Privacy Policy

1. Overview

This Privacy Policy explains what information Whallet ("we," "us," "our") collects when you use our budgeting service (the "Service"), how we use it, who we share it with, and the choices you have. By using the Service, you agree to the collection and use of information as described here.

2. Information We Collect

• Account information: name, email address, password (stored as a salted hash, never in plain text), and household details you provide at signup.
• Financial data: when you link a bank or credit card account, Plaid authenticates you directly with your financial institution and, once that connection is complete, issues us an encrypted access token representing it — never your online banking username or password. We use that token to retrieve, and then store in our database (hosted by Supabase), transaction records, account balances, and account/institution names needed to power budgets, summaries, and insights. Your raw online banking credentials are never transmitted to or stored in our Supabase database; they exist only within Plaid's own authentication flow, governed by Plaid's security practices and privacy policy.
• Budget and goal data: the categories, budget amounts, savings goals, and alert preferences you create in the Service.
• Billing information: if you subscribe to a paid plan, our payment processor, Stripe, collects and stores your payment card details. We receive only limited billing metadata (such as subscription status and plan) — we do not receive or store your full card number.
• Usage and device data: log data, device/browser type, and general usage patterns, collected automatically to keep the Service secure and working correctly.

3. How We Use Information

• To provide the Service: importing and categorizing transactions, calculating budgets and summaries, and generating the insights and narrative text you see in the app.
• To operate your account: authentication, household invites, and session security (including optional multi-factor authentication).
• To communicate with you: verification codes, security alerts, transaction/budget notifications you opt into, and service-related emails.
• To maintain and improve the Service, including diagnosing technical issues.
• To detect, prevent, and respond to fraud, abuse, or security incidents.

We do not use your financial data to sell you third-party financial products, and we do not use it to provide individualized investment advice.

4. Third-Party Service Providers

We share data with a small number of service providers, only as needed to operate the Service, and only under agreements that restrict them from using your data for their own purposes:

• Plaid Inc. — connects and retrieves data from your linked financial institutions. See Plaid's End User Privacy Policy.
• Stripe, Inc. — processes subscription payments. See Stripe's Privacy Policy.
• Resend — delivers transactional emails (verification codes, alerts, password resets).
• Supabase — our database and backend hosting provider. Stores your account, budget, and transaction data (with sensitive credentials such as Plaid access tokens encrypted at rest), under contractual confidentiality and security obligations. Supabase never receives or stores your online banking username or password.
• Cloudflare — stores encrypted backups of our database for disaster recovery, via Cloudflare R2. Each backup is encrypted before it leaves our server, so Cloudflare never has access to it in a readable form.

We do not sell your personal or financial information to third parties, and we do not share it with advertisers.

5. Household Sharing

If you join or create a shared household, the financial data connected to that household — including linked account balances and transaction history — is visible to every member of that household. There is currently no way to remove a single member while leaving the rest of the household intact; see Section 7 for how a household's data can be deleted entirely, or contact us if you want to leave a household without affecting its other members.

6. Data Security

We use industry-standard safeguards to protect your data, including encryption of sensitive credentials (such as Plaid access tokens) at rest in our Supabase database, hashed password storage, and access controls limiting who can view household data to that household's own members. This isolation is enforced at the database level, not just in the app: our database applies row-level security rules to every table containing account, budget, or transaction data, so a request for one household's data cannot return another household's records even in the event of an application-level bug. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention and Deletion

We retain your data for as long as your account is active. If you are the primary member of your household, you are in full control of your data and do not need to contact us to delete it: you can permanently delete the household and all associated data at any time from within the app, via Settings → Account → Delete Account & All Data. This immediately and permanently removes the household's transactions, budgets, and every member's login information from our systems, cancels any active subscription, and revokes our access to every linked bank account. This action cannot be undone, and it affects every member of the household, not just you. If you are not the primary member and want your own data removed, or you have trouble accessing the Service, reach us at support@whallet.app for assistance. We may retain limited records where required for legal, tax, or fraud-prevention purposes.

8. Your Rights and Choices

• You can disconnect a linked bank account at any time from within the Service.
• You can update your display name, and manage account-level settings such as multi-factor authentication and your household name, from within Settings. Changing the email address on your account isn't supported yet; contact us if you need it updated.
• You can opt out of non-essential notifications from the Alerts settings, and withdraw any consent you've given (for example, for optional notifications) at any time, with the same ease with which it was given.
• You can download a copy of your household's data at any time from within the app, via Settings → Account → Export My Data — this covers the right to access your data and to receive it in a portable, machine-readable format.
• Depending on which state you live in, you may have additional rights to access, correct, or delete your personal information under state privacy laws such as the California Consumer Privacy Act (CCPA). We do not sell or share your personal information as those terms are defined under CCPA, so there is no "opt out of sale/sharing" mechanism to offer. Contact us to exercise any of these rights.

9. Financial Privacy Notice (GLBA)

Because Whallet processes information from your financial accounts, we are mindful of obligations under the Gramm-Leach-Bliley Act and similar laws governing financial privacy. We collect financial information only as needed to provide the Service, limit internal access to what's needed to operate it, use encryption and access controls to safeguard it as described above, and do not disclose it to other companies so they can market their own products or services to you. This is separate from the service providers listed in Section 4, who receive only what's needed to operate the Service itself and are contractually barred from using your data for their own purposes, including marketing.

10. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (such as an in-app notice or email) before the changes take effect.

12. Contact

Questions about this Privacy Policy can be sent to support@whallet.app.