← Stub Money

Privacy Policy

Last updated November 4, 2026

Stub Money ("Stub", "we") is a companion for YNAB. It turns receipt photos into categorized YNAB transactions and lets you ask questions about your budget, in the app or from your own AI assistant. This page says exactly what data that takes, where it goes, how long we keep it, and how to delete it. Stub is not affiliated with YNAB.

What we collect and why

• Your YNAB sign-in. You sign in with YNAB (OAuth). We receive your YNAB user id and access tokens. We store the tokens encrypted at rest and use them only to read and write your plan as described here. YNAB offers no narrower permission than read/write; we need write access to create the transactions you approve.
• A copy of your plan. We keep a mirror of the YNAB plan you choose: accounts, categories, payees, transactions, balances and goals. It is refreshed from YNAB about every 30 minutes and lets us match receipts to bank rows, suggest categories and answer questions quickly. YNAB remains the source of truth.
• Receipts. The photos you upload (from the web, the iPhone Shortcut, or email if you set it up), any note you send with them, and the text we extract from them: store, date, total, line items and payment method.
• Settings you enter. An optional display name and email, and, on the premium tier, the API key, URL and model name of the AI provider you choose to use for in-app chat (the key is stored encrypted).
• Chat and memories (premium). Your in-app chat history and any facts you ask the assistant to remember.
• Connections. Tokens for AI assistants you connect through MCP, and the Shortcut token, so those tools can act as you.
• Operational logs. Standard web server logs (IP address, time, URL) kept briefly for debugging and abuse prevention. We use a single session cookie and no analytics, advertising or tracking scripts.

Who else sees your data

We never sell your data, and it is never passed to a third party you do not know about. The complete list of parties that process it:

• YNAB, the source and destination of your budget data, under its own policy.
• DigitalOcean (New York, USA) hosts the servers and the encrypted backups.
• Fireworks AI (USA) runs the AI models that read receipt images and suggest categories. For a receipt it receives the image and your note. For a category suggestion it receives the payee name, amount, memo, account name and your list of category names. It never receives your name, email, YNAB identity, account numbers or tokens.
• The AI provider you choose (premium chat only). When you add your own API key, the data needed to answer your questions, which can include any part of your budget and receipts, is sent to that provider under your agreement with them.
• The AI assistant you connect (MCP). When you authorize Claude or another assistant to use Stub, it can read your budget and receipts and make the changes you ask it to, through your account. That assistant's own privacy policy governs what it does with the results. You can revoke a connection at any time from that assistant or by deleting your Stub account.

How we protect it

All traffic is encrypted in transit (HTTPS). YNAB tokens and AI keys are encrypted at rest with keys that are not stored alongside the database. Access to the servers is limited to the operator, over SSH keys, and the operator looks at a customer's data only to resolve a problem that customer has reported.

How long we keep it

For as long as your account exists. When you delete your account, everything above (plan mirror, receipts and images, chat, tokens, settings) is removed immediately from the live database. Encrypted server backups age out within four weeks. Server logs are discarded within about a month. Nothing we hold is kept to train AI models.

Deleting your data

Two ways, either is enough:

• In Stub: Settings → Delete account. Immediate.
• By email: write to kyle@heironimus.com from the address on your account and we will delete it within 7 days and confirm.

You can also cut off our access without contacting us: in YNAB, open Account Settings → Developer Settings → Authorized Applications and revoke Stub Money. Our stored tokens stop working at once.

Changes

If we start using your data for a new purpose, or share it with a new party, we will update this page, change the date at the top, and ask you to agree to the change the next time you sign in before we use the data in the new way.

Contact

Questions about this policy or your data: kyle@heironimus.com.