Privacy Policy

For the purposes of the UK GDPR and the Data Protection Act 2018, the "data controller" for the personal data described in this policy is:

Yamma Money Ltd
Company number 17397219 (registered in England and Wales)
Registered office: Unit A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom
Contact: help@yamma.money

Account data: your email address, and your name if you give one or sign in with Google, whichever of email and password, passkey or Google sign-in you use. Signing in with Google is a separate authorisation from your financial data connection and never grants us access to your wider Google account.

Financial data: today, this means transaction dates, amounts, counterparties, and categories, however you choose to bring them in. A CSV file you upload directly (nothing is read from your Google account for this route), or the contents of a Google Sheet you explicitly pick via Google Picker (we request the narrowest available Google permission, drive.file, which limits our access to only the file you select, nothing else in your Drive), or account and transaction data from a bank you connect via Fena. See the Open Banking Disclosure for that flow specifically.

Settings and preferences: the budgets, categories, savings goals, notes, and preferences you create in the app.

Usage data: page views and a small, fixed set of key actions (sign-in, sync, connecting an account, budget/subscription changes), recorded for our own product analytics only, never shared with or sold to third parties, and never used for advertising. We also log basic technical information (IP address, browser/device type, approximate location derived from IP) for security and abuse-prevention purposes.

Support and feedback: anything you send us directly, e.g. through the in-app feedback form.

Your choices about email: whether you've opted in to product news, and when and where you changed that, kept so we can show we only email people who asked to hear from us.

Billing data: if you subscribe to a paid plan, Stripe (our payment processor) holds your payment details directly. We only ever store a reference to your Stripe customer and subscription record and its status, never your card number or other payment details.

• Performance of a contract. Reading your connected financial data, computing budgets/forecasts/insights, and storing your settings is the core service you sign up for and can't work without this data.
• Legitimate interests. Product analytics (understanding which features are used, diagnosing errors), fraud/abuse prevention, and rate-limiting. We've weighed this against your privacy and kept it to the minimum needed; you can object at any time (see "Your rights").
• Consent. Connecting a Google Sheet or a bank account is always something you actively choose and can revoke; we never connect a data source without your explicit action. The same goes for product-news emails: they're off unless you turn them on, and you can turn them off at any time in Settings → Communications. Emails about your own account (alerts you've left on, billing, security) are separate and aren't marketing.
• Legal obligation, where we're required to retain or disclose information by law.

Features like the budget/payday auto-suggestions, the "Can I afford this?" wizard, and the debt payoff planner are deterministic, rules-based calculations over your own data, not profiling, and not automated decision-making in the UK GDPR Article 22 sense. You always choose whether to accept a suggestion. The same is true of the optional AI-generated summaries (section 6): they narrate figures Yamma has already calculated and already shows you elsewhere on the same page. They don't calculate anything new, decide anything, or take any action on your behalf.

The service providers ("subprocessors") that handle data on our behalf, each bound by their own data protection terms, are:

• Supabase. Database, authentication, and encrypted secret storage.
• Vercel. Application hosting and (cookieless) product analytics.
• Google. Sign-in, and read-only access to the individual Sheet you pick, never your wider Drive.
• Fena Labs Ltd. The FCA-authorised open banking provider (firm reference 934835) that connects your bank accounts, read-only, once you've authorised it with your bank. See the Open Banking Disclosure. Unlike the others here, Fena is regulated in its own right and has its own complaints route.
• Stripe. Payment processing for paid plans. Stripe receives your billing name, email and card details directly; Yamma never sees or stores them.
• Resend. Delivers the emails Yamma sends you: alerts you've asked for, and the sign-up and password-reset messages.
• Apple, Google and Mozilla push services. If you turn on browser notifications, carries them to your device. The message is encrypted so that only your device can read it; these services see that a notification was sent to your device, never what it says.
• Frankfurter. A public currency-exchange-rate API, so amounts in other currencies can be converted. We send it currency codes and nothing else.
• Wikidata (Wikimedia Foundation). Looks up public information about a merchant by name (what it is, and where it's based) so a transaction can show something more useful than a bank descriptor. We send a merchant name, never anything about you.
• Anthropic. When you turn on AI features in Settings, writes the plain-English summaries on your Home, Forecast and Savings pages, answers questions you ask about your own finances, and helps clean up unclear vendor names on Transactions. It works from figures and names already shown to you, plus anything you type to it, and never receives your account number, sort code, or bank login.
• Attio Ltd. Customer relationship management: who our users are, their plan and how they use Yamma, and (for paying customers) their billing history with Yamma copied from Stripe, so we can support them and understand what's working. Never your transactions, balances or other financial data you track in Yamma.

Bank connections are covered in more detail in the Open Banking Disclosure. We do not sell, rent, or share your personal data with anyone else, and we never use your financial data to serve you advertising.

Our CRM (Attio): we use Attio to keep track of who our users are so we can support you and understand what's working: your name and email, your plan and account status, coarse counts of how you use Yamma (for example, how many connections you have and how many days you've been active), whether you've agreed to receive marketing emails, and how you found Yamma. What you told us when you signed up. If you pay for a plan, Attio also receives your billing history with Yamma from our payment processor, Stripe. Your subscription, invoices and payment status, never your card number. It never receives your transactions, balances, categories, account numbers, or anything else about the finances you track in Yamma. Attio hosts this data in the EU (Belgium). If you delete your Yamma account, your CRM record is deleted too, except billing records, which we keep for as long as the law requires us to keep the invoices themselves (see "How long we keep it").

Yamma can use Anthropic's AI (Claude) to write short, plain-English summaries of your budget, forecast, and savings pace, to answer questions you ask about your own finances (on plans that include it), and to clean up unclear vendor names on Transactions. This is entirely optional and off by default. Nothing is ever sent to Anthropic unless you explicitly turn it on yourself, in Settings → Data & connections. Turning it off again stops it immediately, including hiding anything already generated. It doesn't just stop new summaries.

When it's on, what's sent is limited to the figures and names already visible to you elsewhere in the app: category names and amounts, budget totals, savings goal names and progress, and raw merchant text from your bank statement. Merchant text is whatever your bank printed, so it can occasionally include the name of a person or business you paid. If you've written anything in the optional "financial health, in your own words" field in Settings, or typed a question or earlier turns of a conversation into Ask Yamma, that's sent too, as context. We never send your account number, sort code, bank login, or your own name or email address.

Anthropic processes this under their commercial API terms, which contractually prohibit using it to train their models, under any circumstances. We do not have a zero data retention arrangement with Anthropic, so under its standard terms Anthropic may keep what we send, and what it generates, for a limited period for safety and abuse monitoring, and for longer where the law requires it. Anthropic's infrastructure is not based in the UK, so this does involve your data being processed outside the UK. See Anthropic's Data Processing Addendum for the safeguards that cover that transfer (the UK Information Commissioner's Approved Addendum to the EU Standard Contractual Clauses). Content generated this way is always labelled "AI-generated" wherever it appears, with a short explanation available from the ⓘ beside it.

Some AI-generated content includes a suggested action. Examples are increasing a category's budget, adding a reminder note, or moving budget between two categories. A suggestion is always computed and checked against your real, current figures before it's ever shown to you, and nothing changes in your account unless you press "Do this". You can always dismiss a suggestion instead, with no effect on your data.

Where any of our providers transfer data outside the UK or European Economic Area, that transfer is covered by a recognised safeguard such as the UK International Data Transfer Agreement or an adequacy decision.

We retain your data for as long as you have an active Yamma account. If you delete your account, your personal data is deleted from primary storage; residual copies in backups are purged on our normal backup rotation (currently within 30 days). We may retain minimal records for longer where required by law (e.g. certain financial or security logs).

When you delete your account we keep a short record that the deletion happened: the date, and what we were legally required to keep elsewhere (for example, invoices held by our payment processor). Alongside it we keep a one-way code made from your email address with a secret key, which doesn't reveal the address on its own. Its only use is to make sure we never send you marketing if you later sign up again with the same address. Records of any privacy request you make are kept the same way, so we can show it was answered.

Two specifics worth stating plainly, because they surprise people. When you first connect a bank account, yamma imports up to two years of past transactions, that history is what makes a budget or a forecast mean anything on day one, but it does mean we hold considerably more than the period you're looking at. And a CSV you upload is a one-off snapshot: the transactions it contained stay in your account until you delete them or your account, even though the file itself is never stored.

Financial data is encrypted at rest. OAuth tokens for connected data sources are held in a dedicated encrypted vault, never as plaintext. Every database query is scoped to your account at the database layer (row-level security), so no other user, and no part of the app itself, can read across accounts. Full detail: our Security page.

You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data (most of this you can already edit directly in the app).
• Erase your data ("right to be forgotten").
• Export your data in a portable format ("data portability").
• Restrict or object to certain processing, including analytics processed under legitimate interests.
• Withdraw consent at any time for anything we process on that basis, for example disconnecting a Google Sheet or bank connection, or turning off product-news emails, in Settings.

You can already handle some of this yourself in Settings → Your data: disconnect any data connection at any time, or use the Delete account button for an immediate, permanent deletion of your account and everything in it. To get a copy of your data, use Download in that same section for an instant file of everything stored against your account; for a complete copy (including anything that download can't contain, which the file itself lists) use Request a full export, or email help@yamma.money directly, and we'll send you a complete copy. For anything else on this list, email us the same way. We'll respond within one month, as UK GDPR requires.

If you're unhappy with how we've handled your data or a request, you can complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Yamma is not directed at, and should not be used by, anyone under the age of 18.

We may update this policy as the app changes. Material changes will be highlighted in-app, not just silently dated.