How YM² handles your data

The short version

YM² ("we", "our", "the app") is a personal finance manager for Android built around a simple principle: your financial data belongs to you. YM² has no backend server and no user account — every transaction, account, category, and budget lives in an encrypted database stored locally on your device, inside the app's private storage. We do not operate any server that your financial data is sent to, and we do not sell, rent, or share your data with advertisers or data brokers — there is nothing on our end collecting it to begin with.

What the app reads, and why

YM² does not collect analytics, does not use crash-reporting or advertising SDKs, and does not track you across other apps or websites.

SMS permission use, in plain terms

If you grant SMS permission, YM² reads transaction-related SMS messages (from banks and card issuers) to detect and log transactions automatically. SMS processing happens entirely on your device. Message content is parsed locally to extract amount, merchant, and account details — the raw SMS text is never uploaded to any server, ever.

Does YM² support adding transactions manually? Yes. A "+" button is available from the Activity tab to create a manual transaction at any time — for a bank that doesn't send transaction SMS, or if you'd simply rather not grant SMS permission at all. YM² works fully on manual entry alone.

• SMS is read only after you turn on "Enable SMS import" in Settings — never automatically, never at install time.
• You can revoke SMS permission at any time from Android's own app permission settings.
• Any transaction you enter manually is stored using the same on-device, encrypted storage as SMS-sourced transactions.

Categorization & approval

Categorization runs entirely on-device, using a rule-based engine and a local keyword matcher — no transaction content is ever sent to a remote server as part of this processing. Transactions that are automatically categorized always remain visible and editable in Activity → Pending — automation never locks you out of correcting a transaction. Corrections you confirm can become a rule YM² applies next time; nothing is learned without your explicit confirmation.

What happens if I don't approve a transaction? You can turn on auto-approve in Settings so detected transactions are approved by themselves after a time period you choose. If you leave auto-approve off, nothing is applied to your budgets or reports automatically — every detected transaction simply sits in Activity → Pending until you review and approve it yourself.

How data is used

Data extracted from SMS or manual entry is used exclusively to power the features you see in the app: transaction lists, budgets, goals, reserves, bill tracking, and reports. It is never used to build an advertising profile, because YM² shows no advertisements.

Offline storage

Your transactions, budgets, and settings are stored in an encrypted local database on your device. YM² is designed offline-first — the app functions fully without an internet connection.

Internet usage

YM² makes no network calls anywhere in its live feature set. SMS parsing, categorization, and every calculation the app shows you run entirely on-device, with or without an internet connection.

Data sharing

We do not sell user data. YM² contains no advertising SDKs, no analytics SDKs, and no third-party trackers. We do not share your financial data with advertisers, data brokers, or any other third party.

Security

Your live database is encrypted at rest under a random key held in the Android Keystore, separate from your backup encryption. Encrypted backups use AES-256-GCM under a passphrase only you know, derived with PBKDF2 (210,000 rounds).

Backups

YM² supports creating an encrypted backup file that you control and store yourself, and restoring from it on any device running YM². Backups are never uploaded automatically — if you choose to move or share a backup file yourself (for example, using Android's share sheet to save it to cloud storage), that transfer is your own action, governed by whatever service you send it to, not by YM².

Data deletion

Because there is no account and no server-side copy of your data, there is nothing for us to delete on your behalf — your data only ever exists on your device (and in any backup file you've created yourself). To remove all app data, uninstall the app, or use Android's own Settings → Apps → YM² → Storage → Clear storage.

Permissions

YM² requests only the Android permissions required for the features you use: SMS (transaction detection), notifications (budget and reminder alerts), and storage (backups). Every permission can be revoked from Android Settings at any time; core app functionality degrades gracefully rather than breaking.

Children's privacy

YM² is not directed at children under 13, and we do not knowingly collect information from children under 13.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.