Security & Privacy
YoTrackr is built around one principle: your data belongs to you. Here's exactly how we protect it.
Built secure from the start
Zero bank logins required
We never ask for your bank credentials, net banking passwords, or card PINs. Traditional tools use Plaid to read your bank accounts — YoTrackr never touches your bank. You stay 100% in control.
Your data, your account
Your subscription data is tied to your YoTrackr account and served only to you after you sign in. It is saved on our servers under your account on every plan, so it is there when you sign in on another device.
Secure by default
Passwords are stored hashed, never in plain text. Sign-in and licence endpoints are rate-limited, responses carry security headers, and production errors never leak internals.
Google Drive & Dropbox Backup (Beta)
On Pro and Team plans, backups go directly to your own Google Drive or Dropbox account. We never store those backup files on YoTrackr infrastructure.
Yours to take or delete
Export all of your account data, or delete your account and its data, from your account settings whenever you like.
No ad tracking
We don't run advertising trackers, and we never sell or share your data with advertisers.
HTTPS everywhere
The API, the web app and the marketing site are served over HTTPS, and plain HTTP is redirected.
What we store, and where
Found a vulnerability?
We take it seriously. Please disclose it privately, and don't post it publicly until we've had a chance to fix it.
Email us privately
Send a detailed report to [email protected] with steps to reproduce, the impact, and any proof-of-concept.
Reply within 48 hours
We'll confirm receipt and assign a severity rating. Critical issues get a same-day response.
Fix timeline
We fix confirmed issues in order of severity, critical ones first, and keep you updated until it is resolved.
Credit
With your permission, we'll credit you in the changelog.