Privacy policy

The short version

• WLTH never connects to your bank. We hold no banking credentials and have no read access to any account of yours.
• Your records live in a database on your device, and sync to our API so your devices agree.
• You sign in with Apple or Google. We never see or store a password.
• We do not sell your data, show adverts, or use your records to train any model.
• You can export everything as JSON or CSV at any time, and deleting your account genuinely deletes it.

Who we are

Tom Sharkey is the data controller for personal data processed through the WLTH app and this website. For anything in this policy, write to [email protected].

What we hold

Account details

When you sign in with Apple or Google we receive a unique identifier for you, and an email address — which, with Sign in with Apple, may be a private relay address. We store that identifier, the email address, and the date you signed up. We never receive your Apple or Google password.

The records you enter

The assets and liabilities you add: names, the emoji or icon you choose, categories, values, currencies, the dates you attach to them, and any notes. This is the ledger itself. You type it in, or import it from a CSV to backfill history you already keep elsewhere; either way we store it and sync it between your devices.

Settings and preferences

Your display currency, notification preferences, and — if you turn on the monthly reminder — a push token for your device or your email address, so the reminder can reach you.

Subscription status

Whether you have WLTH Pro, and when it renews or lapses. Payment is handled entirely by Apple or Google. We never see your card details.

Technical data

Device model, operating system version, app version, and diagnostic or crash reports. We use these to fix things that break, and nothing else.

What we do not do

• No open banking, no aggregation, no third-party account access.
• No selling or renting of personal data, ever.
• No advertising, no advertising identifiers, no ad networks.
• No training of machine-learning models on your records.

Why we process it

Under UK GDPR and the EU GDPR we rely on the following legal bases:

• Performance of a contract — storing and syncing your records, running your account, and providing WLTH Pro if you buy it.
• Legitimate interests — keeping the service secure, preventing abuse, and fixing faults through diagnostics.
• Consent — push and email reminders, which you turn on yourself and can turn off at any time.
• Legal obligation — keeping records we are required by law to keep, such as tax records relating to a purchase.

Where it is stored

Your records sit in a local database on your device and on our servers. Data is hosted in the United Kingdom or the European Economic Area, and is encrypted in transit using TLS. Where data is transferred outside the UK or EEA, we rely on the UK International Data Transfer Addendum or Standard Contractual Clauses.

Keeping it safe

Your records are encrypted in transit with TLS, and encrypted at rest on our servers and in our backups. Access to production systems is limited to the people who need it and protected by multi-factor authentication. Sign-in is handled by Apple and Google, so there is no password of yours for us to store or lose. No system is perfect, and we will not pretend otherwise: if a breach ever affects your data, we will tell you and the Information Commissioner’s Office as the law requires.

Who else touches it

We use a small number of service providers, each of which processes data only on our instructions:

• Cloud hosting and database provider — storage and sync.
• Apple Push Notification service and Firebase Cloud Messaging — push reminders.
• Email delivery provider — email reminders and service notices.
• Error and crash reporting provider — diagnostics.
• Foreign-exchange rate provider — historical rates used to convert assets held in other currencies. No personal data is sent to obtain them.

Apple and Google act as their own controllers for sign-in and for purchases made through their stores.

How long we keep it

Your records are kept for as long as your account exists. When you delete your account, your records and account details are removed from our live systems within 30 days, and from encrypted backups within a further 30 days. Anonymous, aggregate figures that cannot identify you may be retained.

Your rights

You have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability. The app covers most of this directly: full JSON backup and CSV export are one tap, and account deletion is in the app — see the instructions. For anything else, email [email protected] and we will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk, or to your local supervisory authority.

Children

WLTH is not intended for anyone under 16, and we do not knowingly collect data from children.

Cookies

This website sets no cookies and runs no analytics or tracking scripts. The app uses no advertising or tracking identifiers.

Changes

If we change this policy we will update the date at the top, and tell you in the app if the change is a material one.