1. Scope and principles
This policy applies to the Yosu website, web application, and related services that reference it. We process data lawfully, fairly, transparently, and only to the extent needed for the service, security, and product improvement.
Third-party services have their own privacy terms, which you should review before using them.
2. Data we process
Depending on the features you use, we may process:
- Account data such as phone number or email, password hash, verification state, account identifier, region, and language. We do not store plaintext passwords.
- Bookkeeping content such as amounts, dates, categories, tags, notes, ledgers, asset accounts, budgets, goals, reconciliations, and data you import.
- Security metadata such as sessions, IP address, browser or device information, timestamps, security events, and request identifiers.
- Feedback content, optional contact details, and its handling history.
- Error diagnostics such as a redacted message and stack, route template, release, Request ID, and browser information. Query strings are removed and direct identifiers are redacted where practical.
- A fixed allowlist of product events such as app opens, page views, and completed bookkeeping actions. Analytics does not read request bodies or collect amounts, notes, or form input.
3. Cookies and local storage
Necessary cookies maintain sessions and security state. Local storage keeps language, appearance, amount visibility, reminder state, and selected local tool inputs. Disabling these mechanisms can break sign-in or reset preferences.
We currently do not use third-party advertising-tracking cookies.
4. Why we process data
We process data to register and secure accounts; store, calculate, synchronize, and display requested features; detect abuse and failures; handle support; analyze aggregated product trends; and comply with legal obligations.
5. Processors and disclosure
We do not sell personal information or ledger content. Cloud hosting, backups, SMS or email verification, and similar providers may process the minimum data needed under contractual and security restrictions.
If you enable federated sign-in, the provider supplies an account identifier and any necessary verified account information under your authorization. We use it only for registration, linking, and sign-in. We otherwise disclose personal information only with consent, when necessary to perform a contract, or as required by law.
6. Location and retention
Data for the 有数 service is generally stored in the Chinese Mainland. If a regulated cross-border transfer becomes necessary, we will complete the required notice, assessment, and consent steps.
Error instances are normally kept for 30 days, allowlisted analytics events for 90 days, and resolved or ignored error groups for 90 days. Ordinary deleted transactions remain recoverable for 30 days.
After permanent account deletion, associated data is deleted or anonymized, subject to mandatory retention and controlled backup-rotation periods.
7. Security
Measures include password hashing, session-token digests, access control, origin checks, rate limits, audit logs, backups, and data minimization. No system is perfectly secure; we will remediate and provide legally required notice if an incident may affect you.
8. Your choices and rights
Subject to applicable law, you may access, correct, copy, export, or delete personal information; withdraw relevant authorization; delete your account; or question our practices.
- Manage profile, preferences, and security settings in your account.
- Export transactions or a complete bookkeeping workbook from Data.
- Reset bookkeeping data or permanently delete the account from account settings.
- Submit a privacy request through Help & Feedback after signing in. We may verify identity first.
9. Minors
Users under 18 should use the service with guardian consent and guidance. The service is not directed to children under 14 acting independently. If we learn that child data was processed without guardian consent, we will promptly investigate and delete or otherwise protect it.
10. Updates and contact
We may update this policy as features, technology, or law changes. Material changes will receive reasonable notice and, where required, renewed consent. The current date and version appear above.
For questions, complaints, or rights requests, sign in and use Help & Feedback. We will verify identity and respond within the period required by applicable law.