Privacy Policy

1. Information We Collect

The information we process depends on the features you use:

• Account and profile information: your name, email address, profile photo, authentication and session information, preferences, and privacy choices. If you sign in with Google or Apple, we receive the account information that provider shares for sign-in.
• Financial records: accounts, balances, transactions, income, budgets, goals, debts and repayment history, recurring expenses, projects, currencies, categories, notes, plans, and other information you add. We also process calculations, classifications, corrections, and relationships between records to provide summaries and insights.
• Connected accounts: when you authorize a supported bank connection, we receive account details, balances, transactions, connection identifiers, and synchronization information from the connectivity provider. The information available depends on your bank and authorization. Yomex does not receive or store your online banking password.
• Statement imports: PDF or CSV statements you select and, where needed, a password to unlock a PDF. Uploaded statement files and passwords are used during processing and are not retained by the import feature. Extracted transaction details and matching results may be saved with your financial records.
• Receipts: images you select, extracted text, merchant details, dates, amounts, items, and corrections. The current receipt scanner reads images on your device without sending them to an external AI provider. Receipt details you save are stored with your account. Where you choose to retain receipt images, those files may also be stored with your account; images retained from earlier versions remain subject to deletion controls.
• Voice input: speech and transcripts needed to understand your request. The current voice feature requests on-device speech recognition. If you enable cloud voice interpretation, the relevant transcript is processed by an AI provider. Transcripts used in messages or saved records may remain with those records.
• AI conversations and planning: your messages, responses, relevant financial context, proposed actions, plans, conversation summaries, and memory records where enabled.
• Purchases and subscriptions: product and transaction identifiers, plan, purchase history, renewal and refund information, and subscription status. We do not receive or store your full payment card number from app-store purchases.
• Device, usage, and diagnostic information: device and operating-system type, app version, browser, language, IP address, timestamps, feature interactions, errors, crash reports, and performance information. Notification services also process push tokens, preferences, and delivery or engagement information.
• Feedback and communications: support requests, suggestions, problem reports, AI-response feedback, and any messages or attachments you provide. A report about an AI response may be linked to the relevant conversation and your account so we can investigate it.
• Referral information: if you use a referral or affiliate feature, referral codes, referral relationships, eligibility, and reward records needed to administer it.

We receive information directly from you, automatically through use of the Services, and from sign-in, bank connectivity, purchase, and other providers involved in features you use. Please avoid including passwords, payment card details, or unnecessary information about other people in messages, feedback, receipts, or uploads.

2. How We Use Information

• Create and secure your account, store your records, and synchronize them across devices.
• Provide financial tracking, budgets, goals, debts, plans, projects, summaries, and projections.
• Import and reconcile records, process receipts, and connect accounts you authorize.
• Provide optional AI assistance, voice interpretation, and language help you enable.
• Manage subscriptions, feature access, referrals, and billing support.
• Deliver reminders, notifications, account notices, and replies to your requests.
• Investigate feedback, fix errors, measure feature usage, and improve the Services.
• Protect against unauthorized access and abuse, comply with law, and handle privacy requests.

2.1 Legal Bases for Processing

Where applicable law requires a legal basis, we rely on performance of our contract with you for requested account and finance features; consent for optional cloud AI and other processing requiring consent; legal obligations for required records and lawful requests; and legitimate interests for security, service reliability, support, and improvement where those interests are not overridden by your rights. We seek consent for non-essential analytics or storage where required by law. You can withdraw consent without affecting earlier lawful processing. Declining information needed for a feature may prevent us from providing that feature.

3. Sharing and Service Providers

We do not sell personal information or share your financial records for targeted advertising. We do not use information collected in the app for cross-app or cross-website advertising tracking.

3.1 Service Providers and Integrations

We use providers for hosting, authentication, storage, subscriptions, bank connectivity, optional AI processing, communications, notifications, app delivery, error monitoring, and product analytics. They receive information relevant to their purpose, subject to applicable contractual and legal safeguards. The categories and purposes are summarized below.

When you choose an integration, the provider may also process information under its own privacy policy. Bank connections currently use Mono where available. Google and Apple provide optional sign-in, and Apple and Google handle purchases through their respective app stores. Review the provider notices shown when you connect an account, sign in, or make a purchase.

3.2 Other Disclosures

We may disclose information when you request or authorize it, to professional advisers where necessary, to comply with law or a valid legal request, or to protect rights, safety, and the security of the Services. Information may be transferred as part of a merger, acquisition, reorganization, or sale of the business, subject to applicable privacy safeguards and notice requirements. We may use aggregated or de-identified statistics that cannot reasonably be linked to you to understand and improve the Services.

4. AI and Automated Features

Yomex provides calculations and automated suggestions, and optional cloud AI features such as Ellio conversations, planning, insights, voice interpretation, and language help. Cloud AI is off by default and requires an explicit opt-in. Individual permissions, including voice interpretation and persistent memory, apply separately where those features are offered. Core account storage, financial processing, and synchronization continue without cloud AI; private mode does not mean that all data stays on your device.

When you enable a cloud feature, relevant messages and context may be sent to an external AI provider. We reduce identifying details and financial values before sending supported requests. This reduces disclosure but does not make free text or financial context anonymous. Provider processing remains subject to its applicable terms, retention practices, and contractual safeguards; we do not promise zero provider retention.

Conversations, summaries, generated plans, and memory records may be stored in Yomex. Turning off cloud AI prevents future cloud processing. Turning off persistent memory stops its use and deactivates existing memories; it does not itself delete conversations, summaries, or inactive memory records. Use deletion controls or contact us to request erasure. Withdrawal cannot recall a request already sent to a provider.

AI outputs can be inaccurate or incomplete. They are suggestions for your review, not professional financial advice or decisions about credit, employment, insurance, or other legally significant eligibility. See our Terms of Service for more.

5. Subscriptions

App stores process your payment, and our subscription management provider processes purchase identifiers and subscription status to verify access, manage entitlements, prevent misuse, and assist with billing questions. Stores retain their own purchase records under their policies. Deleting Yomex data or your account does not automatically cancel a store subscription or delete records held independently by the store.

6. Retention and Deletion

Account and financial records generally remain while your account is active, unless you delete them. Saved receipt details, conversations, plans, and feedback may remain until you remove them or request data or account deletion. Receipt images are separate from extracted transaction details: removing an image does not necessarily remove the transaction. Uploaded statement files and PDF passwords are not retained by the import feature; saved transaction details remain until deleted.

We retain operational, diagnostic, support, and privacy-request records only as needed for their purposes, considering security, troubleshooting, applicable legal requirements, and disputes. We delete or de-identify information when it is no longer needed. Limited records may be retained to meet legal obligations, prevent fraud, resolve disputes, or document a request. Backup copies may remain until they expire under the applicable backup lifecycle and are not used in normal operations. There is no single retention period for every type of record.

Deletion from Yomex does not erase your bank's records, app-store purchase history, or copies you exported, shared, or saved outside the Services. Providers processing data on our behalf remain subject to applicable deletion obligations and lawful retention exceptions.

7. Security

We use safeguards designed to protect your information, including encrypted connections, infrastructure encryption for stored data, authentication, and access controls. This is not end-to-end encryption: authorized processing is needed to provide the Services. No system can guarantee absolute security. Protect your credentials, device, and exported files.

Optional biometric locking uses your device's authentication system. Yomex receives the authentication result, not your fingerprint or face template. You can manage camera, photo, microphone, speech recognition, and notification permissions in your device settings.

8. Your Choices and Rights

Privacy Controls and Export

Open Settings → Privacy & Trust to manage optional cloud features and export your data. Settings → Data Rights opens your profile's data-management controls. Personal-data exports are available as JSON or a ZIP bundle, including CSV files where selected. These privacy exports are distinct from any plan limits on ordinary transaction-report exports.

Delete Data Without Closing Your Account

You can remove supported individual records in their relevant screens. To erase stored data while retaining your sign-in account, open your profile through Settings → Data Rights and choose Clear Data. This removes stored financial records and related data, including accounts, transactions, budgets, goals, debt history, projects, saved receipt files, assistant conversations, memory, and in-app response feedback. Your sign-in account remains available. Export any information you want to keep before confirming.

Delete Your Account

Open your profile and choose Delete Account, then follow the confirmation steps. This removes your stored Yomex data and sign-in account. You can also email a deletion request from the address linked to your account to privacy@useyomex.com. We may verify your identity before acting. Instructions are also on our account deletion page.

Clear Data and account deletion are permanent. Uninstalling the app does not delete your server-held data, and deletion does not cancel an app-store subscription. See the retention section for backups, legal exceptions, and records held independently by other providers.

Other Rights and Choices

Depending on applicable law, you may request access, correction, erasure, a portable copy, restriction of processing, or object to processing, including certain automated decisions. You may withdraw consent and complain to a relevant privacy authority. Contact privacy@useyomex.com for help or a request that cannot be completed in the app. We verify requests proportionately and respond within applicable legal time limits. You do not need to close your account to exercise your rights.

Manage notifications in the app or your device settings. You can opt out of marketing messages through available unsubscribe instructions or by contacting us; necessary account and security notices may still be sent.

9. International Transfers

Our primary backend is hosted in the United Kingdom. Providers may process information in the United States or other countries, whose laws may differ from those where you live. Where required, we use legally recognized transfer safeguards, such as applicable adequacy decisions or contractual protections. Contact us for information about safeguards relevant to your data.

10. Children's Privacy

The Services are intended for adults aged 18 or older and are not directed to children. If you believe a child has provided personal information, contact us so we can investigate and delete it where appropriate.

11. Storage, Analytics, and Diagnostics

The app uses local storage to keep preferences, authentication information, and cached records for performance and offline use. The website uses your browser language preference and the language selected in the page address to display localized pages. Browser or device settings can clear or restrict local storage, which may affect functionality.

Error-monitoring services help identify crashes, failures, and performance problems. Product analytics services help us understand which features are used and improve the experience. These services may process technical information, timestamps, identifiers, usage events, and diagnostic context. Error monitoring and product analytics serve different purposes from advertising. We seek consent for non-essential analytics and similar technologies where required by law. Contact privacy@useyomex.com to ask about or exercise applicable analytics choices.

12. Accessibility

Contact us if you need help understanding this policy or using privacy controls. Our accessibility statement provides further information.

13. Policy Updates

We may update this policy as features or practices change. We will publish the revised policy with an updated effective date and provide notice of material changes where required by law. If a change requires your consent, we will request it separately; publishing this policy does not itself provide consent to optional processing.

14. Contact Us

Novuspire Limited, Nigeria. For privacy questions and requests, email privacy@useyomex.com. For support, email hello@useyomex.com.

You may complain to the Nigeria Data Protection Commission or the relevant authority where you live. You may contact us to help resolve a concern, but doing so is not a condition of exercising your right to complain.

Service Provider Categories