Connecting through YNAB's OAuth flow creates one connection per client: your YNAB access and refresh tokens (encrypted at rest by the OAuth provider), your YNAB user id, the client's name, and the access level you chose (read-only, or read and write).
Connections are stored in Cloudflare KV and expire automatically after 30 days without use.
Plan data transits Cloudflare in memory on each request and reaches Anthropic as part of your conversation with Claude. Nothing is shared with anyone else.
Visit /disconnect to remove a connection at any time. You can also revoke this app entirely from your YNAB account settings; YNAB-side tokens expire on YNAB's own schedule regardless. Alternatively, contact cobwebs.loans.6d@icloud.com to request deletion.
For questions about this privacy policy, contact cobwebs.loans.6d@icloud.com.
Last Updated: 2026-08-29