Privacy Policy

Wealthy ("we", "us", or "our") is a privacy-first net worth tracker designed for intentional monthly financial check-ins. We believe your financial data belongs to you. We do not connect to your bank accounts, scrape financial data, or sell your information to third parties.

This Privacy Policy describes what data we collect, how we use it, and the choices you have. By using Wealthy (the "Service"), you consent to the practices described in this policy.

1. What We Collect

Account Information

When you create an account, we collect your email address. This is the only personal identifier we require. We do not collect your name, phone number, billing address, or any other identity documents.

Financial Data You Enter

Wealthy is a manual-entry application. You voluntarily enter financial data including:

• Stock holdings
• Cryptocurrency holdings
• Retirement account balances
• Cash account balances
• Budget and expense entries
• Monthly financial snapshots

We never connect to your bank, brokerage, or any financial institution. All financial data in Wealthy is entered by you, the user.

What We Do Not Collect

• Bank credentials or account numbers
• Billing address or phone number
• Government-issued identification
• Analytics or behavioural tracking data

2. How We Use Your Data

We use your data to:

• Provide and maintain the Service, including displaying your portfolio, calculating performance metrics, and generating charts.
• Authenticate your identity and secure your account.
• Manage your subscription and billing through our payment provider.
• Respond to support requests you submit through the app.
• Send important service communications such as security notices or policy changes.

We do not use your data for advertising, profiling, or any purpose beyond operating the Service.

3. Third-Party Services

We use a small number of trusted third-party services to operate Wealthy. We do not use any third-party analytics or tracking services.

Database

Your account and financial data are stored in a secure, managed database. All data is encrypted in transit and at rest. Access controls ensure that only you can access your own data.

Authentication

We use a third-party authentication service to manage sign-in. You can authenticate with your email and password, or through Google or Apple sign-in. When using Google or Apple, we receive only your email address and display name from the provider. We do not receive or store your Google or Apple password.

Lemon Squeezy (Payments)

Lemon Squeezy acts as our Merchant of Record, handling all billing, tax compliance, and payment processing. When you subscribe, Lemon Squeezy collects and manages your payment details directly. We do not store your credit card number, billing address, or other payment information on our servers. We receive only your subscription status, plan details, and Lemon Squeezy customer identifiers.

Error Monitoring

We use an error monitoring service to detect and fix technical issues. When an error occurs, diagnostic data such as the error message, stack trace, and browser type may be collected. This data does not include your financial information or personal details.

Hosting

The application is served by a third-party hosting provider. Standard server logs (IP address, request path, timestamps) may be retained by the provider in accordance with their privacy policy.

4. Data Sharing

We do not sell, rent, or trade your personal information. Your data may be shared only in the following circumstances:

• With Service Providers – the third-party services listed above, strictly for operating the Service.
• For legal reasons – when required by law, in response to valid requests by public authorities, or to protect our rights, your safety, or the safety of others.
• With your consent – for any other purpose with your explicit agreement.

Market data providers (used to fetch stock and cryptocurrency prices) do not receive any of your personal data. Price lookups are made server-side using ticker symbols only.

5. Cookies

Wealthy uses only essential cookies required for the application to function. These include authentication session cookies managed by Supabase and a theme preference cookie for light/dark mode. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

6. Data Storage and Security

Your data is stored in a secure, managed database. Security measures include:

• Encryption in transit and at rest.
• Access controls ensuring only you can access your own data.
• Authentication via secure, HTTP-only session cookies.

While we implement strong security measures, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Export

You can export all of your data at any time. The Settings menu includes an Export Data option that downloads your financial data as CSV files in a ZIP archive. This allows you to keep a local copy of your data or move it to another service.

8. Data Retention

We retain your data for as long as your account is active. If you request account deletion, all of your data is permanently removed from our database. Specifically:

• Account and financial data – retained while your account is active. Permanently deleted upon account deletion request.
• Support requests – retained for up to 24 months from resolution for quality and compliance purposes.
• Server logs – standard server logs retained by our hosting provider in accordance with their retention policies.

9. Account Deletion

You can request account deletion at any time by submitting a support request through the app. When we process your request, all of your data — including your account, financial entries, snapshots, and subscription records — is permanently and irreversibly removed from our database.

10. International Data Transfer

Your financial and account data is stored securely in our managed database. Our hosting and payment providers may process certain data in other jurisdictions as part of their operations. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place where required by law.

11. Children's Privacy

The Service is not intended for anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under 18. If you are a parent or guardian and become aware that your child has created an account, please contact us so we can remove their information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you via the email address associated with your account. Continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us at support@wealthyapp.co.