Your privacy is not a formality at Yojarv — it is a core part of how we build. This policy explains exactly what data we collect, how we use it, and how we protect it. We believe in plain language, not legal jargon.
Account data: Name, email address, and hashed password (or Google OAuth token if you sign in with Google).
Financial data you enter: Income sources, EMIs, investments, insurance details, and goal targets — all entered manually by you. We never access your bank accounts.
Usage data: Basic analytics such as which features you use and how often, to help us improve the product. This is aggregated and never linked to your financial data.
Device/session data: Browser type, IP address, and session tokens for security purposes (e.g., detecting suspicious logins).
The Gmail expense parsing feature is entirely opt-in. If you choose to enable it, Yojarv will read only bank alert and transaction notification emails to automatically update your cashflow. We do not read personal emails, store email content, or share any Gmail data with third parties. You can revoke Gmail access at any time from your account settings.
We do not use your financial data for advertising, profiling for third parties, or any purpose beyond operating the Service.
We do not share your personal or financial data with any third party except in the following limited circumstances:
Your data is retained for as long as your account is active. If you delete your account, all associated data (financial entries, AI history, profile) is permanently deleted from our servers within 30 days. Anonymised, aggregated statistical data may be retained for product improvement.
To exercise any of these rights, contact support@yojarv.com.
We use industry-standard security practices including AES-256 encryption at rest, TLS 1.3 in transit, bcrypt password hashing, HTTP-only cookies for session tokens, rate limiting, and regular security audits. No system is perfectly secure, but we take every reasonable step to protect your data.
Yojarv uses minimal cookies: a session cookie for authentication (HTTP-only, not accessible to JavaScript), and optionally a "remember me" preference cookie. We do not use advertising or tracking cookies.
We will notify you of material changes via email or in-app notice at least 7 days before they take effect. Continued use of Yojarv after the effective date constitutes acceptance.
Privacy questions or data requests: support@yojarv.com. We respond within 1–3 business days.