What we can actually tell you about your data.
How your data is handled
Four things that are true of the product as it stands.
Your rows are yours
Every query is scoped to your account by Postgres row-level security, tested against a real database on every commit.
Row-level security is the boundary itself, not a check the application layer performs on top of one. Every read and write goes through a request-scoped database client that carries your session, so a query for someone else's rows returns nothing rather than being filtered afterwards. Two-user isolation is proved against a real Postgres instance on every CI run.
No ads. No data sales.
No advertising, and nothing that profiles your behaviour. The only third-party code is error diagnostics.
There is no advertising SDK, no analytics package and nothing that builds a profile of how you use the app. The one third party in the browser is error diagnostics, and it only reports when something breaks — request contents, your email address and your IP are stripped before anything is sent.
Take your data, or delete it
Export everything you have entered, or delete your account outright. Deletion removes the rows, it does not hide them.
Export produces a single JSON document containing everything Yfiniq holds for you. Deleting your account removes the rows from the database rather than marking them hidden, and both paths are covered by integration tests that check the data is genuinely gone afterwards.
The assistant uses AI providers
Ask the assistant something and the relevant parts of your data are sent to an external model provider to answer it. They are named in our Privacy Policy.
This is disclosure, not a selling point. Answering a question means sending the relevant parts of your financial data to an external model provider, and because requests fail over between providers, one question can reach more than one of them. Every provider is named in the Privacy Policy. If that is not a trade you want to make, the rest of the app works without ever opening the assistant.
What Yfiniq does not have
Stated because the absence is the useful information, and because implying otherwise is how most of this page previously read.
No compliance certification
Yfiniq has not been through a third-party security audit or compliance certification of any kind. If one matters to you, treat its absence as a reason not to use this yet.
Not a regulated financial institution
Yfiniq is not a bank, holds no money, moves no money, and is not regulated as a payment service. Nothing it says is financial advice.
No security guarantee
Reasonable measures are described here, not promised outcomes. This is an early-access product built by a small team.
The assistant, specifically
The one part of Yfiniq that sends your data anywhere.
Everything else in Yfiniq stays between your browser and its own database. The assistant is the exception: to answer a question it sends the relevant parts of your financial data to an external model provider, and because requests fail over when a provider is unavailable, a single question can reach more than one of them. Each provider is named in the Privacy Policy.
Anything destructive the assistant proposes has to be confirmed, and that confirmation is enforced by the server rather than by the wording of the prompt — a model that ignored the instruction still could not delete anything on its own. Deletions it does carry out can be undone.
If none of that appeals, the assistant is optional. Every screen in Yfiniq works without ever opening it, and a request that is never made sends nothing anywhere.
Related: Privacy Policy, Terms of Service and the FAQ.