Yonder
Privacy Policy
The short version
- No accounts, analytics, ads or servers of our own. We can't see what you browse or search for.
- Your history, tabs, searches and settings stay on your device.
- Data leaves your device only when a feature needs it: loading a site, searching, fetching suggestions or site icons, or using an AI provider (Claude, OpenAI or Google Gemini) with your own API key.
- Known ad and tracking networks are blocked by default.
Who we are
Yonder ("Yonder", "we", "us") is a search-first web browser for iOS, iPadOS and Android, developed by Sarthak Jain under Offbeat Applications.
Information we do not collect
Yonder has no user accounts, analytics, crash reporting, advertising SDKs or tracking identifiers. We collect no personal information, and we don't receive your browsing activity.
Data stored on your device
Yonder keeps the following locally so the browser works. None of it is sent to us.
| Data | Purpose |
|---|---|
| Browsing history (up to 2,000 recent pages: title and address) | History matches in the address bar and frequently visited sites |
| Open tabs, tab groups and archived tabs | Restoring your tabs |
| Recent searches | Showing recent searches |
| Settings and per-site settings | Remembering your preferences |
| Cookies, cache and website data | Keeping you signed in to sites and loading pages faster |
| Downloads | Files you choose to save, in the Files app (iOS) or Downloads (Android) |
| API keys for Claude, OpenAI or Google Gemini (optional) | Stored in the iOS Keychain, or encrypted with the Android Keystore |
Private Browsing (iOS): Private tabs are not added to history or recent searches. Their cookies and website data are kept only in memory and are removed when you close your last Private tab.
Backups: On Android, Yonder opts out of system backup. On iOS, app data may be included in your own iCloud or computer backups, depending on your device settings.
Information sent to third parties
A browser has to connect to other services to work. Yonder contacts only the services below, and only when you use a feature that needs them. Each one handles data under its own privacy policy.
| Service | What is sent | When |
|---|---|---|
| Websites you visit | A normal web request: your IP address, browser information and that site's cookies | When you open a page, or when Browse for Me reads up to 6 result pages |
| Your chosen search engine (Google by default; Bing, DuckDuckGo, Brave Search, Ecosia or Kagi) | Your search | When you search from the address bar |
| DuckDuckGo | What you type (not web addresses) | Search suggestions as you type |
| DuckDuckGo | The site's domain name only, for example example.com | Showing site icons |
| DuckDuckGo, with Bing as a fallback | Your question | Browse for Me search |
| Anthropic (Claude), OpenAI or Google (Gemini) | Your question and text from the pages Yonder read or the page you summarize, sent with your own API key | Only if you add that provider's API key in Settings |
| Apple Speech (iOS) or your device's speech recognizer (Android) | Your voice | Voice search. On iOS, recognition happens on your device where supported. |
| Google Translate (iOS) | The page address | When you choose Translate Website |
Without an API key, Browse for Me and Summarize write answers on your device, with Apple Intelligence (iOS), Gemini Nano (Android) or Quick Extract. We never receive your API keys or the content sent to these providers, which is handled under your own account with them and their policies: Anthropic, OpenAI and Google.
Websites can run their own scripts and trackers. Yonder blocks a list of known ad and tracking domains by default and hides common cookie banners. You can turn this off for any site.
Permissions
| Permission | Platform | Why |
|---|---|---|
| Microphone & speech recognition | iOS | Voice search, requested the first time you tap the microphone |
| Camera, microphone & location | iOS | Only when a website asks. You choose Ask, Allow or Deny for each site. Yonder doesn't use your location itself. |
| Add to photo library | iOS | Saving an image you choose |
| Internet & network state | Android | Loading web pages |
Children
Yonder is a general-purpose web browser and isn't directed at children under 13. We don't knowingly collect personal information from anyone, including children.
Disclosure of information
We do not sell, rent, trade or transfer personal data, as defined under GDPR, CCPA/CPRA or other privacy laws. We hold no personal data to share. Because we hold nothing, there's nothing for us to give you, correct or delete. You control all Yonder data on your device.
Your choices
- Clear Browsing Data in Settings removes history, recent searches, cookies and site data, cache and tabs.
- Export Data in Settings saves your tabs, archive and history as a JSON file.
- Change tracker blocking, JavaScript and other per-site settings in the page menu under Website Settings.
- Leave the API keys empty to keep answer writing on your device, or remove a key at any time.
- Uninstall the app to delete everything Yonder has stored on your device.
Security
Each API key is kept in the platform's secure storage and is sent only to its own provider, over HTTPS. Other app data is protected by your device's own security.
Changes to this policy
If this policy changes, we'll update this page and the date at the top. Continued use of Yonder after an update means you accept the revised policy. See also the Yonder Terms of Use.
Contact
Questions or requests: offbeatapplications@gmail.com, or use the contact form.