Money Clarity

Is it safe to connect Gmail to a finance app?

It is a reasonable thing to hesitate over, and the honest answer depends entirely on what the app actually reads and what it keeps. This page states what Unyfy does, what it does not do, and how to withdraw access at any moment without contacting anyone. If those answers are not good enough, do not connect it - the app works with SMS and manual statement upload instead.

The problem: "connect your email" is asked casually and is not casual

Your inbox is the most revealing account you own. It holds your bank statements, but also your medical appointments, your legal correspondence and your private conversations. An app asking for it should be able to say precisely what it touches, and most cannot.

Permission screens describe scopes in language written for developers, not for you
Most apps do not say what they store as opposed to what they read
Very few tell you how to revoke, because it is not in their interest to
"We take privacy seriously" is not an answer to any of these

What Unyfy actually reads

Unyfy is looking for one narrow thing: bank and card transaction emails and statement attachments. That is what the parsing engine is built for and it is all that is useful to it.

Transaction alerts and statement emails from banks and card issuers
Statement PDF attachments, which are parsed for transactions and then not needed again
Nothing is read for advertising, profiling or resale, because Unyfy does not have an advertising business
Unyfy has completed Google’s production OAuth verification, which requires an independent review of exactly which scopes an app requests and why

What happens to it

Reading and storing are different questions, and the second one matters more. Ask any app both.

Transactions are extracted and stored so your history is there when you open the app
Data is encrypted at rest and in transit
Access tokens are stored with field-level encryption, separately from transaction data
Personal correspondence has nothing to extract from it and is not stored
Deleting your account deletes the data - there is an in-app deletion flow, not an email request

How to revoke, in about thirty seconds

This should never require contacting the company, and at Unyfy it does not. You can cut access from Google directly, without telling us.

Go to myaccount.google.com/permissions
Find Unyfy in the list of apps with account access
Click Remove access
Unyfy stops receiving anything immediately - it cannot be overridden from our side
To also delete what was already stored, use account deletion inside the app

What to ask any app that wants your inbox

Use these on Unyfy too. If an app cannot answer all five in plain language, that is the answer.

Which Google scopes do you request, and why does each one exist?
Have you passed Google’s production OAuth verification?
What do you store, as distinct from what you read?
How do I revoke access without contacting you?
How do I delete what you already have, and how long does that take?

If you would rather not connect it at all

Gmail is a convenience, not a requirement. Refusing it costs you automation, not the product.

SMS-based capture works on Android without any email access
Statement PDFs can be uploaded manually whenever you choose
You can connect, look at what it found, and disconnect the same day
Nothing about the app is withheld from you for declining

Common questions

What does Unyfy read in my Gmail?

Bank and card transaction emails and statement attachments. That is what the parsing engine looks for and all that is useful to it. Unyfy has completed Google’s production OAuth verification, which involves independent review of which scopes an app requests and why.

How do I disconnect Unyfy from my Gmail?

Go to myaccount.google.com/permissions, find Unyfy, and click Remove access. It takes effect immediately and cannot be overridden from our side. To delete data already stored, use the account deletion flow inside the app.

Can I use Unyfy without connecting Gmail?

Yes. SMS-based capture works on Android without email access, and statement PDFs can be uploaded manually. Gmail makes it automatic; it is not required.

Does Unyfy sell my data?

No. Unyfy has no advertising business and no data-resale business - revenue comes from subscriptions, vouchers and product referrals. That is a structural answer rather than a promise, which is the kind worth checking on any app.

The right test is not whether an app promises to be careful. It is whether it can tell you exactly what it reads, exactly what it keeps, and how to end it in under a minute without asking permission. Those answers are above, and they should be your minimum bar for every app that asks.

Written by Danish Mirza, founder of Unyfy. 14 years in Indian lending and collections at Standard Chartered, Barclays, Ola Money and Uni Cards.
Last reviewed 2026-09-08.