your data and do not use it for advertising.
All traffic is encrypted in transit (HTTPS/TLS). Access rules in the database let people read only what they are allowed to see. Messages are not end-to-end encrypted: Yaari's systems can access them to handle reports and legal requests.
Your profile and posts: until you delete your account. Other data is removed automatically:
Grievance Officer, Yaari
Email: grievance@yaari.app
Complaints about intimate images or impersonation are acted on within 2 hours of receipt.
See also: Terms of use · Child safety standards