Privacy

Yearling exists to help you understand your child more clearly. To do that we handle sensitive information — their schedule, the activities they do, notes you log, and the weekly briefs Nova writes. We treat that information the way we’d want our own family’s data treated: collected narrowly, never sold, processed by a small set of vendors we’ve vetted, and deletable on request.

This page is written in plain English. If anything is unclear, email hello@yearling.app and we’ll explain.

Yearling is operated by Sohaib Waheed. During the closed alpha the user base is small, known, and invite-only. You are reading this because you are (or may become) one of those early users.

• Account info. Your name, email, and authentication state — provided via Clerk when you sign up.
• Household info.Your children’s first names, ages, pronouns, school, and any notes or photos you choose to add.
• Activity logs. The calendar events, sparks, and reflections you log about each child — the raw material Nova uses to write your weekly brief.
• Voice recordings. If you use voice capture, short audio clips are transcribed by Deepgram and stored as text. Raw audio is not retained after transcription.
• Calendar data. If you connect Google Calendar, we read event titles, times, and locations. We do not read event descriptions, attendees, or private calendars.
• Usage telemetry. Server logs of API calls, token usage, and errors so we can diagnose issues and keep costs in check. This does not include the content of prompts or responses.

• We do not sell or rent your data to anyone.
• We do not train general-purpose AI models on your data. Nova uses Anthropic’s hosted Claude models; per Anthropic’s API terms your data is not used to train their models either.
• We do not collect payment information during the alpha.
• We do not run third-party advertising, marketing pixels, or analytics trackers that share identifying data.

To run Yearling we rely on a small set of vendors. Each is bound by their standard terms and privacy commitments:

• Clerk— authentication & identity.
• Supabase — primary database (Postgres, encrypted at rest), hosted in the US.
• Anthropic — Claude models used by Nova to generate insights and briefs.
• Deepgram — voice transcription.
• Resend — transactional email (brief, whisper, intention reminders).
• Inngest — background job scheduling.
• Vercel — application hosting.

Yearling is a parent-facing product. The logged-in user is always a parent or guardian, not a child. Children are data subjects, not account holders. You control what’s recorded, what stays, and what’s shared.

If you share a brief or spark with a villager (a grandparent, coach, or trusted adult), we scope the token so they see only that single shared item — not the rest of your account.

We keep your data for as long as your account is active. You can remove a child’s profile at any time from your account settings, and you can delete your entire account the same way. Account deletion removes your household, children, activity logs, sparks, briefs, and generated insights from our database within 7 days. Backups retained by our hosting providers for disaster recovery roll off on their own schedule (typically 30 days).

You have the right to see what we hold about you, correct it, or delete it. For the closed alpha the fastest path is to email hello@yearling.app — we will respond within 7 days.

Data is transmitted over HTTPS. Database access is gated by row-level security policies scoped to your user ID; even our own staff cannot impersonate an account without an explicit admin operation. Secrets are stored in environment variables on Vercel, never checked into source control.

The alpha is our first exposure to real users. We expect bugs. If you ever see something that looks wrong, email us.

We may update this page as the product grows. Material changes will be communicated via email to active users before they take effect.

Questions, corrections, or deletion requests: hello@yearling.app.