Your data is encrypted and protected.
Your financial data stays private, encrypted, and yours alone: never sold, never shown ads against, and never used for anything beyond working out your own numbers.
Encrypted at rest
Your financial data is stored with encryption at the database layer. OAuth tokens are kept in a dedicated vault, never as plaintext.
Separate authentication
Your Google login is separate from your financial data connection. Adding a bank or sheet doesn't give Yamma access to your Google account.
Read-only access
Yamma only reads the transaction data you connect. Nothing is ever written back to your Google Sheets or bank accounts.
AI only when you switch it on
AI features are off until you turn them on yourself. When they're on, what leaves Yamma is amounts, dates, category names, the merchant text from your statements and anything you write in the optional note about your finances. Never your name, email, account number, sort code or bank login. Anthropic, who process it, are contractually barred from training on it.
Row-level security
Every query is scoped to your account at the database level, not just in app code. The only exception is one you switch on yourself: a shared household, where the people you invite can see the household's figures.
Delete everything, on demand
Deleting your account removes your data and cancels any active subscription in the same step. There's no waiting period, and no retention games.
Your data is not the product. Yamma is paid for by subscriptions, so there is no advertising and no data-broker code path in it. What you connect is used for two things and nothing else: producing your own budgeting numbers, and improving Yamma itself.
You stay in control. You can disconnect or pause any financial data connection at any time. Pausing keeps your configuration but stops all syncing. Disconnecting deletes the connection entirely.