Privacy Policy

1. Overview

This Privacy Policy explains what information Whallet ("we," "us," "our") collects when you use our budgeting service (the "Service"), how we use it, who we share it with, and the choices you have. By using the Service, you agree to the collection and use of information as described here.

2. Information We Collect

• Account information: name, email address, password (stored as a salted hash, never in plain text), and household details you provide at signup.
• Financial data: when you link a bank or credit card account, Plaid authenticates you directly with your financial institution and, once that connection is complete, issues us an encrypted access token representing it — never your online banking username or password. We use that token to retrieve, and then store in our database (hosted by Supabase), transaction records, account balances, and account/institution names needed to power budgets, summaries, and insights. Your raw online banking credentials are never transmitted to or stored in our Supabase database; they exist only within Plaid's own authentication flow, governed by Plaid's security practices and privacy policy.
• Budget and goal data: the categories, budget amounts, savings goals, and alert preferences you create in the Service.
• Billing information: if you subscribe to a paid plan, our payment processor, Stripe, collects and stores your payment card details. We receive only limited billing metadata (such as subscription status and plan) — we do not receive or store your full card number.
• Usage and device data: log data, device/browser type, and general usage patterns, collected automatically to keep the Service secure and working correctly.

3. How We Use Information

• To provide the Service: importing and categorizing transactions, calculating budgets and summaries, and generating the insights and narrative text you see in the app.
• To operate your account: authentication, household invites, and session security (including optional multi-factor authentication).
• To communicate with you: verification codes, security alerts, transaction/budget notifications you opt into, and service-related emails.
• To maintain and improve the Service, including diagnosing technical issues.
• To detect, prevent, and respond to fraud, abuse, or security incidents.

We do not use your financial data to sell you third-party financial products, and we do not use it to provide individualized investment advice.

4. Third-Party Service Providers

We share data with a small number of service providers, only as needed to operate the Service, and only under agreements that restrict them from using your data for their own purposes:

• Plaid Inc. — connects and retrieves data from your linked financial institutions. See Plaid's End User Privacy Policy.
• Stripe, Inc. — processes subscription payments. See Stripe's Privacy Policy.
• Resend — delivers transactional emails (verification codes, alerts, password resets).
• Supabase — our database and backend hosting provider. Stores your account, budget, and transaction data (with sensitive credentials such as Plaid access tokens encrypted at rest), under contractual confidentiality and security obligations. Supabase never receives or stores your online banking username or password.

We do not sell your personal or financial information to third parties, and we do not share it with advertisers.

5. Household Sharing

If you join or create a shared household, the financial data connected to that household — including linked account balances and transaction history — is visible to every member of that household. Removing a household member does not retroactively delete data they already viewed.

6. Data Security

We use industry-standard safeguards to protect your data, including encryption of sensitive credentials (such as Plaid access tokens) at rest in our Supabase database, hashed password storage, and access controls limiting who can view household data to that household's own members. This isolation is enforced at the database level, not just in the app: our database applies row-level security rules to every table containing account, budget, or transaction data, so a request for one household's data cannot return another household's records even in the event of an application-level bug. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention and Deletion

We retain your data for as long as your account is active. You are in full control of your data and do not need to contact us to delete it: you can permanently delete your account and all associated data at any time from within the app, via Settings → Account → Delete Account & All Data. This immediately and permanently removes your household's transactions, budgets, and login information from our systems, cancels any active subscription, and revokes our access to your linked bank accounts. This action cannot be undone. If you have trouble accessing the Service, you may also reach us at support@whallet.app for assistance. We may retain limited records where required for legal, tax, or fraud-prevention purposes.

8. Your Rights and Choices

• You can disconnect a linked bank account at any time from within the Service.
• You can review and update your account information in Settings.
• You can opt out of non-essential notifications from the Alerts settings, and withdraw any consent you've given (for example, for optional notifications) at any time, with the same ease with which it was given.
• You can download a copy of your household's data at any time from within the app, via Settings → Account → Export My Data — this covers the right to access your data and to receive it in a portable, machine-readable format.
• Depending on where you live, you may have additional rights to access, correct, or delete your personal information under laws such as the California Consumer Privacy Act (CCPA) or the EU/UK General Data Protection Regulation (GDPR). We do not sell or share your personal information as those terms are defined under CCPA, so there is no "opt out of sale/sharing" mechanism to offer. Contact us to exercise any of these rights; if you are in the EU/UK and believe we have not adequately addressed your request, you also have the right to lodge a complaint with your local data protection supervisory authority.

9. Legal Basis for Processing and International Transfers (GDPR)

If you are located in the EEA, UK, or Switzerland, our legal basis for processing your personal data depends on the data and context: we process account, budget, and transaction data because it is necessary to perform our contract with you (providing the Service you signed up for); we process usage and device data, and take security measures, based on our legitimate interests in keeping the Service secure, reliable, and working correctly; we send optional notifications based on your consent, which you may withdraw at any time; and we retain certain records where necessary to comply with a legal obligation (for example, tax or fraud-prevention recordkeeping).

Our servers and service providers (including our database host, Supabase) are located in the United States. If you are accessing the Service from the EEA, UK, or elsewhere outside the US, your information will be transferred to and processed in the United States, which may not have data protection laws equivalent to those in your jurisdiction. Where required, we rely on appropriate safeguards for these transfers, such as Standard Contractual Clauses with our service providers.

10. Financial Privacy Notice (GLBA)

Because Whallet processes information from your financial accounts, we are mindful of obligations under the Gramm-Leach-Bliley Act and similar laws governing financial privacy. We collect financial information only as needed to provide the Service, limit internal access to what's needed to operate it, use encryption and access controls to safeguard it as described above, and do not disclose it to non-affiliated third parties for marketing purposes.

11. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (such as an in-app notice or email) before the changes take effect.

13. Contact

Questions about this Privacy Policy can be sent to support@whallet.app.