Privacy Policy

Yaravaz is built on a simple principle: your data belongs to you. We don't operate servers, we don't use third-party analytics or ad trackers, and we don't track you across apps or websites.

Data Storage

All autograph data (signatures, inscriptions, photos, doodles, voice notes, and metadata) is stored locally on your device. Nothing leaves your iPhone or iPad unless you explicitly choose to sync or share.

iCloud Sync

If you enable iCloud sync, your autograph collection is stored in your personal iCloud account using CloudKit. We don't have access to your iCloud content. It's stored in your iCloud account and protected by Apple's security. You can disable sync at any time in the app's settings.

Cryptographic Seals

Cryptographic seals are generated entirely on your device. We don't send keys or hashes to any server we operate. Verification works offline.

No Ads or Cross-App Tracking

Yaravaz does not include advertising SDKs, cross-app tracking, or tracking pixels. We do not sell or share your data with third parties. Apple may share standard crash and usage reports with us through the App Store if you have opted in to sharing them with developers; we do not operate any additional analytics.

No Accounts

Yaravaz does not require you to create an account or provide personal information to use the app. You set a display name within the app for your autographs. It stays on your device and in your iCloud account. Our website does not collect your email address or any other personal information.

Permissions

Yaravaz may request the following permissions, all of which are optional:

• Camera & Photos: to capture or attach selfies and photos to autographs, and to scan a signing code when the two iPhones cannot find each other.
• Microphone: to record voice notes included in autographs.
• Location: to tag an autograph with where it was collected.
• Bluetooth: to confirm that the two iPhones are next to each other before an in-person signing begins.
• Contacts: to fill in a signer's name from your address book.
• Notifications: to tell you when someone has finished signing.
• Face ID: to protect the private keys held on your device. Authentication is performed locally by iOS; the app never receives biometric data.

You can grant or revoke any permission at any time in iOS Settings. Yaravaz functions without any of them.

Signing Together

Yaravaz is built for autographs collected in person, so before signing begins the two iPhones confirm that they are near each other. Held close, the phones find each other over Bluetooth: the same six digits appear on both screens, and only the owner's Confirm releases the key that opens the request. If the phones cannot find each other, the owner can show a code for the signer to scan instead, which reaches the same confirmation.

Nothing identifying is broadcast. The advertisement carries a single service identifier and no name, no request details, and no stable identifier for you or your device; the owner's name reaches the signer only after the exchange is complete. Selection is by proximity rather than from a list — the app has no screen that lists nearby people, by design.

This exchange carries no content of yours. It performs no discovery of nearby people and is never used for tracking or advertising. The Bluetooth radio is used only while the app is open, and stops as soon as the exchange finishes, times out, or is cancelled. The app requests no Local Network permission and declares no Bonjour services.

When the signer uses their own iPhone, the finished autograph travels back through the owner's private iCloud container, encrypted so that only the intended recipient can open it. We don't send keys or hashes to any server we operate, and the verification data travels with the autograph so it can be checked on the recipient's device.

Third-Party Services

Yaravaz does not share data with any third-party services. The only external service involved is Apple's iCloud, which you control through your device settings.

Changes to This Policy

If we update this privacy policy, we will revise this page and note the new date above.

Contact

Questions about privacy? Reach us at support@taeshe.studio.