Privacy policy

We collect the following types of information:

• Account information: your name, email address, and hashed password when you create an account.
• Financial data: asset values, liability amounts, income, expenses, goals and snapshots that you enter yourself. We never connect to your bank.
• Usage data: basic analytics about how you use the Service, such as page views and feature usage.
• Payment data: if you subscribe to a paid plan, payment information is collected and processed by Stripe; we do not store your credit card details.
• Messages you send us: support requests, including the page you sent them from and your browser type, and your email address if you subscribe to the newsletter.

Your data is used to:

• Provide and maintain the Service
• Calculate and display your net worth, projections, and financial summaries
• Process your subscription payments
• Send important account emails, such as password resets and subscription changes, and the monthly report if you turn it on
• Improve the Service based on aggregate usage patterns

We never sell your personal or financial data to third parties. We never use your financial data for advertising purposes.

Your data is stored securely with encryption in transit (TLS/SSL). We follow industry best practices for securing web applications. Access to production data is restricted to authorized personnel only.

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

We use the following third-party services:

• Stripe: for payment processing. Stripe collects and processes your payment information according to their own privacy policy. See stripe.com/privacy.
• smtpfast: to deliver our emails, such as password resets and monthly reports. It receives your email address and the content of the email.
• Authentication: we use secure session-based authentication. Passwords are hashed and never stored in plain text.

AI assistants and the API.If you connect an AI assistant or create an API key, that assistant or script can read your worthtracker data, and on a paid plan change it if you allow that. What the assistant's provider does with the data is covered by its own terms. We store only hashes of keys and tokens, and you can disconnect an app or revoke a key at any time in your settings.

You have the right to:

• Export your data: on every plan, you can export your assets, liabilities and income in CSV or JSON format from the settings page, or ask us for a full export.
• Delete your account: you can delete your account from the settings page, which permanently deletes your data, or ask us to do it at [email protected]. Requests by email are completed within 30 days.
• Access your data: you can view all data you have entered through the Service at any time.

We use essential cookies to keep you signed in and to remember your preferences. We also use Google Analytics to count visits and see which pages people use; it sets its own cookies (such as _ga). We do not use advertising cookies, and we do not send your financial data to Google Analytics.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

If you have questions about this Privacy Policy or your data, please contact us at [email protected].