Privacy Policy

Last updated: October 10, 2026

Draft. This policy describes how CreditYeti is designed to handle your information. It is under legal review and will be finalized before the app is publicly available.

CreditYeti ("CreditYeti," "we," "us") makes an iPhone app that helps you freeze and thaw your credit at Equifax, Experian, and TransUnion. Doing that means handling some of the most sensitive information you have, so this policy explains exactly what we collect, why, who we share it with, and how you can delete it.

The short version: we collect what we need to manage your credit freezes, we encrypt sensitive data, we share it with the credit bureaus and the vendors that help us run the service, and we never sell your personal information.

Information we collect

Account information

• Your mobile phone number, used to sign in with a one-time code.
• Your email address, if you provide one.

Identity information

• Legal name, date of birth, Social Security number, and home address.
• We collect these to verify your identity and, when you ask us to, to connect to or create accounts with the credit bureaus. Some of this may be pre-filled by our identity verification provider (see "Who we share information with"), and you confirm it before we use it.

Credit bureau account information

• The usernames, passwords, PINs, and security question answers for your Equifax, Experian, and TransUnion accounts, if you choose to let CreditYeti store them.
• Session information from the bureau websites, so you don't have to sign in every time.
• One-time verification codes the bureaus send you, which you enter in the app when a bureau asks for them.
• You can choose not to store bureau credentials. In that case you sign in to each bureau yourself, inside the app, whenever you take an action.

Credit information

• Freeze status at each bureau, credit scores, and other information from your credit file that the bureaus show you when we access your account on your behalf.

Activity and device information

• A history of the freeze, thaw, and refreeze actions you take in the app.
• Device type, operating system version, app version, crash reports, and basic usage analytics. We do not include your identity information, bureau credentials, or credit information in analytics or crash reports.

Payment information

• If you subscribe, Apple processes your payment. We receive confirmation of your subscription status, not your card details.

How we use your information

• To verify your identity and keep your account secure.
• To connect to your credit bureau accounts, or create them when you ask us to.
• To freeze, thaw, and refreeze your credit and show you its current status.
• To send you notifications and text messages about your account, such as a thaw that is about to end or a bureau asking for a verification code.
• To provide support, prevent fraud and abuse, and comply with the law.
• To understand how the app is used so we can improve it, using data that does not identify you.

We do not use your identity or credit information for advertising.

Who we share information with

We share information only as needed to run CreditYeti:

• Credit bureaus (Equifax, Experian, TransUnion): to sign in to your accounts, create accounts, and submit freeze and thaw requests that you ask for.
• Identity verification: we use a third-party identity verification provider. When you sign up, we share your phone number and the information you enter with that provider and, through it, your wireless carrier, to confirm your identity and pre-fill your details.
• Service providers that host our systems and help us operate the app, including authentication, database hosting, secure browser automation used to carry out bureau actions, crash reporting, and customer support. They may use your information only to provide their services to us.
• Apple, to process subscriptions and deliver push notifications.
• Legal and safety: when required by law, or to protect the rights, property, or safety of our users or others.
• Business transfers: if CreditYeti is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that deal, subject to this policy.

We do not sell your personal information and we do not share it for cross-context behavioral advertising.

Text messages

By giving us your mobile number you agree that CreditYeti may text you about your account, including sign-in codes. Credit bureaus you connect to or create an account with may also text you about that account. Message and data rates may apply. Reply STOP to opt out of non-essential messages from us.

How we protect your information

• Sensitive information, including Social Security numbers and bureau credentials, is encrypted in transit and at rest.
• Access to production systems is limited to the people who need it, protected by multi-factor authentication, and logged.
• The app shows sensitive values masked, and can require Face ID or Touch ID before revealing them.
• No system is perfectly secure. If a breach affects your information, we will notify you as required by law.

How long we keep information

• We keep your information while you have an account.
• If you disconnect a bureau, we delete the credentials and session information we stored for it.
• If you delete your account, we delete your identity information, bureau credentials, and credit information within 30 days, except where we must keep certain records to comply with the law, resolve disputes, or prevent fraud.

Your choices and rights

• Delete your account at any time in the app under Settings.
• Disconnect a bureau at any time in the app.
• Access or correct your information by contacting us.
• Depending on where you live, including California, you may have additional rights to know, access, correct, delete, or limit the use of your personal information. We will not treat you differently for exercising them. To make a request, email us at the address below. We will verify your identity before acting on it.

Children

CreditYeti is only for people 18 and older. We do not knowingly collect information from anyone under 18.

Changes to this policy

If we make material changes, we will update the date at the top and tell you in the app before the changes take effect.

Contact us

Email support@credityeti.app with any questions about this policy or your information.