Money·Future·Success

Last updated: 26 July 2026 1. ACCEPTANCE OF TERMS By downloading or using YouFinance, you agree to be bound by these Terms of Use. If you do not agree, please do not use the app. 2. USE OF THE APP YouFinance is a personal finance management tool designed to help you track income, expenses, net worth, and financial goals. The app is intended for personal, non-commercial use only. 3. USER DATA & LOCAL STORAGE All financial data entered into YouFinance is stored locally on your device using SQLite. YouFinance does not transmit your personal financial data to any external servers without your explicit consent. You are solely responsible for the accuracy of data you enter. 4. EXPORTED REPORTS — DISCLAIMER & LIMITATION OF LIABILITY YouFinance allows you to export financial reports (Personal Financial Report and Net Worth Report) as tamper-evident PDF files. These reports are self-reported and generated solely from data entered by the user. They are not audited, certified, verified, or endorsed by any financial institution, regulatory body, or accounting authority. YouFinance and its developers make no representations or warranties of any kind — express or implied — regarding the accuracy, completeness, reliability, suitability, or fitness for any purpose of the information contained in exported reports. Exported reports do not constitute financial, investment, tax, legal, or any other professional advice. Any financial, investment, or other decisions made in reliance on information contained in an exported report are made solely at the user's own risk. YouFinance accepts no liability for any direct, indirect, incidental, consequential, or other losses or damages arising from the use, misuse, or reliance upon exported reports by any party, including third parties to whom reports may be shared. The SHA-256 integrity fingerprint embedded in each exported report is a technical safeguard against post-export tampering with the underlying figures. It does not constitute an audit, certification, or guarantee of the accuracy of the data as originally entered. 5. DATA BACKUP & RESTORE — DISCLAIMER & LIMITATION OF LIABILITY YouFinance allows you to export a complete backup of your local app data — every account, transaction, and preference — into a single file, and to later restore a device from such a file. Backups are created and restored entirely at your direction and under your control; YouFinance does not receive, store, or have any access to backup files at any point. You are solely responsible for the security, storage, and onward sharing of any backup file you create, including wherever you choose to save or send it (e.g. personal cloud storage or email). Restoring a backup file completely and irreversibly replaces all data currently on the device with the contents of that file. YouFinance accepts no liability for data loss, corruption, or unintended overwriting resulting from restoring a backup file, including a backup file that has been modified, corrupted, or was not created by YouFinance. 6. NO FINANCIAL ADVICE YouFinance is not a licensed financial advisor, investment adviser, tax adviser, or accounting professional. All educational content, calculators, metrics, and projections in the app are provided for informational and illustrative purposes only and should not be construed as financial, investment, tax, or legal advice. Always consult a qualified professional before making financial decisions. 7. INTELLECTUAL PROPERTY All content, features, and functionality of YouFinance — including but not limited to the YouFinance™ name, bamboo reward system, and report design — are owned by YouFinance and protected by applicable intellectual property laws. Unauthorised reproduction or commercial use is prohibited. 8. LIMITATION OF LIABILITY To the maximum extent permitted by applicable law, YouFinance and its developers shall not be liable for any indirect, incidental, special, exemplary, or consequential damages, including but not limited to loss of data, loss of profits, or financial losses, arising out of or in connection with your use of the app, any exported reports, or any backup file you create or restore, even if advised of the possibility of such damages. 9. INDEMNIFICATION You agree to indemnify and hold harmless YouFinance and its developers from any claims, damages, or expenses (including legal fees) arising from your use of the app, your breach of these Terms, or your sharing of exported reports or backup files with third parties. 10. CHANGES TO TERMS We reserve the right to modify these Terms at any time. Continued use of the app after changes are posted constitutes your acceptance of the revised Terms. 11. GOVERNING LAW These Terms shall be governed by and construed in accordance with applicable law. Any disputes shall be resolved through good-faith negotiation before any legal proceedings are commenced. 12. CONTACT For questions about these Terms, please email us at youfinanceapp@gmail.com.

Last updated: 26 July 2026 YouFinance is developed and published by YouForge Pte. Ltd. 1. INFORMATION WE COLLECT YouFinance collects only the information you directly provide, including account names, transaction descriptions, financial amounts, and preferences such as base currency and theme. This data is stored locally on your device. YouFinance also generates a random anonymous User ID (UUID) stored locally on your device, used solely for QR friend-code linking. 2. HOW WE USE YOUR INFORMATION Your data is used exclusively to provide the app's features: tracking income and expenses, generating reports, displaying net worth over time, and enabling optional QR-based friend connections. We do not analyse, monetise, or share your financial data with any third party. 3. DATA STORAGE All personal and financial data is stored locally on your device using secure local storage. No data is uploaded to YouFinance servers. Exported PDF reports are saved to your chosen location and remain entirely under your control. 4. EXPORTED REPORTS PDF reports generated by YouFinance are self-contained documents stored on your device. Each report includes an SHA-256 integrity fingerprint derived from the report content; this fingerprint is computed locally and never transmitted. You are responsible for the security of any exported files you choose to share. 5. DATA BACKUP & RESTORE YouFinance lets you export a complete backup of your local data — every account, transaction, and app preference — into a single file, sent via your device's own share sheet to a destination you choose (such as your own cloud storage, email, or file manager). This follows the same no-cloud-sync model as the rest of the app: YouFinance itself never receives, stores, or has access to this file at any point — it goes directly from your device to wherever you choose to send it. Restoring from a previously exported backup file completely replaces all data currently on the device — every account, transaction, and preference — with what's in that file. This cannot be undone. Only restore a file you created yourself or otherwise trust the source of. Before anything on the device is touched, a restored file is validated to confirm it matches the expected backup structure, to guard against a corrupted or tampered file silently causing harm. Because a backup file contains your complete financial data in one place, you are responsible for keeping any copies you make (in cloud storage, email, or elsewhere) as secure as you would any other sensitive personal document. 6. QR FRIEND CODES Your QR profile code encodes only your locally generated anonymous UUID and your chosen display name. Scanning another user's QR code stores their name and UUID locally on your device only. No friend data is synced to any server. 7. DATA SECURITY We implement appropriate technical measures including local-only storage, SHA-256 report fingerprinting, and structural validation of restored backup files to protect your information. However, no method of electronic storage is 100% secure. You are responsible for securing your device and any exported or backup files you share. 8. EXCHANGE RATE DATA YouFinance may retrieve foreign exchange rates from third-party rate providers via your internet connection to support multi-currency reporting. No personal financial data is transmitted in these requests — only the currency code pair is sent. 9. CHILDREN AND FINANCIAL LITERACY YouFinance welcomes young users exploring financial literacy under adult guidance. As all data is stored locally on your device, no personal information from users of any age is collected or transmitted by YouFinance. Parents and guardians are encouraged to use YouFinance together with children as a practical financial education tool. 10. YOUR RIGHTS You have the right to delete all your data at any time through the app's Clear Cache or Delete All Data function in Settings. Uninstalling the app removes all locally stored data from your device. 11. THIRD-PARTY SERVICES YouFinance may use third-party packages for local authentication, notifications, and exchange rate retrieval. These services operate under their own privacy policies and do not receive your financial transaction data. 12. CHANGES TO THIS POLICY We may update this Privacy Policy periodically. We will notify you of significant changes through the app. Continued use of the app after changes are posted constitutes your acceptance. 13. CONTACT For privacy concerns, please email us at youfinanceapp@gmail.com.

Last updated: 26 July 2026 1. INTRODUCTION YouFinance takes the security of our users seriously. We welcome responsible disclosure of security vulnerabilities and are committed to working with the security community to maintain a safe and trustworthy app. 2. SCOPE This policy applies to the YouFinance mobile application. As YouFinance is a local-first application, the primary scope includes: — Local SQLite database security and data integrity — Application logic vulnerabilities (e.g. unauthorised data access, privilege escalation) — Authentication and biometric bypass vulnerabilities — Exported PDF report tampering or integrity bypass — Backup file validation bypass (e.g. a malformed or maliciously crafted backup file that isn't correctly rejected before device data is touched) — QR code parsing vulnerabilities that could lead to data injection — Exchange rate fetch security (e.g. man-in-the-middle, response spoofing) — Third-party library vulnerabilities with material impact on user data 3. OUT OF SCOPE The following are outside the scope of this program: — Social engineering attacks targeting users or support staff — Physical attacks against a user's device — Denial of service attacks — Vulnerabilities in third-party services not under YouFinance's control — Reports generated from modified or jailbroken/rooted devices — Theoretical vulnerabilities without a working proof of concept 4. REPORTING A VULNERABILITY If you discover a security vulnerability, please disclose it responsibly by: — Emailing youfinanceapp@gmail.com with the subject line "VDP Report" — Providing a clear description of the vulnerability and its potential impact — Including steps to reproduce the issue and, where possible, a proof of concept — Allowing us reasonable time (minimum 90 days) to investigate and remediate before any public disclosure — Not accessing, modifying, or deleting user data beyond what is necessary to demonstrate the vulnerability 5. OUR COMMITMENTS — We will acknowledge receipt of your report within 48 hours — We will provide regular updates on our investigation progress — We will not pursue legal action against researchers who act in good faith and comply with this policy — We will credit researchers (with their consent) who responsibly disclose valid vulnerabilities — We will notify affected users if a vulnerability has compromised their data, where legally permitted 6. REPORT INTEGRITY & SHA-256 FINGERPRINTING Exported PDF reports are uniquely identified by an SHA-256 content fingerprint. If you discover a method to alter the report without invalidating this fingerprint, this constitutes a critical vulnerability and should be immediately disclosed under this policy. 7. LEGAL SAFE HARBOUR YouFinance will not take legal action against security researchers who: — Discover and report vulnerabilities in good faith under this policy — Avoid privacy violations, data destruction, and service disruption — Do not exploit vulnerabilities beyond the minimum required for proof of concept — Report findings to us before any public disclosure 8. THANK YOU We appreciate the security community's efforts in keeping YouFinance and its users safe.