Privacy policy

This policy explains what [Company] (“Yester”, “we”) collects when you use the Yester app and website, and why. The short version: your backup is encrypted on your Mac with a key we never have, so we cannot read it; we collect the minimum needed to run an account and bill it.

Your backup is private to you

Every file, file name, preview and index is encrypted on your Mac before it is uploaded, using a key that only your recovery key can unlock. We do not hold your recovery key or your data key, and there is no escrow copy — not with us, not with anyone. That is why we cannot recover your data if the key is lost, and why nobody at Yester, and nobody who obtains the stored data, can read your files.

What our servers store alongside the encrypted data is only what billing and housekeeping need: the size of each encrypted piece, when it was written, what storage tier it is on and how long it must be kept. Never file names, never contents, never paths.

What we collect

• Account: the email address (or the private relay address from Sign in with Apple) you sign in with, and the country you chose for your backups.
• Devices: each device’s name, model, built-in storage size, and a hardware identifier so the same Mac isn’t registered twice. The app also reports when the last backup ran, how much is protected, and whether it needs attention, so the account page and support can show it.
• Billing: our payment provider handles your card and shares with us the subscription state (active, renewed, failed, refunded) and the last four digits of the card. We never see full card details.
• Support: what you send us when you write in.
• Website: ordinary server logs (IP address, browser, pages requested) kept briefly for security. No advertising trackers.

Usage telemetry

The app sends aggregate, anonymous counts — backups succeeded or failed, how long restores took, which features are used — so we can see whether Yester works. It is opt-out: switch it off in Settings at any time. It never includes file names, file contents, paths or anything from inside your backup.

Where your data is kept

Your encrypted backup is stored in the country you chose at signup: United Kingdom, Germany, United States or Australia. It does not move between countries. Account and billing records are processed by us and our providers; our infrastructure and payment providers act as sub-processors under contract, and the current list is available on request.

How long we keep it

Backups are kept while a device line is paid for, then for the 90-day grace period, then deleted. Account records are kept while you have an account and for the period the law requires afterwards (typically six years for billing records). Telemetry is aggregate and is not tied to you.

Your rights

Depending on where you live you may have rights to access, correct, export or delete your personal data, to object to processing, and to complain to a supervisory authority. Write to us and we’ll help. Note that we can only give you what we have: we cannot decrypt, export or “recover” the contents of a backup, because we cannot read it.

Children

Yester is not directed at children under 16 and we don’t knowingly collect their data.

Changes

If we change this policy in a way that matters, we’ll tell you in the app or by email before it takes effect.

Contact

[Company], [Company address] — privacy@yesterbackup.com.