Yuba Privacy Policy
Effective 11 October 2026
Yuba builds your spending ledger from your own bank messages, on your phone, and keeps it there. We have no server, so nothing you do in Yuba can reach us. This page writes that down in the detail a reviewer and a careful reader both need. The promise is precise on purpose.
The short version
| Where your messages live | Your phone |
| Where your ledger lives | Your phone |
| Accounts, sign-up, passwords | None |
| Analytics SDKs, ad tracking, ads | None |
| Servers run by Yuba | None |
| Data about your money we collect | None |
| Sent by the app on its own | The update check: a random install number and the version (see Network traffic) |
The developer
Yuba (يوبا) is made by Amr Miri, for people in Saudi Arabia; commercially, Yuba operates from the United Arab Emirates. Nobody on our side holds your data, and no Yuba copy of it exists anywhere — the only copies are the one on your phone and the one in your own iPhone backup. Questions and requests: support@yuba-app.com.
Your data on your phone
You install an iOS Shortcut that hands your bank SMS messages to Yuba. The app reads them on the device with fixed, deterministic rules — no AI, no cloud service — and builds a private ledger in a local database that only your phone holds.
Yuba never reads messages in the background; it sees only what the Shortcut hands it. It does not touch your contacts, your location, your photos, or any advertising identifier. Reminders are scheduled on the device itself — Yuba does not have the remote push entitlement, so it cannot receive a push from anywhere.
You can export your data at any time. Export is never behind the membership.
Data collection
None about your money. Your messages, balances, and history are processed and stored only on your device. We cannot see them, receive them, or recover them. The one thing Yuba sends by itself is the update check under Network traffic — a random install number and the app's version, never anything about your money. The one copy of your data that can exist off your phone sits inside your own iPhone backup, under your Apple ID (see Backups).
Third parties
No one receives your data. No analytics SDKs, no ad networks, no data brokers. Nothing is sold, shared, or disclosed to anyone — there is nothing on our side to share.
The app talks to exactly two outside services, and neither gets anything about your money: Expo's update service and Apple's App Store. Both are listed under Network traffic.
Network traffic
The complete list of what Yuba sends over the internet:
- The update check. Each time Yuba opens or comes back to the screen, it asks Expo's update service (u.expo.dev) whether a newer version exists. The request carries the app's version numbers, the phone's platform and a random number that marks this install — made on the phone, tied to no account or Apple ID, new again after a reinstall. Like any internet request it shows Expo your phone's internet address, and if Yuba ever crashed at start-up, the next check also carries that error text so a broken update can be rolled back. Expo can count the installs that checked; it never sees a transaction, a bank or a name.
- Apple's App Store. Yuba asks Apple for the membership's prices and whether you are a member. When you buy, Apple's own payment sheet appears, and the payment runs entirely between you and Apple.
That is the whole list. Links you tap — these pages, or the iCloud link that adds the YUBA shortcut during setup — open outside Yuba.
Payments
Yuba's membership is billed by Apple through the App Store, under Apple's privacy policy. We have no server, so a purchase sends us nothing: no name, no card details, no Apple ID, no identity. Apple handles payment, renewal, and refunds. We never learn who our members are, and we keep no customer records — Apple holds the transaction.
Backups
Your ledger rides your own iPhone backup — your Apple ID, Apple's encryption. A standard iCloud backup is encrypted with keys Apple holds; it is end-to-end encrypted only when Advanced Data Protection is on. We hold no copy. Restore your phone and Yuba comes back with it; nothing in that passes through us. iPhone Settings can leave Yuba out of the backup if you prefer.
Retention and deletion
Your data stays on your phone for as long as you choose to keep it.
- Delete the app, and the data on the phone is deleted with it, immediately.
- In the app, Settings → Your data removes data without deleting the app.
- Your own iPhone backup may still hold a copy until you update or delete that backup. It is yours, under your Apple ID; we cannot touch it.
There is no server-side copy anywhere, so there is nothing to ask us to delete. Deletion is entirely in your hands.
Your rights
Saudi Arabia's Personal Data Protection Law gives you rights over personal data collected about you: to be informed, to access it, to obtain a copy, to correct it, to destroy it, and to withdraw consent.
We designed Yuba so that no personal data ever reaches us. The law's duties fall on whoever collects your data, and nobody collects it. The processing that happens — your bank messages becoming your ledger — is done by you, on your own device, for your own personal use, which the law itself leaves alone. So these rights are already in your hands, served by the phone itself:
- Access and copy — open the app; export is available any time.
- Correction and destruction — the only copy is on your device, under your control. Settings → Your data, or deleting the app, destroys it.
- Withdrawing consent — stop running the Shortcut, or delete the app. Nothing of yours lingers with us, because nothing of yours ever reached us.
The only exceptions are the two below, and both are messages you write and send us yourself.
The support inbox
If you email support@yuba-app.com, we receive your email address and whatever the email carries — your own words, or a letter Yuba drafted that you chose to send (listed below). That is the only personal data that ever reaches us, and only because you chose to send it. We use it solely to answer you. We never share or sell it. Ask in the same thread and we will send you a copy of what we hold, correct it, or delete it.
Diagnostics you choose to send
Yuba can draft emails for you to send us. The app sends nothing itself: each opens in your own mail app, you can edit or delete any part of it, and it leaves only when you tap Send.
- Teach Yuba (Settings): the wording of bank messages Yuba could not read, with the sender's name — every number replaced by a nine, people's names cut to initials, balance lines and dates removed — plus Yuba's version and a random six-character tag that is not a device id.
- Teach Yuba this wording (on a transaction): that one bank message, with its amount, date, shop and card ending as your bank wrote them, and what you filed it as if you changed it; people's names cut to initials, long numbers to their last two digits, balance lines removed.
- Help (Settings): a short report — versions, your phone's model, counts and whether capture is working. No amounts, no names, no message text.
- The crash screen: only if the app ever breaks — the error text and Yuba's version.
We use these messages solely to improve how Yuba reads bank texts and to answer you.
Breaches
There is no Yuba database of users to breach. The only copies of your data are the one on your phone and the one in your own backup. If an incident ever touched the support inbox — the one narrow place we hold anything of yours — we would notify the Saudi Data & AI Authority within 72 hours and write to the people affected without delay.
Children
Yuba is not directed at children.
Changes
If this policy changes, the new version appears on this page with a new effective date. The promise itself is built into how the app works: keeping your data on your phone is the design, and changing that would mean building a different app.
Contact
support@yuba-app.com — for this policy, your data, or anything else about Yuba.