Privacy policy

Multi-currency for YNAB converts transactions in a foreign-currency account into your budget's currency, using the exchange rate published on the day each transaction happened. To do that it reads some of your YNAB data and writes converted amounts back. This page explains exactly what it touches, what it keeps, and how to get rid of it.

The service is operated by an individual, not a company. Contact: rotberj@gmail.com.

What it reads from YNAB

You connect through YNAB's official OAuth flow. This app never sees your YNAB password, and it never asks for or stores credentials for any bank or financial institution. With your authorisation it reads:

• your YNAB user identifier;
• the list of your budgets, with their names and currency settings;
• the accounts in any budget you connect, with their names and types;
• the transactions in accounts you have set up a conversion rule for — their dates, amounts, payees, memos and status.

It writes back to exactly one thing: the amount and memo of transactions it converts, in accounts you configured, dated on or after the start date you chose. Nothing else in your budget is modified.

What it stores, and for how long

Most of what it reads is used and discarded. Account balances, for example, are never written to the database. What is kept:

• Your YNAB user identifier — this is the account. There is no separate signup, no password, and no email address on file.
• A YNAB refresh token, so scheduled conversions can run when you are not signed in. It is encrypted before it is stored (see below).
• Budgets and rules you configure — budget and account identifiers and names, the currency you selected, and the start date.
• A record of every conversion — the transaction identifier, its date, the original and converted amounts, and the exchange rate used. This record is what prevents the same transaction being converted twice, and what makes undo possible.
• Run history — what each run decided, including for affected transactions their amounts, their payee, and their memo text before and after. The payee is there so a preview can be read as a list of purchases rather than a list of identifiers; it is deleted with the rest of your account.

All of it is kept for as long as your account exists, and is deleted when you delete your account. There is no backup copy retained separately for analytics or any other purpose; routine encrypted database backups are held by the hosting provider for a short period and expire on their own.

Published exchange rates are also cached, shared across everyone using the service. Those are public market data and contain nothing about any person, so they are not deleted with your account.

How it is secured

• All traffic is over HTTPS.
• The YNAB refresh token is encrypted at rest with AES-256-GCM before being written to the database, so a copy of the database alone is not enough to use it.
• Short-lived access tokens are never written to the database at all — they are held in memory and expire within two hours.
• Access to the production database and hosting account is limited to the operator.

Who else sees your data

Your data is never sold, rented, or shared for advertising. It is not aggregated or analysed for resale. There are no analytics scripts, advertising networks or third-party trackers on this site.

Two service providers are involved in running it:

• Render hosts the application and its database, in the United States. They store the data on the operator's behalf and do not use it for anything else.
• Frankfurter supplies published exchange rates. Requests to it contain only a currency pair and a date — no transaction, account or personal information.

Data may be disclosed if legally required, for example in response to a valid legal demand. If the service is ever transferred to someone else, you would be told before any data moved.

Deleting your data

You can delete everything yourself, at any time, from the settings page. It is immediate and permanent: your account, the stored token, your rules, run history and conversion records are all removed.

You can also email rotberj@gmail.com to request deletion, or a copy of what is held about you, and it will be actioned within 30 days.

Deleting your data here does not change anything already written to your YNAB budget, and it does not revoke this app's access from YNAB's side — you can do that in your YNAB account settings.

Cookies

One cookie keeps you signed in. Two more exist briefly during sign-in to protect the authorisation flow and expire within ten minutes. All are strictly necessary; there are no tracking or advertising cookies.

Changes

If this policy changes, the date at the top changes with it. If a change materially affects how your data is used, you will be asked to review it before it takes effect.