Privacy Policy

What Yield does: keeps track of the offers and benefits on the credit cards you hold, what each is worth to you, and what you have used.

What we collect: the cards you add, the benefit use you record, how you value and rate benefits, what you type in chat, and basic facts about your device and app version.

What you choose to share: a Google account if you sign in with one, and read-only access to a Gmail inbox only if you connect it.

What we never do: sell your data, show you ads, or read email you have not connected.

Deleting: one action in the app removes your account; what remains is purged within 30 days.

You give us:

• The credit cards you add to the app, identified by product, not by card number. Yield never asks for a card number, expiry or security code.
• What you record about your benefits: redemptions, amounts, dates, and how much a benefit is worth to you.
• Reviews and ratings you write about cards and benefits.
• Messages you type in chat.
• Your sign-in identity. Without an account this is an anonymous identifier created on your device. If you sign in with Google, it is your Google account's name, email address and identifier.

We collect automatically:

• The app version, operating system version and a device type, sent with each request.
• The IP address of each request, which gives an approximate location.
• Error and crash reports.

From Gmail, only if you connect it: see section 04. Nothing is read from an inbox you have not connected.

This website sets no cookies and collects nothing. The app store you install from has its own policy.

• To run the app: show your cards, benefits and what you have left; sync between your devices.
• To answer you in chat: your messages and the cards you hold are what the answer is built from.
• To keep the service working: find errors, stop abuse, and limit automated use.
• To understand what is used: which screens and features people open, so we know what to improve.

We do not use your information for advertising, and we do not build profiles of you for anyone else.

Connecting Gmail is optional. If you do, you grant Yield the gmail.readonly scope: we can read messages but never send, modify or delete them.

What we read: messages from card issuers about statements, offers and benefits, to find the cards you hold and the benefits that apply to them.

What we store: the facts we extract (for example, that a statement credit was posted) and an encrypted token that lets us read your inbox again. We do not store copies of your email.

Disconnecting: one action in the app revokes the token with Google and deletes our copy.

Yield's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you use chat, your message and the context needed to answer it (the cards you hold, the benefit facts involved) are sent to a third-party model provider to produce the reply. Providers we use include OpenAI, Anthropic, Google and TypeSafe.

What they may do with it: produce the reply. Under the terms we use them, these providers do not train their models on your messages.

What you should not type: card numbers, passwords or anything you would not want stored. Chat messages are kept with your account so you can see them again.

The app sends usage events to PostHog, an analytics service, so we can see which screens and features are used. An event carries the screen or action, your app version and operating system, an approximate location derived from the IP address, and your account identifier.

Not included: advertising identifiers, your contacts, or the content of what you type.

• Service providers that run the app for us, under contracts that limit what they can do with your data: Google Cloud and Firebase (hosting and sign-in), Neon (database), the model providers in section 05, and PostHog (analytics).
• Legal compliance: if the law requires it, or to protect the rights and safety of you, us or others.
• A business transfer: if Yield is acquired or merged, your data goes with it under this policy.

We do not sell personal information and have not done so.

We keep your information while your account exists. When you delete your account, your cards and your Gmail connection are removed at once and the account is marked deleted; the remaining records are purged within 30 days. Backups roll over on their own schedule and are not read for anything but recovery.

Anonymous accounts that were never used again are removed after a period of inactivity.

Data travels encrypted. The token that reads your Gmail is encrypted at rest with a key the database does not hold. Access inside the service is limited to what each part needs.

No system is perfect. If we learn of a breach that affects you, we will tell you.

Yield is for adults with credit cards. It is not directed at anyone under 18, and we do not knowingly collect information from them. If you believe we have, email us and we will delete it.

• Delete: in the app, any time.
• Disconnect Gmail: in the app, any time; the token is revoked.
• Export: email us and we will send you what we hold about you.
• Correct: everything you entered can be edited in the app.

If you live somewhere with privacy laws that give you more rights, such as the EU or California, email us and we will honour them.

Yield is operated from the United States and your information is processed there. If you use the app from elsewhere, you are sending your information to the United States.

When this policy changes, the date at the top changes with it. If a change matters to you, we will say so in the app before it takes effect.

Questions, requests, or something that does not look right: [contact email]. [Legal entity name].