Privacy Policy

Effective date: May 19, 2026

This Privacy Policy explains how yplux ("we," "us," or "our") collects, uses, and protects your information when you use our service. We take your privacy seriously and are committed to being transparent about our practices.

1. Information We Collect

We collect only what is necessary to provide the service:

• Account information — your email address, and optionally your name (provided via Google sign-in or entered manually)
• Transaction data — income and expense records you enter, including amounts, dates, categories, and notes
• Usage data — basic server logs including IP addresses, request paths, and timestamps, used for security and debugging

We do not collect payment card details. Payments are processed by third-party providers (e.g., Stripe) who have their own privacy policies.

2. How We Use Your Information

• To provide and maintain the service
• To authenticate your identity and keep your account secure
• To send you sign-in codes and essential account notifications
• To improve and debug the service

We do not sell your data to third parties. We do not use your financial data for advertising purposes.

3. Data Storage

Your data is stored on Cloudflare's infrastructure (D1 database, R2 storage), distributed globally via Cloudflare's network. Cloudflare acts as a data processor on our behalf and is subject to appropriate data processing agreements.

4. Third-Party Services

We use the following third-party services:

• Cloudflare — infrastructure, CDN, database, and email delivery
• Google OAuth — optional sign-in method. If you sign in with Google, we receive your email address and name from Google
• Stripe — payment processing (if applicable). We do not store card details

5. Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us at contact@yplux.com. We will action deletion requests within 30 days.

6. Security

We use industry-standard security practices including HTTPS, signed JWT session cookies (HttpOnly), and minimal data collection. No system is completely secure, however, and we cannot guarantee the absolute security of your data.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing

To exercise any of these rights, contact us at contact@yplux.com.

8. Cookies

We use a single session cookie ("session") to keep you signed in. This cookie is HttpOnly, Secure, and expires after 30 days. We do not use tracking or advertising cookies.

9. Children's Privacy

yplux is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date above. Continued use of the service after changes become effective constitutes your acceptance of the updated policy.

11. Contact

If you have any questions or concerns about this Privacy Policy, please contact us at contact@yplux.com.