Legal: Privacy Policy

Welcome to Wealtie. We believe you have a right to know exactly what data we collect, why we collect it, and who we share it with. This Privacy Policy is written to be honest and complete. We are not hiding anything.

Wealtie is a product of Polo Development LLC, a company registered in Wyoming, United States ("we", "us"). Polo Development LLC is the controller responsible for the personal data described in this Privacy Policy.

Wealtie is a personal finance management mobile application that lets you manually track your income, expenses, accounts, budgets, and financial goals. We do not connect to your real bank accounts, we do not initiate real financial transactions, and we do not provide financial advice.

By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree, please do not use the Service. If you have questions, email us at [email protected].

We collect the following categories of information. We have tried to be specific. This is not a vague list.

We use the information we collect for the following purposes:

• Providing the Service: To create and manage your account, store and display your financial data, process your preferences, and deliver all features you request
• Authentication & Security: To verify your identity, manage sessions, enforce account lockouts after failed login attempts, and prevent unauthorized access
• Notifications: To send push notifications to your device (daily reminders and milestone/streak alerts) using your stored push token and timezone
• Transactional Emails: To send you email verification codes, welcome emails, and password reset codes
• Analytics & Improvement: To understand how users use the app, identify where users drop off, and make product decisions using usage analytics, if you allow it
• Crash Debugging: To identify and fix bugs and crashes using error reports
• Currency Conversion: To calculate exchange rates for multi-currency account transfers and display currency conversions using cached exchange rate data
• Subscription Management: To determine your plan entitlements (free vs. Pro limits) and process subscription lifecycle events
• Personalization: To use your onboarding answers (financial goals, marketing channels) to customize your initial app experience
• Legal Compliance: To comply with legal obligations, enforce these policies, and protect our rights and those of our users

We do not use your financial data to train AI models, sell insights to advertisers, or share individual financial information with third parties beyond what is described in this policy.

We integrate with the following third-party services. Each of them receives certain data about you as described below. We encourage you to review their privacy policies.

We do not sell your personal information. We do not sell your financial data. We do not access your device's advertising identifier, show ads, or share your data for third-party advertising.

We share your information only in these circumstances:

• Service Providers: As described in the Third-Party Services section above (crash reporting, analytics, subscription management, push notifications, exchange rates, and email delivery). These providers process data on our behalf under contractual data processing agreements.
• OAuth Providers: When you choose to authenticate via Google or Apple, your interaction with those services is governed by their own privacy policies.
• App Stores: Apple App Store and Google Play Store process subscription payments and share subscription status with our subscription management provider.
• Legal Requirements: We may disclose information if required by applicable law, court order, or government request, or if we believe disclosure is necessary to prevent harm or protect rights.
• Business Transfers: If Wealtie is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such event.

We implement the following security measures to protect your data:

• Password hashing: Your password is cryptographically hashed before storage. We never store or transmit your plaintext password.
• Token-based authentication: Access tokens are short-lived and signed. Refresh tokens are stored as hashed values and can be revoked at any time.
• Encrypted database connections: All connections to our database are encrypted in transit.
• Account lockout: Repeated failed login attempts trigger a temporary account lockout to prevent brute-force attacks.
• Rate limiting: Sensitive operations such as email verification resends, password reset requests, and API queries are rate-limited to prevent abuse.
• Webhook verification: Incoming subscription webhooks are cryptographically verified before processing.
• Duplicate prevention: Financial transactions include safeguards to prevent duplicate entries caused by network errors.

Despite these measures, no system is 100% secure. If you believe your account has been compromised, contact us immediately at [email protected].

We retain your data for as long as your account is active. Here is what happens to different types of data:

• Account deletion: When you delete your account, all of your data is permanently and irreversibly deleted from our database. This includes your profile, all transactions, accounts, categories, budgets, goals, recurring transactions, OAuth provider records, refresh tokens, and subscription records. This is a hard, cascading delete, not a soft delete.
• Items you delete within the app (transactions, categories, budgets, etc.): These are "soft deleted": marked as deleted and hidden from your view, but the record remains in our database. We do not currently have an automatic hard-delete schedule for individually deleted items.
• Email verification and password reset codes: Automatically deleted shortly after issuance.
• Access tokens: Short-lived; expire automatically.
• Analytics & crash report data stored with our analytics and crash reporting providers: subject to those services' own retention policies.

We send push notifications to your device using your push token. Notification types include:

• Daily reminders to log your transactions (if notifications are enabled)
• Milestone achievement notifications (Pro feature)
• Streak achievement notifications (Pro feature)

You can disable push notifications at any time in the app settings under Notification Settings, or through your device's system notification settings. Disabling notifications removes your push token from active use for sending.

You have the following rights regarding your data:

• Access: You can view all of your financial data directly in the app at any time.
• Correction: You can update your profile information and edit or delete any financial data you have entered at any time within the app.
• Deletion: You can permanently delete your account and all associated data from within the app (Profile Settings → Privacy & Security → Delete Account). This action is immediate and irreversible.
• Usage analytics: Off unless you allow it when the app first asks. You can withdraw or give consent at any time in Profile Settings → Privacy & Security → Share usage analytics.
• Notification preferences: You can enable or disable push notifications in app settings.
• Data portability: You can download a copy of your data in the app under Profile Settings → Privacy & Security → Download My Data. We prepare a ZIP file of CSV spreadsheets and email you a secure download link when it is ready. The file is deleted from our servers 7 days after it is created. If you have trouble with the export, contact us at [email protected].

If you are located in the EU, EEA, or UK, you also have rights under GDPR including the right to object to processing and the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us at [email protected].

Wealtie is intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. We collect date of birth during registration; if we determine that a user is under 18, we will delete their account and data.

If you believe a minor has created an account, please contact us immediately at [email protected].

Wealtie is a global service supporting 18 languages. Your data may be processed in countries other than where you reside. Our backend infrastructure and third-party service providers may store and process data outside your country.

Crash data is processed in the EU. For other services, data may be processed in the United States or other jurisdictions. By using the Service, you consent to this transfer. We rely on standard contractual clauses or equivalent mechanisms where required for cross-border transfers.

We may update this Privacy Policy when our data practices change. When we do:

• We will update the "Effective Date" at the top of this page
• For material changes, we will notify you by email or with a prominent notice in the app

Your continued use of the Service after a policy update constitutes acceptance of the updated policy. If you do not agree with the changes, you may delete your account.

If you have any questions, requests, or concerns about this Privacy Policy or how we handle your data, please reach out:

We aim to respond within 30 days. For urgent security or privacy matters, please indicate this in your subject line.