Privacy policy
The short version
yeah/no is a private log of things you’ve tried and whether you liked them. Your logs are yours: nobody else can read them — not other users, and not in any public feed.
We run no ads, no advertising trackers and no analytics SDKs in the app. We don’t sell or share your data.
What we store
Your account: a random account ID created the first time you open the app. If you choose “Back up”, the email address and password you give us (passwords are stored only as a one-way hash by our auth provider).
Your logs: what you entered — item name, brand or place, category, yeah/no, the date you tried it, and any note — plus when each was created.
Some conveniences stay only on your phone and never reach us: your recent searches, whether you dismissed the backup reminder, and the weekly nudge (a reminder scheduled on your device — no push service, no tracking).
Scanning, Near me and Photos (yeah/no+)
Barcode scanning happens on your phone: camera frames are read on the device and never recorded or saved. When you scan a barcode you’ve already logged, nothing leaves the phone. If it’s new, only the barcode number is sent to Open Food Facts / Open Beauty Facts (free, open product databases) to look up the product name. The barcode is then saved on your item so the next scan works offline.
Near me asks for your location only while you’re using the app, and only when you tap Near me. Your location is used once, on your phone, to ask Apple Maps for places around you. We never store or receive your location — only the place name you pick is saved with your log.
Photos you attach to a log stay on your phone. We never upload, receive or store them; they are kept inside the app (and in your phone’s own backup) and are deleted when you remove them, delete the log, or delete your account. The camera is used only when you tap Take a photo, and picking from your library uses Apple’s photo picker, which shares only the photo you choose.
How it’s protected
Data is stored with Supabase (database hosting in the US, us-west-1) and is sent over encrypted connections (HTTPS).
Every table is protected by row-level security: the database itself only returns rows that belong to the signed-in account.
How we use it
Only to run the app for you: show your list, search it, and compute your stats on your device.
A future version may let you opt in to sharing anonymous yeah/no counts or sharing with friends. That will always be off until you turn it on, and this policy will be updated before it ships.
Your controls
Export: Settings → Export everything gives you a CSV of all your logs.
Delete: moving an item to Trash keeps it for 30 days, then it’s deleted automatically. Settings → Delete account & all data permanently deletes your account and every log immediately.
If you’re in the EU or UK (GDPR)
The data controller is CATS22, LLC, 11900 Roaring River Ave, Bakersfield, CA 93311, USA.
We process your data because you asked us to provide the app to you (performance of a contract, GDPR Art. 6(1)(b)). We don’t use it for advertising, profiling or automated decisions.
Your data is stored in the United States by our processor, Supabase, Inc. Transfers from the EU rely on the European Commission’s Standard Contractual Clauses, which are part of Supabase’s Data Processing Addendum.
You can access and export your data (Settings → Export everything), correct it (edit any item), and erase it (Settings → Delete account & all data) at any time, in the app. For anything else — including objecting to processing or a copy in another format — email us. You also have the right to complain to your local data protection authority.
We keep your data while your account exists. Items in Trash are deleted after 30 days; deleting your account deletes everything immediately.
Age
yeah/no is for people 16 and older. We don’t knowingly collect data from anyone younger; if you believe someone under 16 has an account, email us and we’ll delete it.
Contact
Questions or requests: mariano@cats22.agency. yeah/no is made by CATS22.