YaSage

Your data, plainly explained

Privacy Policy

Effective June 11, 2026

Who we are

YaSage (“we”, “us”) is a personal anticipation assistant available at yasage.com. It reads your calendar and the personal context you choose to share, and writes you a daily brief: what is coming up, how to prepare, and one thing worth doing today. This policy explains what data YaSage collects, how it is used, and the choices you have. For anything unclear, write to khaled@khaledelahmad.com.

What we collect

Google account basics. When you sign in with Google we receive your name, email address, and profile picture to create your account.

Calendar events (read-only). With your permission, YaSage reads your Google Calendar events — titles, times, locations, descriptions, and attendees — to generate your brief. We never create, modify, or delete events.

Contacts you select (read-only). If you choose to import contacts, you pick exactly which ones. For each selected contact we store the name, email address, and birthday so your brief can anticipate occasions like birthdays. We never import your full contact list automatically, and we never message your contacts.

Context you provide. Your profile (language, timezone, preferred brief time, tone), life details you enter (your birthday, marital status, anniversary, a short bio), and people you add with their relationship to you and key dates. If you upload a CV, we extract its text into your bio and discard the file — the document itself is not stored.

Generated content. The briefs, per-event insights, preparation packs, and recommendations YaSage writes for you are stored so you can see them again and so we avoid re-processing the same events.

How we use your data

For one purpose: producing your daily brief and the preparation help around it — event insights and tips, a prioritized action, occasion reminders, and the brief email you asked for. We do not sell your data, share it with data brokers, or use it for advertising. Ever.

Google user data and Limited Use

YaSage’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Concretely:

  • Google data is used only to provide the user-facing features described above.
  • We do not use Google user data to develop, improve, or train generalized artificial-intelligence or machine-learning models.
  • We do not transfer Google user data to third parties except to the service providers below as needed to run YaSage, to comply with law, or as part of a merger or acquisition with prior notice to you.
  • No human reads your Google data except with your explicit consent (e.g. a support request), for security purposes, or where required by law.

Service providers

YaSage runs on a small set of processors, each receiving only what its job requires:

  • Vercel — application hosting.
  • Supabase — our database, where your account, events, and briefs are stored. Data is encrypted in transit and at rest.
  • Anthropic — the AI model that writes your brief. Event and context details are sent to Anthropic’s API to generate it; under the API terms this data is not used to train Anthropic’s models.
  • Resend — delivers your brief email to your inbox.
  • Google — sign-in, Calendar, and Contacts, governed by your Google account permissions.

Retention and deletion

We keep your data for as long as your account is active. You can revoke YaSage’s access to your Google data at any time at myaccount.google.com/permissions; after revocation we can no longer read your calendar or contacts. To delete your account and all stored data — events, people, briefs, and tokens — email khaled@khaledelahmad.com and we will complete the deletion within 30 days.

Security

All traffic is encrypted with TLS. OAuth tokens and your data are stored in our database with platform-level encryption at rest, and access is limited to what the application needs. No method of storage is perfectly secure, but we keep the surface area deliberately small: one app, one database, no third-party analytics or ad trackers.

Children

YaSage is not directed at children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect their data.

Changes to this policy

If this policy changes materially we will update this page and note the new effective date above. Continued use of YaSage after a change means you accept the updated policy.

Privacy Policy — YaSage