Privacy Policy

Last updated: 24 March 2026

The short version

→ Your brain dump text is processed by AI and immediately discarded. We never store it.
→ We collect your email only if you choose to join the waitlist.
→ We store anonymous usage statistics (task counts, not content).
→ We do not sell your data. Ever.
→ You can ask us to delete everything at any time.

1. Who we are

Yohaanei is a digital sanctuary built to help people untangle their mental load. It is operated as an independent product. For privacy enquiries, contact privacy@yohaanei.com.

2. What we collect and why

Brain dump textSent to AI for classification. Never stored.To provide the Un-Do List result

Email addressStored in our database (Supabase)Waitlist — only if you choose to join

Feedback ratingThumbs up / down + source pageProduct improvement

IP addressRate limiting — stored temporarilyPrevent abuse

Usage metadataTask counts, AI provider, model (no content)Product analytics, quality monitoring

3. What we do NOT collect

→ The content of what you type in the brain dump field is never stored in our database.
→ We do not use cookies for tracking or advertising.
→ We do not build user profiles.
→ We do not run ads.

4. Third-party processors

We use the following services to operate Yohaanei. Each acts as a data processor under our instructions:

SupabaseDatabase — email, feedback, usage statssupabase.com/privacy

Google / Anthropic / OpenAIAI processing — brain dump text (not stored)Per active provider policy

ResendTransactional email deliveryresend.com/privacy

Kit (ConvertKit)Email marketing — waitlist onlykit.com/privacy

Cloudflare TurnstileBot protection — no personal data storedcloudflare.com/privacypolicy

5. Legal basis (GDPR)

For users in the European Economic Area (EEA) and UK, we process data under the following legal bases:

→ Legitimate interests — rate limiting and abuse prevention.
→ Contract performance — processing your input to return AI results.
→ Consent — email capture (you opt in voluntarily).

6. Your rights

Under GDPR and applicable law, you have the right to:

→ Access — request a copy of data we hold about you.
→ Deletion — ask us to erase your data ("right to be forgotten").
→ Portability — receive your data in a machine-readable format.
→ Correction — ask us to fix inaccurate data.
→ Withdraw consent — unsubscribe from the waitlist at any time.

To exercise any right, email privacy@yohaanei.com. We respond within 30 days.

7. Data retention

Email addressUntil you unsubscribe or request deletion

Feedback ratings12 months, then anonymised

IP addresses (rate limiting)30 days rolling window

Usage metadata12 months, then aggregated

8. Data transfers

Our infrastructure providers (Supabase, Vercel) may process data in the United States. Where required, we rely on Standard Contractual Clauses (SCCs) as the legal mechanism for cross-border transfers under GDPR.

9. Children

Yohaanei is not directed at children under 16. We do not knowingly collect data from minors. If you believe a child has submitted personal data, contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy. Material changes will be communicated to waitlist subscribers by email. The "Last updated" date at the top will always reflect the current version.