Privacy
Privacy-first by default.
YEAR is built so core search runs locally on your Mac. This page explains what we process, what we never upload by default, and where optional web data flows.
Last updated: February 6, 2026
Data we process
- - Local media files you choose for indexing
- - Local transcripts and search indexes stored on your device
- - Billing details handled by Gumroad for Pro purchases
- - Optional waitlist email you submit on /download
- - Optional website analytics events (page views and CTA clicks)
What stays local by default
- - Raw recordings and media content
- - Transcript creation and indexing workload
- - Search queries executed inside the desktop app
- - Offline search and jump-to-moment usage
Website events
The website can send analytics events through /api/track. Events may include page path, CTA name, timestamp, referral tag (year_ref), IP header, and user agent.
Analytics transport is optional and depends on configured webhook endpoints. No ad-network tracking scripts are required for this flow.
Waitlist emails
If you join the Windows waitlist, we store your email and optional referral tag to send launch updates.
We do not sell waitlist data. You can request deletion by emailing hello@yearapp.com from the same email address.
Retention and rights
- - Local app data remains on your device until you remove it.
- - Waitlist and analytics webhook data retention follows our internal ops policy.
- - You can request access, correction, or deletion for account/contact data.
- - Privacy requests: hello@yearapp.com