Privacy Policy for Budget Bridge for YNAB

Last updated: August 23, 2026

Budget Bridge for YNAB is an unofficial ChatGPT and Codex plugin that connects to a user-authorized YNAB account through OAuth. It returns requested YNAB resources and applies only exact changes that have been previewed and explicitly approved.

Data we access

The app may access YNAB user, plan, account, category, month, scheduled-transaction, transaction, payee, memo, balance, assignment-movement, and currency data needed for the requested API operation. It does not ask for or receive bank login credentials, card numbers, account passwords, or MFA codes.

How we use data

YNAB data is used only to return requested resources, translate supported identifiers and values, preview or apply exact assignments and transaction changes, render results, maintain the authorized connection, prevent duplicate writes, recover the same approved operation, secure the service, and troubleshoot requested support issues. We do not sell YNAB data, use it for advertising, or build unrelated profiles.

Storage and retention

Cloudflare stores OAuth access and refresh tokens for the connected session. Temporary sign-in state expires after approximately 10 minutes, and an approval cookie may remain for approximately 30 days.

An unapproved write preview may temporarily contain the exact plan, account, category, transaction, amount, date, payee, memo, precondition details, and bounded display snapshot required to ensure a later commit matches what was reviewed. The snapshot can remount that same review if its original card is lost, without rebuilding it from fresh YNAB data. Unapproved previews expire after no more than 15 minutes.

Once a user approves a commit attempt, the exact remaining operation payload and its bounded display snapshot may be retained with its recovery record for up to 30 days when an operation is committing, interrupted, partial, or otherwise safely retryable. This permits recovery of the same reviewed operation without recalculating or duplicating completed writes. Completed, discarded, superseded, and expired unapproved operations have their write payloads and review snapshots scrubbed together; bounded receipts and tombstones may remain for up to 30 days.

Custom operational logs are limited to fields such as a correlation ID, route, timing, status class, retry count, and hashed identifiers. The service disables automatic invocation URL logs and traces so OAuth callback query credentials are not intentionally persisted in application telemetry.

Data sharing

Data is shared only with YNAB to service authorized API requests, OpenAI to invoke tools and present results in the user's ChatGPT or Codex conversation, and Cloudflare to host the Worker, OAuth flow, operation state, recovery records, and custom operational logs. We do not knowingly send YNAB data to other third parties.

Security and user controls

The app uses HTTPS, YNAB OAuth, secure cookies, expiring previews, strict plan and state checks, explicit confirmation before commits, and restricted dynamic-client redirect hosts. Explicit YNAB read-only authorization and the deployment read-only kill switch disable commits.

Users may revoke the application in YNAB account settings and disconnect it in ChatGPT or Codex. For an earlier deletion request, a privacy question, or suspected misuse, use the verified support contact published with the YNAB developer application. App-held data reasonably associated with a verified request will be deleted unless temporary retention is required by law or to resolve a security, fraud, or abuse issue.

Changes

If this policy or the app's use of YNAB data materially changes, this page will be updated and additional consent will be requested where required.

We are not affiliated, associated, or in any way officially connected with YNAB or any of its subsidiaries or affiliates. The official YNAB website can be found at https://www.ynab.com. The names YNAB and You Need A Budget, as well as related names, tradenames, marks, trademarks, emblems, and images are registered trademarks of YNAB.