Yap
Privacy
Last updated 1 October 2026
Yap is a voice dictation app that runs on your computer, and you don't need an account to use it. This policy covers the optional Yap account service at auth.contextmirror.com, run by Nathan Lawrie ("we").
The short version
Your voice, transcripts, dictation history, notes and settings stay on your PC. The account service never receives them. It knows who you are so you can sign in, and nothing more.
What we collect
- Your email address.
- Your name and profile picture link, if you sign in with Google, Microsoft or GitHub and they share them.
- An ID from that provider that links your account to theirs. We never see your password for those services.
- Sign-in sessions: when you signed in, plus the IP address and app or browser of that device, so sessions can be ended and abuse spotted.
- Sign-in codes we email you, stored only in scrambled (hashed) form and deleted once used or after 10 minutes.
- Rate-limit counters tied to IP addresses for a few minutes, to block automated abuse.
How we use it
Only to sign you in and keep you signed in, to send you sign-in codes and essential account emails, and to protect the service from abuse. We don't sell your data, use it for advertising, or send marketing email. There are no analytics or advertising cookies.
Who handles it for us
- Cloudflare hosts the service and its database.
- Resend delivers our emails.
- Google, Microsoft or GitHub, if you choose to sign in with them, handle that step under their own privacy policies.
These companies may process data outside your country under standard contractual safeguards.
Cookies
Only the strictly necessary ones on auth.contextmirror.com: a sign-in session cookie, and short-lived cookies that protect a sign-in in progress and pass it back to the app.
How long we keep it
Your account data stays until you delete your account. App sign-ins expire after 30 days without use. Deleting your account removes your account, its linked sign-ins and every session straight away; copies can remain in encrypted backups for up to 30 days before they're gone too.
Your rights
You can see, correct, export or delete your data. Delete your account in Yap under Settings → Account, or email us for anything else. If you're in the UK or EU you can also complain to your data protection authority, such as the ICO in the UK.
Children
Yap accounts aren't intended for children under 13.
Changes
If this policy changes we'll update this page and its date, and point out significant changes in Yap.