Privacy Policy

Last updated: 2026-07-27

This app helps you convert foreign-currency transactions in your YNAB plan to your plan's currency. This policy explains what data it handles, how that data is stored and secured, and the choices you have. It applies to data obtained through the YNAB API as well as the account you create here.

What we store

• Your account. Your email address and a salted hash of your password (never the password itself).
• Your YNAB connection. The OAuth access and refresh tokens issued to this app when you click “Connect to YNAB”. These let the app read your transactions and write back converted amounts on your behalf.
• Your conversion settings. The YNAB plan and account you chose, the source currency, and the start date — the configuration needed to build a preview.
• A record of your activity. When you sign in, connect or disconnect YNAB, change a conversion, or apply one, the app records that it happened: the type of action, the time, how many transactions were converted, an internal identifier for your account, and — for actions on a particular account — the YNAB identifier of the plan or account involved. It is used to keep the app working and to see how much it is being used. It never contains a transaction's amount, payee, or memo, and never a password or token. It is deleted with the rest of your data when you delete your account.

What we do not store

The app does not keep a copy of your transactions. When you request a preview, it fetches the relevant transactions from YNAB, computes the converted amounts in memory, and shows them to you. Nothing is written to YNAB until you explicitly approve, and the proposed changes are carried through your browser (in the form you submit) rather than saved on the server. Once a request finishes, that transaction data is gone from the app.

Data obtained through the YNAB API

Access to your YNAB data is used solely to display previews and to apply the conversions you approve. It is never sold, shared with third parties, or used for advertising or profiling. Exchange rates are retrieved from the Frankfurter API (European Central Bank data); this request contains only currency codes and dates — none of your YNAB or account data is sent to it.

How it is secured

• All traffic is served over HTTPS.
• Data is held in a private database on the server that runs this app and is not exposed publicly.
• Passwords are stored only as salted hashes.
• Access requires logging in; each user can see only their own account, connection, and conversions.

How long we keep it

Your account, YNAB connection, and conversion settings are kept only for as long as you keep your account. Transaction data is never retained — it lives only in memory for the duration of a single request (see “What we do not store” above). When you disconnect YNAB from the Settings page, the stored access and refresh tokens are deleted immediately. You can delete your account yourself at any time from the Settings page — this immediately and permanently removes your email address, password hash, YNAB tokens, conversion settings, and activity history from the database, and overwrites the space they occupied rather than leaving it readable. The only thing kept is a dated note that an account was deleted, which records nothing about who it belonged to.

Deleting your account does not change anything in YNAB itself: transactions this app already converted keep their amounts and memos. It also cannot revoke this app's authorization on YNAB's side — you can do that from YNAB → Account Settings → Security.

Changes to this policy

If we change what YNAB data we access or how we use it, we will update this policy, revise the “Last updated” date above, and ask you to re-authorize before the new access takes effect.

Your choices

• You can disconnect your YNAB account at any time from the Settings page, which removes the stored tokens. You may also revoke this app's access directly in your YNAB account settings.
• You can delete your account and all associated data yourself from the Settings page (“Delete account”); it takes effect immediately. If you would rather we do it for you, or you can no longer sign in, email davidgrant@gmail.com and we will delete it for you.

Contact

Questions about this policy or your data can be directed to davidgrant@gmail.com.