private by design, not by promise.
no ad ids, no behavioral trackers, no third party sdks. what we do not collect cannot be leaked, sold or subpoenaed.
encrypted · wipeable · never sold
your device
keys live here
readable only here
still on for saturday?
hotel option still open
save the alfama pin
••••••••••••••••
yankee servers
ciphertext only
waiting for sync
— — — —
a8f3 · 9c21 · e4b0 · …
7d12 · b90e · 44af · …
c1e9 · 02dd · 88f1 · …
the stance
how yankee stays private
yours alone
never sold, never used to train ai. your writing stays your writing.
a8f3 9c21 e4b0
7d12 3f91 c06e
b2aa 11fe 90cd
a8f3 9c21 e4b0
private + encrypted
feed, memory and dms live encrypted. plaintext stays on your devices.
your keys, not ours
decryption keys live with you. even we only hold ciphertext blobs.
gone when you say so
you can delete your account any time. memory, messages and history get wiped.
what it means
privacy in plain words
end to end
scrambled on your phone. readable only there.
messages and calls are encrypted on your device and only decrypted on the recipient's. yankee cannot read them, even if asked.
how it works
three layers. no loopholes.
encrypt on device
store only ciphertext
delete for real
the things we do not collect cannot be leaked.
region pinning, quiet permissions, a public transparency report. privacy is architecture, not a marketing page.
frequently asked
short answers about encryption, deletion and what yankee can never see.
No. Direct messages and calls are end-to-end encrypted. Keys live on your devices. Even under a subpoena, we would only be able to hand over ciphertext blobs.
yankee
your data stays yours.
encrypted where it matters, wipeable whenever you want, never sold and never trained on.
