yaptime: what we store and who can see it

yaptime is a Mac app that answers chat messages for you. It runs on your computer and uses the Claude Code or Codex you already have, on your own Claude or ChatGPT plan, to answer from the folders you choose. A small invite-only server passes messages between the people in a chat. Questions? Contact us. This page explains what happens to your data.

What stays on your Mac

• Your files. Your agent reads them where they are, only in the folders you allowed, and can't change them. yaptime never uploads a folder. Only the answer your agent writes goes into the chat, plus any file you attach to a message yourself.
• The app's own data: your settings, the folders you allowed, your Can share and Keep private rules, drafts, questions waiting for you, usage counts and a copy of your chats.
• Your sign-in. It is kept in the macOS Keychain, never in a file.
• Run history. Each answer is a normal Claude Code or Codex session, so it is kept where those tools keep their sessions (~/.claude/projects, ~/.codex/sessions) under their own clean-up settings. yaptime doesn't read or change those files.

What goes to Anthropic or OpenAI

To answer, the app starts Claude Code or Codex on your Mac. As whenever you use them, they send the question, the recent messages in that chat, your rules and the files they read to Anthropic or OpenAI. That happens under your account, on your plan and under that company's terms. yaptime has no AI account of its own and never sees your plan's sign-in.

What our server stores

• Your account: the email address and account ID from the account you sign in with, the handle you choose, and when your yaptime app last connected and its version. We don't store that account's password or access token.
• Chats and messages: who is in each chat, invites, and every message sent in chats you're in, with sender and time, and any files sent with those messages. An agent's answer can carry the model name and the project-relative files it used; only you (its author) can see them.
• Security records: an audit log of account and chat events, such as sign-ins, sign-outs, invites, joins and removals. It never records message text.
• Failed sign-ins: the email and IP address of failed sign-in attempts, used to block repeated attempts.
• Sign-in data: short-lived sign-in tokens, stored hashed.

The server never sees your folders, your rules or your files, other than files you attach to a message.

How your data is encrypted

• In transit: every connection, from the app and from your browser at sign-in, uses TLS (HTTPS and secure WebSockets).
• At rest: everything we store, including backups, is encrypted at rest.
• Messages aren't end-to-end encrypted: the server decrypts them to deliver them. Admins have no tool for reading chats they aren't in.

Who can read your messages

• The people in the chat. People who join "from when they joined" only see messages sent after they joined.
• The AI service behind each person's agent. When someone's agent answers, the chat's messages go to Anthropic or OpenAI under that person's account and that company's terms.

Don't put anything in a chat that you wouldn't want everyone in it to see.

What protects you

• Only people you invite, and who accept, can read a chat.
• Your agent reads only the folders you allowed, can't change files, and follows your Keep private rules. When a question needs more, it asks you instead of answering.
• Your app shows every answer your agent wrote and the files it read. You can stop it at any time.
• Nobody can post as you: the sender comes from your sign-in, never from the message.
• The server checks who sent each message and that they are in the chat. It does not read or filter what you send.
• Messages that reach your agent are given to it as information from other people, never as instructions, and they can't change your rules.

When your agent answers for you

With Auto (the default), your agent sends its answer on its own, so people can hear back while you're away. It checks in with you after every 25 answers, or as often as you choose. Choose Ask before sending in Settings to read every answer first and send it or throw it away. The setting covers all your chats.

How long we keep things

• Messages and their files are kept until they are deleted. The app can't delete messages or set a shorter keeping time yet: email us and we'll do it.
• Database backups go back up to 30 days, so deleted data can remain in backups for that long.

Your choices

• Sign out: sign out in the app's Settings. To sign out on every device, for example if you lose a laptop, choose "Sign out everywhere". Signing in on a new device also signs the old one out.
• Leave, export or delete: to leave a chat, get a copy of one, or delete your account and remove you from every chat, email us. Your earlier messages stay in a chat you leave.

Contact

Questions or deletion requests: contact us.

Last updated: 7 November 2026.