Consumer Data Right Policy

1. Who we are

Yeeld is operated by Kabisi Group Pty Ltd (ABN 33 154 884 965). The Money tab in the Yeeld app lets you share your bank data with us under the Consumer Data Right (CDR), the Australian Government's Open Banking scheme.

We receive that data as a CDR representative of Basiq Pty Ltd, an accredited data recipient. Basiq collects the data from your bank on our behalf and is responsible for how CDR data is handled under our arrangement. This policy should be read together with Basiq's CDR policy.

2. What we collect and why

We only ask for what the Money tab needs, and only with your consent. You choose the bank and the accounts.

• Account name, type and balance: to show your balances and tell your accounts apart.
• Account numbers and features: to tell accounts at the same bank apart (shown masked).
• Transaction details: to sort your spending into categories, add it up each month and find ways to save.

We read up to the last 12 months of transactions. We use the data only to show it back to you: your balances, your spending by category each month, and suggestions on where you could save. We don't use it for marketing, we don't sell it, and we don't share it with partners or advertisers.

3. How long we keep it

We don't store your bank transactions or balances. Each time you open the Money tab, we fetch them through Basiq, work out your totals, and keep them in our server's memory for up to 10 minutes so the page stays quick. After that they're gone from our systems.

What we do keep: the date you connected, an identifier for your connection at Basiq, and any categories you choose for merchants (for example "always count Bunnings as Home & garden"). These are our own records, not CDR data, and you can delete them by disconnecting or closing your account.

4. Your consent, and stopping it

Your consent lasts 365 days unless you stop it sooner. You can stop sharing at any time from the Yeeld app (Money, then Bank sharing, then Stop sharing), or through your bank. When you stop sharing or your consent ends, we stop collecting data, and your connection and the data held for it at Basiq are deleted. We don't keep a de-identified copy.

5. Where it's processed

Yeeld's servers run on Google Cloud in Sydney, Australia, so your bank data is processed in Australia while you use the Money tab (it's held in memory only, as described above). Requests to the app pass through Cloudflare's network on the way, through the Cloudflare data centre nearest you; your bank data isn't stored there. It isn't disclosed to anyone overseas.

6. Correcting your data

Your bank data comes straight from your bank, so if something looks wrong, the bank is usually the place to fix it. If you think we've handled your data incorrectly, or you'd like us to correct anything we hold, email us at contact@yeeld.com.au. We'll reply within 10 business days and tell you what we've done, or why we can't make the change.

7. Complaints

If you're unhappy with how we've handled your CDR data, email contact@yeeld.com.au with the subject "CDR complaint". We'll acknowledge it within 1 business day, keep you updated, and aim to resolve it within 30 days.

If you're not satisfied with our response, you can also contact Basiq Pty Ltd through its CDR policy, or complain to the Office of the Australian Information Commissioner at oaic.gov.au.

8. Changes to this policy

We'll update this page if anything changes, and change the date at the top.