Yarrow

Privacy policy

Effective October 8, 2026

In plain English

  • We collect what Yarrow needs to build your plan: bank data you choose to share through Plaid, what you tell the app, and your Apple sign-in.
  • We use it to run Yarrow for you. We never sell it, and we don't use it for ads.
  • We never see your bank password, and Yarrow can't move your money.
  • You can see, fix or delete your data at any time. Deleting removes your bank connections too.
  • Questions: boston@yarrow.money.

1. Who we are

Yarrow is made by Menos App LLC, a Wyoming limited liability company ("Menos App", "we", "us"). This policy covers the Yarrow iPhone app and the website at yarrow.money (together, "Yarrow"). It explains what personal information we collect, why, and the choices you have.

2. What we collect

When you sign in

Yarrow uses Sign in with Apple. Apple gives us a unique identifier for you and, if you choose to share them, your name and email address. If you pick "Hide My Email", we get a private relay address from Apple instead of your real one.

From your bank, through Plaid

When you connect a bank, and only for the accounts you choose, we receive through Plaid:

  • Account details: the bank's name, account names and types, and the last few digits of each account number.
  • Balances.
  • Transactions: amount, date, description, merchant and category.
  • For credit cards and loans, where your bank provides them: the balance, interest rate, minimum payment and due date.

We never receive your bank username or password. We don't collect full account numbers or card numbers.

What you tell Yarrow

Your pay schedule and which deposit is your paycheck, other income, bills, debts, budgets, goals, plan choices, and the moves you mark as done.

From your device

A push notification token so we can send you alerts, plus your device model, iOS version, Yarrow version, language and time zone.

When you contact us

Your email address, your message and anything you choose to include.

Purchases

Apple handles payment. We learn whether you have an active subscription. We never receive your card details.

Technical logs

Our servers record basic request information, such as IP address, time and errors, to keep Yarrow running and secure.

This website

yarrow.money uses no cookies, no analytics and no ad trackers. Our hosting provider, Cloudflare, processes visitors' IP addresses to deliver the site and protect it from attacks. The site loads its fonts from Google Fonts, so Google receives your IP address when you visit.

3. How we use it

  • To build and update your plan: find your paycheck, bills and debts, work out your next move, track your budgets and show the math.
  • To warn you when something needs attention, such as a bill due before payday or a late paycheck, by notification and in the app.
  • To keep your account and our systems secure and to prevent fraud and abuse.
  • To answer your questions and fix problems you report.
  • To understand what's working and improve Yarrow. We do this ourselves, not by selling or sharing your data.
  • To meet legal obligations and enforce our terms.

We don't use your data for advertising, we don't make credit decisions about you, and we don't send your bank data to third-party AI services.

4. Who we share it with

We do not sell your personal information, and we do not share it for targeted advertising. We share it only in these cases:

  • Service providers that run parts of Yarrow for us, under contracts that limit their use of your data:
    • Plaid, to connect to your bank and fetch your account data.
    • Amazon Web Services, which hosts our servers and database in the United States.
    • Apple, for Sign in with Apple, push notifications and subscriptions.
    • Proton, which hosts our email, when you write to us.
    • Cloudflare, which hosts this website.
  • When you ask us to.
  • For legal reasons, if we believe in good faith that the law, a court order or a valid legal request requires it, or to protect the safety, rights or property of you, others or Menos App.
  • If the business changes hands, for example in a merger or sale. Your data would stay covered by this policy, and we'd tell you before it was governed by a different one.

5. Plaid

Plaid Inc. connects Yarrow to your bank. When you connect, you agree to Plaid's End User Privacy Policy, which covers how Plaid handles your data. Plaid's access lets Yarrow read your data; it doesn't let anyone move your money through Yarrow. You can see and remove the apps connected to your accounts through Plaid at my.plaid.com.

6. How long we keep it

  • While your account is open, we keep your data so Yarrow can work, including past transactions that your plan and budgets rely on.
  • When you disconnect a bank, we ask Plaid to remove the connection and delete that bank's accounts and transactions from our systems.
  • When you delete your account, we remove your bank connections and delete your data from our live systems. Encrypted backups roll off within 35 days.
  • Server logs are deleted after 14 days.
  • Support emails are kept while we need them to help you, then deleted.

We may keep a small amount of information longer when the law requires it, for example a record of a privacy request and how we answered it.

7. How we protect it

Bank access is read-only. Plaid access tokens are encrypted before they're stored, all traffic uses TLS, data is encrypted at rest, and only the systems that need your data can reach it. No method of storing or sending data is perfectly secure, so we can't guarantee absolute security. If a breach affects your data, we'll notify you as the law requires. More on security.

8. Your choices and rights

Wherever you live in the United States, you can:

  • See your data and ask for a copy of it.
  • Correct it. Most of it you can edit in the app; for anything else, email us.
  • Delete it. Delete your account in the app or by email. How to delete your account.
  • Disconnect a bank at any time in the app.
  • Turn off notifications in iPhone Settings.
  • Stop using Sign in with Apple for Yarrow in iPhone Settings.

To make a request, email boston@yarrow.money. We'll verify the request comes from you, usually by confirming it from your Yarrow account or the email address on it, and answer within 45 days. If we need more time, we'll tell you why. We won't treat you differently or charge you more for using your rights. If we turn down a request, you can appeal by replying to our answer with "Appeal"; we'll respond to the appeal within 45 days.

9. California and other states

California residents have rights under the California Consumer Privacy Act (CCPA). Residents of other states, including Colorado, Connecticut, Oregon, Texas, Utah and Virginia, have similar rights under their own laws. This section applies to you if one of those laws covers you.

What we've collected in the past 12 months, by CCPA category:

  • Identifiers: your Apple user identifier, email address, IP address and device push token.
  • Financial information: account names and types, the last digits of account numbers, balances, transactions, and loan and card details.
  • Commercial information: whether you've subscribed.
  • Internet or network activity: server logs of your requests to Yarrow.
  • Inferences: conclusions drawn from your data to build your plan, such as which deposit is your paycheck and which payments are bills.

Sources: you, your bank through Plaid, Apple and your device. Purposes: those in section 3. Disclosed to: the service providers in section 4, for those purposes.

Selling and sharing. We don't sell personal information or share it for cross-context behavioral advertising, and we haven't in the past 12 months. That includes people under 16. Because we don't, there's nothing to opt out of, but we treat a Global Privacy Control signal as an opt-out anyway.

Sensitive information. We use financial information only to provide Yarrow, as the CCPA allows. We don't use it to infer characteristics about you.

Your rights. You can ask to know what we've collected, used and disclosed, to get a copy, to correct it and to delete it, without discrimination. You can use an authorized agent; we'll ask the agent for proof of your permission and may ask you to verify your identity with us directly. Make requests as described in section 8.

Some financial information is covered by federal financial privacy law instead of state laws. We honor the requests above either way.

10. Children

Yarrow is only for adults 18 and older. We don't knowingly collect information from anyone under 18. If you think a child has given us information, email us and we'll delete it.

11. Where your data lives

Yarrow is for people in the United States. We store and process your data in the United States.

12. Changes to this policy

If we change this policy, we'll post the new version here and update the effective date. If a change matters, such as using your data in a new way, we'll tell you in the app or by email before it takes effect and, where the law requires, ask for your consent.

13. Contact us

Menos App LLC
1309 Coffeen Ave Ste 1200
Sheridan, WY 82801
boston@yarrow.money