Privacy Policy

1. Information You Provide to Us

• Account information: name, email address, optional phone number, password (stored as a one-way hash — we never store or can see your actual password), and your default currency and timezone.
• Financial data you enter: manual account balances, transactions, bills, goals, and funding schedules you create in the app.
• Support requests: the subject, description, and any screenshot you choose to attach when you contact us for help.

2. Information From Linked Bank Accounts

If you link a bank account (available on paid tiers), we receive account balance and transaction data from Plaid, Inc. on your behalf. We do not receive or store your online banking username or password — that authentication happens directly between you, your bank, and Plaid. You can unlink a bank account at any time, which stops new data from syncing.

3. Payment and Subscription Information

For web subscriptions, payment is processed by Stripe. We store a Stripe customer reference and your subscription status — we never receive or store your full card number.

For iOS and Android subscriptions, payment is processed by Apple's App Store or Google Play, and purchase/entitlement data is provided to us through RevenueCat. We do not receive your payment card details from Apple or Google.

4. Biometric Login

If you enable biometric login (Face ID, Touch ID, or Android biometrics), the biometric check itself is performed entirely by your device's operating system. We never receive, see, or store your fingerprint, face scan, or any other biometric data — we only store a simple on/off preference indicating biometric login is enabled on your device.

5. Automatically Collected Information

When you use Yearn, our servers automatically log limited technical information needed to operate and secure the Service — such as IP address, request timestamps, and failed login attempts (used to detect and slow down brute-force login attempts). We also retain webhook data received from our payment and bank-linking partners (Plaid, Stripe, RevenueCat) for security, troubleshooting, and audit purposes.

We do not currently use third-party advertising SDKs, ad-tracking pixels, or analytics/tracking cookies. If that changes in the future, we'll update this Policy and, where required, ask for your consent first.

6. How We Use Your Information

We use the information described above to:

• Provide and operate the Service — sync your linked accounts, calculate balances, run scheduled funding, process your subscription, and provide customer support.
• Secure your account and prevent abuse — including detecting and preventing abuse of Free-tier limits and free trial offers (for example, identifying attempts to create multiple accounts to bypass a single free trial).
• Understand and improve our business — for example, analyzing account retention trends and, where you choose to participate, customer satisfaction surveys. This is for our own internal business purposes only.

We do not use your personal information to serve you third-party advertising, and we do not sell your personal information to anyone.

7. How We Share Information

We share information only as needed to run the Service:

• Plaid, Inc. — to link and sync your bank account(s), if you choose to link one.
• Stripe, Inc. — to process web subscription payments.
• RevenueCat, Inc., Apple Inc., and Google LLC — to process and verify in-app subscription purchases on iOS and Android.
• Our email delivery provider — to send account verification, password reset, and transactional emails.
• Our cloud hosting and database providers — to store and run the Service.
• As required by law, or to protect the rights, safety, or property of G8GE, LLC, our users, or the public.
• In connection with a merger, acquisition, or sale of assets, in which case we'll notify you before your information becomes subject to a different privacy policy.

We do not sell your personal information, and we do not share it with third parties for their own independent advertising or marketing purposes.

8. Data Retention

We retain your account and financial data for as long as your account is active. When you close your account (Settings → delete account), we immediately deactivate it, unlink any connected bank accounts, and cancel your active subscription. We retain some data after closure — such as records needed for fraud/abuse prevention, financial/legal recordkeeping, or security audit logs — for as long as reasonably necessary for those purposes, or as required by law. If you'd like your remaining personal data fully erased sooner, contact us at [email protected] and we'll process your request, subject to any legal recordkeeping obligations we may have.

9. Your Rights and Choices

You can review and update most of your account information (name, phone, currency, timezone) directly in Settings. You can unlink a bank account or cancel a subscription at any time. You can request a copy of your data or full deletion of your personal information by emailing [email protected] — depending on your location, you may have additional rights under applicable law (such as the right to access, correct, or delete your personal information), and we'll honor requests consistent with those laws.

10. Security

We use industry-standard safeguards to protect your information, including encrypted network connections (HTTPS), one-way password hashing, and storing authentication tokens in your device's secure OS keychain rather than in plain storage. No system is 100% secure, and we can't guarantee absolute security, but we work to protect your information appropriately given the sensitivity of financial data.

11. Children's Privacy

Yearn is not directed to, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from anyone under 18. If we learn we've collected information from someone under 18, we'll delete it.

12. International Users

Yearn is operated from the United States, and information we collect may be processed and stored in the United States regardless of where you access the Service from. By using Yearn, you consent to this transfer and processing.

13. Third-Party Services

Plaid, Stripe, RevenueCat, Apple, and Google each have their own privacy policies governing how they handle information once it's shared with them as described above. We encourage you to review their policies as well.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you in the app or by email before they take effect.

15. Contact Us

Questions about this Privacy Policy or your data? Reach us at [email protected].