Privacy Policy

Last updated: October 14, 2026

Not legal advice. This page describes what Yusr actually does with data today, based on a direct review of its code and database rules — it isn't a substitute for legal counsel if you need one for your own situation.

What we collect

Accounts use Google, Apple, or an email address and password; during the current private preview, access is limited to the owner. With Google or Apple, we receive the name and email address your account provider shares with us. With email, Firebase Authentication stores your email address and handles your password; we never see it. You also choose a display name, which other members of a shared household can see.

Everything else in Yusr is data you type in yourself: transactions, budget categories, net worth figures, goals, RESP and Zakat details, and similar. Today none of it is pulled automatically from a bank or brokerage. If bank connection is added, this policy will be updated before it launches.

If you use the Help form inside the app, we collect your display name and the email, subject and message you submit.

When something goes wrong in the app while you're signed in, an error report is saved automatically: the error message and technical details, the page address, your browser's user-agent string, and the time. It has no field for your financial data, account ID or household ID, but the error message, technical details and page address are free text, so they could occasionally contain something shown in the app or in the address. The report is sent from your signed-in session. Under the current private-preview rules, error reports are only saved while the owner is signed in; errors that happen before sign-in are shown only in your browser's developer console.

How it's used

To run the app: sign you in, save what you enter, sync it across your own devices, and, when household sharing is available, share it with the household you choose to share it with (it isn't available to other people during the private preview). To respond if you contact support. That's the extent of it — we don't use your financial data for advertising, and we don't build a profile of you to sell or share.

Household sharing

During the current private preview, access is limited to the owner, so household sharing isn't available to other people. Yusr is designed to be used solo or shared with a household. When sharing is available, it works through a household code: anyone who signs in and enters that code gets full read and write access to everything in that household — budgets, transactions, net worth, Zakat records, all of it.

Treat the code the way you'd treat a shared password: anyone who has it can join while it's valid. In Settings → Plan & sharing you can generate a new code at any time; the old code then stops working for new joins, and people who already joined stay members. Members can leave a household themselves, but one member can't remove another. If someone you no longer want has joined, contact us, or start a new household and move forward from there.

Where it's stored

Data is stored in Google Firebase (Cloud Firestore). We don't operate our own servers — Firebase's own privacy and security practices apply to the infrastructure layer.

Who can see it

Members of your household, and no one else; during the private preview, that is only the owner. We don't sell data, and we don't share it with third parties for marketing. As the operators of Yusr, we can access data through Firebase's own admin tools if needed to investigate a bug or a support request — we don't do this routinely or read household data as a matter of course.

Cookies and tracking

Yusr doesn't use advertising cookies or third-party analytics. Your browser keeps a few things for the app: your language and display preferences, your household code and household ID, your account ID, your display name, your answers to the short questions shown before sign-up, a few flags for tips you've already seen, and your sign-in session (kept by Firebase Authentication). The household code and ID connect you to your household, and your display name is shown to its other members. Our pages load the Satoshi font from Google Fonts, so Google receives your IP address and browser details when a page loads.

If that changes (for example, if we add analytics to understand product usage), this page will be updated first, and any tracking will be disclosed here before it's turned on.

Deleting your data

You can delete your account and all of its data yourself from Settings → Plan & sharing; this is permanent and cannot be undone. If your household has other members, that button is replaced with "Leave household", since deleting a shared household from one person's screen would erase everyone else's data too; contact us if you need a shared household fully deleted. Help requests and error reports are stored separately and aren't removed when you delete your account; contact us to have them deleted.

Children's privacy

Yusr is intended for adults managing household finances and is not directed at children. We don't knowingly collect data from children under 13.

Changes to this policy

If this policy changes in a way that meaningfully affects how your data is handled, we'll update the date at the top of this page and, where practical, let existing users know.

Contact

For questions about this policy, or to request access to, correction of, or deletion of your data beyond what you can already do yourself in Settings, contact bounaimha@gmail.com.