Privacy Policy
Effective
What WealthWise OS collects, why, who processes it for us, how long we keep it, how to delete your account, and what happens to accounts that go unused for six months.
1. Who we are
WealthWise OS ("WealthWise", "we", "us") is a personal finance application made by Strategia (Strategia-X), available at wealthwiseos.com and on Android. This policy explains what we collect when you use it, why, who processes it on our behalf, how long we keep it, and the choices you have.
Questions, requests and complaints: [email protected]. For a California privacy request, use the subject line "California Privacy Request".
2. What we collect
Only what the app needs to do what you ask of it.
2.1 Your account
- Email address, to identify your account and send you service emails.
- Name and profile photo, if you give them or sign in with Google.
- Sign-in credentials: a password, which our authentication provider stores only as a salted hash, or a Google sign-in.
- Account activity: when the account was created, when you last signed in, and the last day you used the app. We use these to keep you signed in and to apply the inactive-account rule in section 7.
2.2 Financial information you enter
Transactions, budgets, goals, debts, bills, recurring payments, investment holdings, notes, quarterly tax payments, life events and the inputs to the calculators. It is stored on your device and, when you are signed in, in our database so it syncs between your devices.
Documents and receipts you add to the Vault, and images you add to your vision board, are stored in our database and file storage.
2.3 Bank connections (optional)
If you connect a bank, Teller handles the bank sign-in; your bank password never reaches us. Teller gives us an access token, which we keep encrypted in a dedicated secrets vault and use only to read your accounts, balances and transactions when you ask the app to. Disconnecting the bank, or deleting your account, destroys the token.
2.4 AI features
When you use the AI advisor and the other AI features, we send the financial context the feature needs (amounts, categories, balances, and any text or images you choose to share) to Google Gemini, and keep your conversations, generated insights and reports in your account so you can return to them. A log of the actions the advisor takes for you, and the ratings you give its answers, is kept for 180 days.
We never send Gemini your email address, password, bank credentials, account or routing numbers, or payment details. Our Gemini usage is on Google's paid tier, under which Google does not use your prompts or responses to train its models.
2.5 Family households
If you create or join a household, its members can see the household's shared settings, members and shared expenses. An invitation keeps the address it was sent to as part of the household's records; it is removed if that person deletes their WealthWise account.
2.6 Payments
Stripe collects and processes card details; they never reach our servers. We keep your Stripe customer and subscription identifiers, your plan and its renewal or expiry date, and a record of each billing event, so your plan works on every device. In-app purchases on Android are handled by Google Play.
2.7 Diagnostics and measurement
- Error monitoring (Sentry): when something breaks we receive the error, your browser and device type, and the page. For a sample of visits, and for visits where an error occurs, Sentry also records a replay of the screen with all text masked, so we can see what went wrong without seeing your data.
- First-party measurement: anonymous counts of which pages load and which buttons are used, with no cookie and no link to your account (details in section 14). Kept for three months.
- Google Analytics: loaded only if you allow analytics cookies in the cookie preferences.
2.8 Email
Account and billing emails go to your account address. If you join the newsletter, we keep your address and the record of your double opt-in until you unsubscribe.
3. What we do not collect
- Bank passwords (Teller handles the bank sign-in).
- Full card numbers (Stripe handles them).
- Social Security numbers or government ID numbers.
- Your precise location, contacts or photo library (only images you choose to upload).
4. How we use it
- To run the app: show and sync your data, calculate projections, and power the features you use.
- To bill you for a paid plan and keep it active on every device.
- To send service emails: account, security, billing, and the inactive-account notices in section 7. These are sent whatever your marketing preferences, because they concern your account.
- To send the newsletter, only if you subscribed to it.
- To keep the service secure, fix errors and understand, in aggregate, how it is used.
We do not sell or rent your personal information, and we do not use it for advertising.
5. Where it is stored, and how it is protected
- Our database, authentication and file storage run on Supabase, in the United States (AWS us-east-1).
- Every table that holds your data is protected by row-level security: a signed-in user can read and change only their own rows. Payment and entitlement details can be changed only by our servers.
- Data is encrypted in transit (TLS) and at rest. Bank access tokens are additionally encrypted in a secrets vault.
- On your device you can encrypt your stored data with a PIN.
6. Who processes it for us
These service providers process personal information only to provide their service to us:
| Provider | What for | What they receive |
|---|---|---|
| Supabase | Database, sign-in, file storage | Your account and everything you store in the app |
| Cloudflare | Hosting and our servers | Requests to the app and our APIs (IP address, browser) |
| Google (Gemini) | AI features | The context and content each AI request needs; no identifiers |
| Google (Sign-In) | Signing in with Google | Your Google sign-in; we receive your email, name and photo |
| Google (Analytics) | Usage analytics, only with your consent | Pages viewed and device information |
| Stripe | Payments | Your email, card and billing details |
| Teller | Bank connections, only if you connect one | Your bank sign-in, in Teller's own flow |
| Resend | Delivering our emails | Your email address and the email's content |
| Sentry | Error monitoring | Error reports and masked screen replays |
7. How long we keep it
7.1 Your account
Your account data is kept while your account exists, and deleted when the account is deleted (section 8). Our database backups are taken daily and kept for 7 days, so a deleted account has left every backup within 7 days.
7.2 Inactive accounts
An account with no activity for six months is deleted, with all its data. We do not want to hold financial information about people who have stopped using WealthWise.
- Activity means creating the account, signing in, using the app while signed in, or the app refreshing your sign-in in the background.
- We email you three weeks before the deletion date and again one week before it. Each email names the date and has a button to sign in.
- Signing in, or any activity, cancels the deletion.
- Accounts with an active paid plan (including Lifetime), a subscription, or a payment problem being resolved are never deleted for inactivity, and neither is the owner of a Family household that other people belong to.
- Accounts whose email address was never confirmed receive no email, since nobody has shown the address is theirs, and are deleted after six months without activity.
- This rule applies from November 17, 2026, thirty days after this policy took effect.
7.3 Operational records
| Record | Kept for |
|---|---|
| Payment notifications from Stripe | 90 days |
| Purchase notifications from Google Play | 90 days |
| Referral-link clicks (hashed IP address, browser) | 90 days |
| The AI advisor's action log, and ratings of its answers | 180 days |
| First-party visit measurement | three months |
7.4 What remains after an account is deleted
- A deletion record: a random account number, the reason (your request, or inactivity), the date, and any part we could not remove. It contains nothing that identifies you.
- Cancellation feedback you gave, with nothing that links it to you.
- Shared expenses you recorded in someone else's household stay in that household; your name and email are removed from it.
- Stripe keeps its own records of past payments as the law requires; we delete your Stripe customer record when no other Strategia product bills it.
8. Deleting your account
You can delete your account at any time under Profile → Delete account, or by emailing [email protected]. Deletion is immediate and cannot be undone. When you delete your account:
- Your account and everything stored in it are erased: transactions, budgets, goals, debts, bills, holdings, notes, documents, receipts, vision-board images, AI conversations and reports.
- Connected banks are disconnected and their access tokens destroyed.
- Any WealthWise subscription ends immediately and you are not charged again. A Lifetime purchase ends with the account.
- If you own a Family household, the household and its shared records are deleted for every member.
- You stop receiving WealthWise account and onboarding emails. A newsletter subscription is separate; every newsletter has an unsubscribe link.
- WealthWise data on the device you deleted from is cleared.
You can download your data first from your profile.
9. Your rights and choices
- Access and export your data from your profile.
- Correct anything you have entered, in the app.
- Delete individual items, or your whole account (section 8).
- Choose whether to use AI features, connect a bank, or allow analytics cookies.
- Object to our first-party measurement (section 14).
- Unsubscribe from the newsletter with the link in any newsletter.
To exercise any right you cannot exercise in the app, email [email protected]. Depending on where you live (for example in the EU, UK or California) you may have further rights, including to complain to your data protection authority.
10. Children
WealthWise is not meant for children under 13 and we do not knowingly collect their information. If you believe a child has given us personal information, contact [email protected] and we will delete it.
11. Changes to this policy
When we change this policy we update the date at the top. For a change that materially affects registered users, we tell you by email and in the app at least thirty days before it takes effect.
12. Contact
Strategia (Strategia-X), [email protected].
13. California privacy rights (CCPA/CPRA)
If you are a California resident you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising.
To make a request, email [email protected] with the subject line "California Privacy Request", from your account address. We verify your identity by matching the request to your account, and respond within 45 days (extendable once by up to 45 days, with notice). You may use an authorized agent, who must show your written permission.
| Category (last 12 months) | Collected | Sold or shared |
|---|---|---|
| Identifiers (email, name) | Yes | No |
| Financial information you enter or connect | Yes | No |
| Commercial information (plan, payments) | Yes | No |
| Internet activity (diagnostics, measurement) | Yes | No |
| Inferences (AI-generated insights) | Yes | No |
| Precise geolocation | No | No |
| Biometric information | No | No |
California's "Shine the Light" law (Civil Code § 1798.83): we do not share personal information with third parties for their direct marketing.
14. Do Not Track and first-party measurement
We do not track you across other websites and do not use advertising cookies, so we do not respond differently to Do Not Track signals.
First-party measurement. We do count anonymous steps through our own app (which pages load and which buttons get clicked) so we can find where people get stuck. This is first-party only: it sets no cookie, it is never linked to your account or email, it is never combined with data from any other site, and it is never shared with a third party. Each visit is identified by a random value held in sessionStorage, which your browser discards when you close the tab. We also count how quickly pages load, and the first page view carries one number: how many earlier days this browser has used the app, read from data already stored on your device (the dates themselves never leave it). When a visit ends we send how long the tab was open, how far down the home page it scrolled, and which sign-up button was last on screen. If you open a research link we sent you, a short label from that link is attached to the visit so those sessions can be studied separately; it never contains your name or email. These counts are kept for three months and then deleted automatically.
Your right to object. This measurement runs on the basis of our legitimate interest in understanding whether the product works, not on consent. You can object at any time: open cookie preferences and switch on "Do Not Measure My Visits", and we stop counting you immediately. If your browser sends a Global Privacy Control (GPC) signal, we treat that as an objection automatically and you do not need to do anything.