Yomi Lite ("we", "us") helps you keep track of your own money. This notice explains what personal data we collect, why, who handles it, how long we keep it, and your rights under the Data Privacy Act of 2012 (Republic Act No. 10173).
Who is responsible for your data
The personal information controller is Yomi Lite, operated by Jerome D.. For any privacy question or request, email [email protected].
What we collect
- Account details: your name, email address, password (stored only as a one-way hash), and timezone.
- The records you enter: accounts and balances, income, expenses, transfers, categories, bills, utang (including the names of people you lend to or borrow from), savings goals, and notes.
- Sign-in details while you are logged in: your IP address and browser or device type, kept with your session.
- Security records: events such as access-code use, data exports, and administrator actions, stored with account IDs only.
- The access code you used to register (stored only as a one-way hash).
We do not connect to your bank or e-wallet, and we never ask for card numbers or bank login details. We do not use advertising or analytics trackers.
Why we use it
- To provide the service: show your balances, reports, bills, utang, and goals.
- To keep your account secure: sign-in, email verification, password resets, and preventing abuse.
- To send service emails you need, such as verification and password-reset messages. We do not send marketing email.
We process your data because it is necessary to provide the service you signed up for, and with your consent, which you give when you create an account. We never sell your data.
About other people in your records
If you record utang or notes about other people, you are responsible for what you write. Only you can see your records. Please add only what you need, such as a first name.
Who handles it for us
We use a few service providers to run the app. They process data only on our instructions:
- Laravel Cloud (Laravel LLC): hosting and the database, on servers in Singapore.
- Cloudflare: secure connections, protection against attacks, and delivering the website quickly.
- Resend: sending service emails.
These providers may process data outside the Philippines. We choose providers with strong security and contractual safeguards.
Administrators can see users' names and email addresses to manage access, but not your financial records. We disclose data to authorities only when the law requires it.
Cookies and storage on your device
We use only the cookies needed to keep you signed in and to protect forms. If you hide your balance on the home screen, that choice is saved on your device only. We use no tracking or advertising cookies.
How long we keep it
- Your account and records: for as long as you keep your account.
- When you delete your account, your profile and records are removed right away. Copies in our database backups expire within 7 days. If a backup is ever restored, your account is deleted again before the service resumes.
- Kept after deletion, without your details: a record that your account was deleted (its ID and creation time, so it stays deleted), that your access code was used, and security records that show IDs only.
How we protect it
All connections use encryption (HTTPS). Passwords and access codes are stored as one-way hashes, and session data is encrypted. Every record is tied to its owner and checked on each request, and the database is backed up daily. No system is perfectly secure; if a breach affects you, we will notify you and the National Privacy Commission as the law requires.
Your rights
Under the Data Privacy Act you have the right to be informed, to access, to correct, to object, to erasure or blocking, to data portability, to damages, and to file a complaint. In the app you can:
- see and correct your details and records at any time;
- download your data as CSV files (Settings → Export my data);
- delete your account and its records (Settings → Delete my account).
For anything else, email [email protected]. If you believe your rights were violated, you may complain to the National Privacy Commission (privacy.gov.ph).
Changes to this notice
If we change how we handle your data, we will update this page and the date above. For important changes, we will tell you in the app or by email before they take effect.