Privacy Policy

Last updated: March 13, 2026

YNAB Inflation Tracker ("the App") is built by Richard Scafidi. This policy explains how the App handles your data.

The Short Version

The App connects to your YNAB account to read your budget data. All processing and storage happens locally on your device or self-hosted infrastructure. No data is sent to the developer or any third party other than YNAB.

Data Storage

All data is stored locally in a SQLite database on your device or server:

  • Desktop (Electron): Database file in your operating system's application data directory
  • Docker: Database file in a Docker volume you control
  • Web: Database file on the server where you host the application

No data is synced to any cloud service operated by the developer.

YNAB API Connection

The App connects to the official YNAB API (api.ynab.com) using a personal access token you provide. The App retrieves:

  • Budget names and metadata
  • Categories and category groups
  • Transactions (amounts, dates, payees, memos)
  • Monthly budget allocations and activity
  • Account information

The App uses read-only access. It does not create, modify, or delete any data in your YNAB account. Your YNAB personal access token is stored locally on your device and is never transmitted to the developer or any third party.

Data Collection

The App does not collect:

  • Personal information (name, email, phone number)
  • Location data
  • Usage analytics or telemetry
  • Crash reports
  • Advertising identifiers
  • Cookies or tracking pixels

Data Processing

All calculations — inflation metrics, anomaly detection, periodic billing analysis, and trend data — are performed locally on your device or self-hosted server. No financial data is transmitted externally for processing.

Data Export

The App provides CSV export functionality. Exported files are saved to a location you choose. You are responsible for the security of exported files, as they contain your financial data in plain text.

Self-Hosting

When running the App via Docker or as a web server, you are responsible for securing the deployment environment, including network access, TLS configuration, and database file permissions.

Third-Party Services

The only external service the App connects to is the YNAB API. YNAB's privacy policy is available at ynab.com/privacy-policy.

Children's Privacy

The App does not knowingly collect data from anyone, including children under 13.

Changes to This Policy

If this policy changes, the updated version will be published on this page with a revised date.

Contact

Questions about this policy can be directed to richard@scafidi.dev.