Privacy Policy

What we collect

• Account information: your name, email address, and login details.
• Financial information you enter: balances, income sources, bills, debts, transactions, goals, and similar details you choose to add.
• Billing records: your plan, subscription status, and renewal dates.
• Google sign-in: if you choose Continue with Google, Google shares your name, email address and profile photo with us. We never receive your Google password.
• Apple sign-in: if you choose Continue with Apple, Apple shares your name and email address with us. If you choose "Hide My Email", Apple gives us a private relay address that forwards to your real inbox. We never receive your Apple password.
• Checkout agreement: when you start a trial, we record the date, the plan you chose, and the version of the auto-renewal agreement you accepted.
• Basic technical data: such as device and browser information needed to keep the Service secure and working.
• Visitor analytics: basic page-visit counts (such as pages viewed and referring site) to understand how the site is used. We do not use advertising trackers.

Payments

Payments are handled by Stripe. We never receive or store your card number. We keep only a Stripe customer reference and your subscription status.

Email reminders

We may email you reminders you can control in Settings, such as your weekly check-in, bills due soon, and trial ending. We also send required account and billing emails (for example sign-in links, password resets, and at least 30 days' notice of any price change).

How we use it

To run the Service, show your forecasts and plans, manage your subscription, provide support, and keep accounts secure. Your data is isolated to your account.

We do not sell your data

We do not sell or share your personal information for advertising. We share data only with service providers that help us operate, or when required by law.

Service providers

• Hosting and database: stores and serves the app and your data.
• Stripe: payment processing and billing.
• Google: sign-in, only if you choose Continue with Google.
• Apple: sign-in, only if you choose Continue with Apple.
• Plaid: bank connections, only if you connect a bank.
• Email provider: delivers account and reminder emails.

These providers process data only to run the Service for us.

Bank connections through Plaid

If you choose to connect a bank, we use Plaid Inc. ("Plaid") to gather your account names, balances and transactions from your financial institution. You sign in to your bank through Plaid; we never see or store your bank username or password. Access is read-only and cannot move money. By connecting, you acknowledge that Plaid's handling of your data is governed by the Plaid End User Privacy Policy. We record the date and version of your consent. Connection keys are encrypted at rest (AES-256-GCM) and are never sent to your browser. Connecting a bank requires two-step verification. Entering data by hand works without connecting any bank.

Your rights and deletion

You can view and edit your data in the app. In Settings > Privacy you can download all of your data (JSON and CSV) or delete your account. Deleting your account disconnects every bank at Plaid, deletes all of your data, cancels your subscription, and closes your login immediately. You may also email support@getwealthyconsulting.com from your account email; we will confirm and process the request within 45 days. California residents have rights under the CCPA/CPRA, including to know, delete, and correct personal information, and to not be discriminated against for using those rights.

Retention

• Active accounts: we keep your data while your account exists, including after a subscription ends, so you can return.
• Disconnected banks: when you disconnect a bank, its access is revoked at Plaid right away. You can delete its imported accounts and transactions immediately; otherwise they are removed automatically 30 days after disconnecting.
• Deleted accounts: all data, including bank-imported data, is deleted immediately.
• Security logs: we keep a record of security events (sign-ins, two-step setup, bank connect/disconnect, data export) to protect your account; these are deleted with your account.

Security

We use HTTPS encryption in transit (TLS 1.2 or higher), encryption of bank connection keys at rest, per-account access controls, verified email sign-in, and optional two-step verification. No system is perfectly secure.

Children

The Service is not intended for anyone under 18.

Changes and contact

We will post updates here with a new date. Contact: support@getwealthyconsulting.com