Yadira is an AI companion for people living with dementia, paired with tools for the family member or professional caring for them. This policy explains what we collect, why, who else sees it, and how to have it removed. It is written to be read by an exhausted caregiver, not a lawyer.
The short version. We collect what the product needs to work: your account, the profile you write about the person you care for, their memories and daily routine, and the conversations they have with the companion. We do not sell any of it. We do not use it to train advertising models. If you want it gone, email us and it is gone.
Who we are
Yadira, contactable at partnerships@yadira.chat. That address reaches a person, and it is also the address for any privacy request described below.
What we collect
- Account details. Your email address and a user id, through Firebase Authentication. If you sign in with Google, we receive your email address and basic profile from Google — we never see your Google password.
- The care circle you create. The name, stage, hobbies and daily rhythm of the person you care for, your own name and relationship to them, the memories and reassurances you write, the daily care log, and the phone number the help button rings.
- Conversations. What the person in your care says to the companion and what it says back, plus photographs uploaded into a conversation, plus your own private conversations with the caregiver co-pilot and at the lodge.
- Voice. Audio recorded when someone speaks to the companion, sent for transcription and discarded after it is transcribed. We do not keep recordings.
- Payment details. Handled entirely by Stripe. We never see or store a card number; we store only whether a subscription is active and its identifiers.
- Basic technical data. Ordinary server logs, and preferences kept in your own browser such as text size, theme, and whether notifications are switched on.
Google user data, and Google Calendar
If you choose to connect Google Calendar, Yadira asks for one permission — https://www.googleapis.com/auth/calendar.events — which lets it read and write calendar events. It is used for exactly two things:
- Writing your routine out. The daily routine you build in Yadira becomes recurring events in your own calendar, so Google's own reminders reach you on every device you own — including when Yadira is closed.
- Reading your week in. Upcoming events from your primary calendar are shown in the caregiver hub, so an appointment is visible next to the care you are planning.
Your calendar data never reaches our servers. The connection runs entirely in your browser, talking to Google directly. Yadira's backend has no credentials for your calendar, no copy of your events, and no ability to act on your calendar when you are not using the app. The access token is held in your browser tab's session storage and is discarded when you close the tab — Yadira does not store a long-lived token, so it cannot touch your calendar in the background.
You can disconnect at any time in Settings, and revoke Yadira's access completely at myaccount.google.com/permissions. Events already written to your calendar stay there until you delete them, the same as any other event.
Yadira's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we do not transfer Google user data to third parties except as necessary to provide or improve the feature you asked for, to comply with applicable law, or as part of a merger or acquisition; we do not use it for advertising; we do not sell it; and no human at Yadira reads it except with your explicit permission, to resolve a support issue you have raised, or where required by law.
Why we process it, and what we never do with it
Everything above exists to make the companion work for one family: to let it remember the person it is talking to, to give a caregiver an honest picture of the week, and to raise the alarm when the help button is pressed. We use it to operate and improve the service for you.
We do not sell your data. We do not share it with advertisers or data brokers. We do not use the contents of a family's conversations, memories or care logs to train our own models.
Who processes it alongside us
Yadira is a small product built on other people's infrastructure. These services process data on our behalf, each limited to what its job requires:
- Google Firebase — authentication, and the database holding your care circle.
- Google Gemini and OpenRouter — generating the companion's replies and the caregiver reports.
- Inworld — turning text into the companion's spoken voice, and transcribing speech.
- Stripe — subscription payments.
- Resend — the weekly caregiver email.
- Our voice-calling provider — placing the help-button call and the weekly briefing call to the number you saved.
- Render — hosting.
Where it is kept, and for how long
Care-circle data lives in Google Firebase and is kept while your account exists, because a companion that forgets is the thing this product is built to prevent. A copy is also mirrored into your own browser's storage so the app keeps working when the connection drops. Voice recordings are not retained past transcription. Server logs are short-lived and operational.
Your choices
- See it or take it. Email us and we will provide a copy of your care circle's data.
- Correct it. The profile, memories, routine and care log are all editable in the app.
- Delete it. Email partnerships@yadira.chat from your account address and we will delete your account and its care circle. There is no self-service delete button in the app yet; until there is, that address is the way, and we will confirm when it is done.
- Disconnect Google Calendar. In Settings, and at your Google account's permissions page.
- Turn off notifications and emails. Notifications in Settings; email preferences via the link in any email we send.
Children
Yadira is for adults. Account holders must be 18 or older, and it is not directed at children.
Security, honestly stated
Each family's data sits in its own isolated circle, readable only by that account, enforced by database rules rather than by convention. Traffic is encrypted in transit. Passwords are handled by Firebase Authentication and never seen by us. No system is perfect, and we would rather say so than imply otherwise.
Not a medical record
Yadira is a companion and a tracking tool, not a medical device, and it is not intended to be a system of record for regulated medical data. The care logs you keep here are your own notes, not a medical record, and nothing generated from them has been clinically reviewed. Please do not enter information you are not authorised to share.
Changes to this policy
If we change how data is handled in a way that matters, we will update this page and tell account holders in the app.
Contact
partnerships@yadira.chat — for questions, access requests, and deletion requests alike.