Legal

Privacy Policy

Last updated: July 16, 2026

LEYUIT helps you understand your own money. Protecting the financial information you entrust to us is central to that purpose. This policy explains what we collect, how we use and protect it, who we share it with, and the choices you have.

1. Information we collect

Information you provide

Account details — your email address and a password, which we store only as a secured, irreversible hash (never the password itself).
Multi-factor authentication — if you enable it, the information needed to verify your second factor. We store it securely and never expose it after setup.
Manual entries — any accounts, balances, categories, or notes you add yourself.
Support messages — anything you send us when you ask for help.

Financial information via Plaid

To connect your bank and financial accounts, we use Plaid Inc. (“Plaid”). When you link an institution, Plaid securely collects information from your financial institution on your behalf and provides it to us. Depending on the accounts you link, this may include account details (type, name, masked number, currency), balances, transaction history, identity information associated with your accounts, and investment or liability information where applicable.

We never see or store your bank login credentials. You enter them directly into Plaid’s secure interface. Plaid’s handling of your information is governed by Plaid’s End User Privacy Policy, which we encourage you to review.

Information collected automatically

Limited technical information needed to operate and secure the service (such as timestamps and diagnostic data). These records are configured not to contain your financial data or secrets.

2. How we use your information

We use your information only to provide and protect the service — to authenticate you, connect to your financial institutions through Plaid, keep your data current, and display, categorize, and analyze your finances for you. We also use it to provide support and to maintain security and meet our legal and contractual obligations.

We do not sell your personal information, and we do not use your financial data for advertising.

3. How we store and protect your information

In transit: all connections use HTTPS/TLS.
At rest: sensitive data is encrypted using strong, industry-standard encryption (AES-256), on top of full-volume encryption.
Credentials: your password is stored only as a secured hash; the access tokens that let us retrieve your data are encrypted and are never sent to your browser or written to logs in readable form.
Access: access to systems and data is restricted on a need-to-know basis, protected by multi-factor authentication, and reviewed regularly.
Network: our servers are not directly exposed to the public internet; access is brokered through a secured, authenticated connection with access controls at the edge.

No method of transmission or storage is completely secure, but we work to protect your information using industry-standard safeguards.

4. How we share your information

We share information only as needed to run the service:

Plaid — to connect to and retrieve data from your financial institutions.
Infrastructure providers — reputable hosting, storage, and content-delivery providers that process data on our behalf under confidentiality and security obligations.
Legal — where required by law, or to protect the rights, safety, and security of our users or the service.

We do not sell your personal information or share it with third parties for their own marketing.

5. How long we keep it, and deletion

We keep your information for as long as you maintain it in your account. When you remove data, disconnect an institution, or close your account, we delete it:

Disconnecting an institution revokes our access at Plaid and deletes the associated access token immediately; the related account and transaction data is removed and permanently purged after a short grace period.
Deleting data or closing your account hides it from you immediately and permanently purges it within 30 days, except for limited records we must retain by law or a minimal deletion record.

We encourage you to export your data before deletion if you want to keep your own records. See our Data Retention notice for details.

6. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or export your information, to disconnect any linked institution at any time, and to withdraw consent for account connections. You can use the controls in the app or contact us (Section 9). We respond within a reasonable time and, for deletion requests, within the timelines above.

7. Consent for account connections

Before you connect a financial institution, we present Plaid’s Link interface and this Privacy Policy. By connecting an institution, you authorize LEYUIT to access and store the data described above through Plaid to provide the service. You may revoke this authorization at any time by disconnecting the institution, which triggers deletion as described above.

8. Children’s privacy

The service is not directed to individuals under 18, and we do not knowingly collect their information. If you believe a minor has provided us information, contact us and we will delete it.

9. Changes and contact

We may update this policy from time to time; we will change the “Last updated” date and, for material changes, provide notice within the service. Questions about this policy or your information? Contact us at privacy@leyuit.com.