Yaoki

Privacy

Last updated 19 October 2026.

Yaoki is built so that what you record stays on your phone. This page says exactly what the app keeps, what it shares with Health Connect, and the little that reaches our server, including food labels you choose to share.

What you record stays on your phone

Water, meals, your usual meals, how the day went, cardio, workouts you check off, your weight and body measurements, and any note you write are stored in the app on your phone. We never receive them. There is no account, and nothing about what you eat or do is sent to us.

Sharing food labels

When you add a food from its Nutrition Facts label, Yaoki shares that label with other Yaoki users so they can find the same product. It is on by default and you can switch it off for each food before saving. What is shared is the product only:

• its name, barcode, serving size and the values from the label.

Nothing about you goes with it: not who entered it, when, or whether or how often you eat it. The app's device password is checked when a label is shared, only to stop any one phone flooding the list, and it is not stored with the food, so a shared label cannot be traced back to you. Labels you saved before 28 September 2026 are not shared unless you choose to when the app asks.

The list of shared labels is downloaded to your phone and searched there. When you search for a food by name, the words you typed are also sent to our server to look for branded products, and when you scan a barcode the phone does not know yet, the barcode alone is sent to check the shared list. Neither is linked to your device or written to any log; the words or the barcode are kept only as the label on a remembered answer, below. Beyond the shared list, our server asks two public food databases, Open Food Facts and USDA FoodData Central. They see our server asking, not your phone, and nothing about you. Their answers are remembered for a while so the same product or search is asked about once.

When you share a recipe page to Yaoki, the page is opened and read on your phone, the way your browser would. The recipe is saved among your foods on the phone; nothing about it is sent to us.

Health Connect

If you allow it, Yaoki writes your water and the foods you eat into Health Connect on your phone, so they sit with the rest of your health data. That is all it writes: never workouts, heart rate or any other measurement.

If you also allow it, Yaoki reads the workouts, steps and heart rate that other apps (a ring, a watch, a treadmill or gym app) record in Health Connect, from the last few days. It uses them only to find a workout you did and offer to check it off on your plan, and to show the heart rate during a workout you check off. What it reads is used on your phone and kept there with the workouts you check off. You can say no to reading and still use everything else.

If you allow it, Yaoki also reads the weights a smart scale's app records, to show them in your weight trend beside the weights you enter in Yaoki.

None of this leaves your phone through Yaoki.

Yaoki's use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements.

What reaches our server

The app asks our server (api.yaokihealth.com) for your workout plan. For that:

• The first time you open the app, it creates a random device ID. It is not linked to your name, email, phone number or anything you record.
• Requests for your plan include that ID and today's date.
• The server keeps the device ID, a scrambled form of its password (so the password itself is never stored), and the day it was created.
• If a workout plan is assigned to your device, the server holds that plan: exercises, sets, reps, weights and the weekly schedule. Plans never include why an exercise was chosen, or anything about your health.

A plan made in the plan builder is kept on the server with a scrambled form of its private edit link, and the list of phones connected to it. There is no account: no name or email is asked for. The equipment you tick in the builder, and any joints you ask it to go easy on, stay in your browser. The builder won't save a cue that gives a health reason for an exercise.

Exercise videos are YouTube's: when you open an exercise's guide, the video plays in YouTube's own embedded player, from its privacy-enhanced domain (youtube-nocookie.com). YouTube then receives what any embedded video sends it, under Google's privacy policy, and may show its own ads. Which videos appear is chosen on our server, which asks YouTube by exercise name only. If you mark a video helpful or not, the server keeps that vote with your device ID, so each phone has one vote per video; the votes decide which video is shown first, for everyone.

The server does not keep your IP address or a history of your requests that could be tied to you. It keeps a technical log, so problems can be found and fixed: which kind of request was made (say, "fetch a plan"), when, whether it worked and how long it took, for up to 400 days. It holds no device ID, IP address, plan contents, search words, barcodes or food, and searches and barcode lookups are logged with the date only. Our network provider, Cloudflare, handles connections to the server and sees IP addresses to deliver and protect the service, under its own privacy policy.

What Yaoki never does

• No advertising, analytics or tracking of our own.
• No selling or sharing of data with anyone.
• No reading of health data beyond the workouts, steps, heart rate and weight described above, and only if you allow it.
• No uploading of photos: a label photo is read on your phone and deleted.

Barcodes and label photos are read on your phone by Google Play services. As it does for every app that uses it, it sends Google basic diagnostics: the phone's model and system version, the app's version, an installation identifier and how long reading took. Not the photo, the barcode or what was read. See Google's description.

Reminders

Reminders are scheduled on your phone. If you stop answering them they back off, and that is worked out on the phone too.

Backups

You can save everything Yaoki keeps on your phone to a file, from Settings, "Back up or restore", and put it back after reinstalling or on a new phone. The file is written where you choose; Yaoki doesn't send it anywhere. It holds what you've recorded, so keep it somewhere you trust.

Separately, if your phone's own backup to your Google account is turned on, Android can include Yaoki's data in it, so it comes back on a new phone. Yaoki allows that only when the backup is encrypted on your phone with your screen lock, so Google can't read it; on a phone without a screen lock, Yaoki's data isn't backed up to your account at all. What Yaoki reads from Health Connect (your workouts, steps, heart rate and weight) is never included. That backup is in your Google account, not ours, and you can turn it off in your phone's settings.

Deleting your data

Uninstalling Yaoki deletes everything it stored on your phone. Entries it wrote to Health Connect stay there until you delete them in Health Connect.

In the app, Your data on Yaoki's server (in Settings) deletes this phone's device ID from the server, along with which plan it follows. You can also stop following a plan there.

With a plan's edit link, the builder can disconnect every phone from the plan, or delete the plan from the server for good.

Children

Yaoki is not directed at children under 13.

Contact

Questions about your data or this page: [email protected].

Changes

If this changes, the new version will be posted here with a new date.