Privacy Policy

01What we collect

Account data

• Email address and sign in credentials, either an email address and password or Apple Sign-In
• Device push notification token, so that benefit expiry and price alerts can reach your phone

Financial data, through Plaid

• Credit card account names and identifiers
• Transaction history, including merchant names, dates and amounts
• Balances, credit limits and statement timing, used for reporting and close date features
• We do not receive your card number, CVV, PIN or bank login credentials
• We do not access checking, savings or investment accounts

Receipt data, only if you turn on receipt forwarding

• Receipt forwarding is off until you turn it on, and you can stop at any time
• When it is on, we give you a private forwarding address and receive the emails you forward to it
• We receive the whole forwarded email: the original sender, the subject, the date and the full message body
• The email is stored so that it can be parsed, and it is removed when you delete your account
• We only ever see emails you forward yourself. We do not read, connect to, or scan any mailbox.

Product and usage data

• Benefit tracking records, meaning which benefits you have used and which credits have posted
• Products and prices you ask Yield to watch, and products identified from receipts you forward
• App interaction data, meaning screens viewed and features used
• Technical error logs

02This website

This website is a static marketing site.

• It sets no cookies and does not use advertising or analytics trackers
• It does not collect personal information, and there is no form on it that submits data to us
• Web fonts are loaded from Google Fonts, which receives your IP address as part of that request. This is the only third party request the page makes.
• If you email us from a link on this site, we receive whatever you put in that email, and we use it only to reply
• Our host records standard server access logs, including IP address and user agent, for security and reliability

03How we use your data

• Match transactions to card benefits, and verify whether a credit posted and matched a charge
• Calculate benefit recovery and expiry timelines, and send reminders before a credit closes
• Identify bills that could be charged to a card whose benefits cover them
• Watch prices for products you track, and identify when a purchase is inside a merchant refund window
• Detect increases in your own recurring bills
• Compare your spending against the earning rates of your cards
• Show what your accounts are likely to report to the bureaus and when
• Send push notifications for the events above
• Operate, secure, debug and improve the service

We do not use your personal data to build marketing demonstrations. See section 9.

04AI processing

Two separate things happen here and they differ, so they are described separately.

Matching your transactions

• We use AI to work out which merchant a transaction belongs to and whether it matches a benefit
• What is sent is the merchant name and typical amounts. Not your name, your account, or your card number.
• Classifications are cached, so the same merchant is only classified once

Reading receipts you forward

• When a receipt cannot be read by our own parser, the email is sent to our AI provider, Anthropic, to be read
• What is sent is the original sender, the subject, the date and the body of that email
• Before it is sent we remove signatures, quoted email threads and tracking pixels
• We do not claim to remove anything else. If the receipt body contains it, assume it is sent.
• Only the forwarded receipt is ever sent this way. Your connected account data, meaning balances, transactions and card details, is never included.
• Anthropic processes it on our behalf, does not train its models on it, and does not keep it beyond its own short operational retention

05Who we share with

• We do not sell your data. Not to advertisers, not to data brokers, not to anyone.
• We do not share your data with advertisers
• We share data only with the service providers needed to operate the app

Our processors

• Plaid to connect your accounts securely
• Supabase to store your data, encrypted at rest
• Postmark to receive the receipt emails you forward, if you turn receipt forwarding on
• Anthropic to classify transaction merchants, and to read the receipt emails you forward, as described in section 4
• Expo to deliver push notifications

We may disclose data where required by law, or where necessary to protect the rights, safety or property of Yield or another person.

06Storage and security

• Data is stored on Supabase, a PostgreSQL platform, with encryption at rest
• All API communication uses HTTPS and TLS
• If you sign in with a password, it is stored only as a salted hash by our authentication provider, never in readable form
• Signing in with Apple uses Apple's identity tokens. We never see an Apple password.
• Row level security ensures you can only access your own data
• Plaid access tokens are held server side and are not readable by the app

07Retention and deletion

• We retain your data for as long as your account is active
• You can delete your account in the app under Settings, then delete my account
• We confirm who you are before deleting, by signing you in again through your own provider
• Deletion happens immediately. Your cards, benefit history, receipts, bank connections and the account itself are removed during the request.
• You get a reference number for the deletion, and it tells you plainly if any step did not finish

What survives a deletion

These are stated because they genuinely survive. We do not claim a purge we do not actually run.

• Receipt emails you forwarded are kept until you delete your account, which removes them. To clear forwarded receipts without closing your account, email privacy@getyield.io.
• We keep an anonymous record that a deletion happened: its reference number, its outcome and the month. It contains nothing that identifies you or your account.
• Technical error logs written around the time of deletion may survive and are not linked to any account we can identify
• Cached merchant classifications, which are anonymised, may be retained

If a deletion does not finish, or you want to dispute one, email privacy@getyield.io.

08Your rights

• Access · request a copy of your data
• Correction · request correction of inaccurate data
• Deletion · delete your account and data, in the app or by contacting us
• Portability · request your data in a machine readable format
• Objection · ask us to stop a particular processing activity, including turning receipt forwarding off

To exercise any of these, email privacy@getyield.io. Depending on where you live you may have additional rights under state law, including the right not to be discriminated against for exercising them. We do not sell or share personal information for cross context behavioural advertising.

09Marketing and demonstrations

Our website and marketing show animated demonstrations of how Yield works, and product screens containing merchants, prices, deadlines and dollar amounts.

• These are built from sample and seeded data. They are not drawn from any customer's account.
• We do not use your personal data, your transactions, your receipts or your account figures to create marketing material
• Demonstrations are illustrative of how the service presents information and what it pursues. They are not a guarantee of outcomes. The Terms of Service set this out in full.
• If we ever want to feature a real customer outcome, we will ask that customer for permission first and identify it as a real result

10Children

• Yield is not intended for anyone under 18
• We do not knowingly collect data from minors
• If you believe a minor has given us data, email privacy@getyield.io and we will delete it

11Changes

We may update this policy. Material changes will be communicated in the app. Continued use after a change takes effect constitutes acceptance.

12Contact

• Privacy: privacy@getyield.io
• Support: support@getyield.io
• Website: getyield.io/privacy