Privacy Policy

1. Information We Collect

We collect information you provide directly, including account registration details, organization settings, client and parent records, student records, class and slot records, payment records, uploaded payment slips, message templates, communications, notes, and support requests. We also collect technical information such as device, browser, log, session, and usage data.

2. Customer and Student Data

Businesses using Yarne may enter information about their own customers, parents, students, children, clients, trainers, or staff. Yarne processes that information to provide the Service. The business using Yarne is responsible for giving required notices and obtaining required permissions or consents from the people whose data it enters into the Service.

3. How We Use Information

We use information to provide, secure, maintain, and improve Yarne; authenticate users; manage organizations; process customer portals and public inquiry forms; track bookings, enrollments, payments, receipts, and reports; send transactional messages; provide support; detect abuse; and comply with legal, security, and operational obligations.

4. AI Processing

Payment slip images and related payment details may be sent to Anthropic's Claude API to extract payment amount, date, reference, payer, and confidence information. Yarne may also use AI to summarize records or help draft communications. AI output is used to support workflow automation and should be reviewed for important decisions.

If a business enables the LINE AI assistant, inbound and outbound LINE message content, conversation context, customer identifiers, and assistant state may be processed by Yarne and Anthropic so the assistant can answer questions, summarize recent context, detect escalation needs, and hand the conversation back to a person. Businesses can turn off the LINE AI assistant in their AI settings, and customers can ask the business or Yarne to delete or stop processing their conversation data where required by law.

5. Payment and Messaging Providers

Yarne may share limited data with service providers needed to operate the app, including Supabase for database, auth, and storage; Vercel for hosting; Anthropic for AI processing; Resend for transactional email; Stripe for subscription billing; LINE for messaging when enabled; PostHog for product analytics when configured; and Google for OAuth or workspace services when configured. We do not sell personal data.

6. Cookies and Analytics

We use cookies and similar technologies for authentication, security, session management, preferences, and product analytics. We do not use advertising cookies in the Service.

7. Data Storage and Security

We use technical and organizational safeguards intended to protect data, including TLS in transit, provider-managed encryption at rest, role-based access controls, Row Level Security where applicable, audit logging, and private storage for uploaded payment slips. No system is perfectly secure, and you are responsible for protecting your own account credentials.

8. Retention and Deletion

We retain information for as long as needed to provide the Service, comply with legal or financial obligations, resolve disputes, maintain security, and support business records. Account deletion removes associated organization data within a reasonable period unless retention is required by law, security, audit, backup, or legitimate business needs.

LINE conversation records and AI thread summaries are retained for up to 180 days unless a shorter period is required or the business deletes the data earlier. Audit logs are retained indefinitely because they are used for security, incident response, and financial accountability. Backups may retain deleted data for a limited period before normal rotation removes it.

9. International Processing

Yarne and its providers may process and store information in countries other than where you or your customers are located. By using the Service, you understand that information may be transferred to and processed in those locations.

10. Your Choices and Rights

Depending on your location, you may have rights to request access, correction, deletion, export, restriction, or objection related to personal data. To make a request, contact us using the email below. If your data is controlled by a business using Yarne, we may direct your request to that business.

11. Children's Information

Yarne is intended for use by businesses and adults, not for direct use by children. Tutoring schools or parents may enter student or child information into the Service for business administration. The business using Yarne is responsible for any required parental, guardian, or school consent and for complying with laws that apply to children's information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted here with a revised date.

13. Contact

Privacy questions or data requests: support@yarne.app.