Privacy & Security

Last updated: August 1, 2026

Overview

Whealth Labs LLC ("Whealth", "we", "our", or "us") is a personal finance app that helps you track your finances, manage budgets, and understand your spending. This policy explains what we collect, what we do with it, and how we protect it.

Information We Collect

Account Information

When you create an account we collect your name and email address. You may register using a password, or with Google or Apple. Passwords are stored in a form we cannot read or recover. Where you register with Google or Apple, those providers supply your name and email address for the purpose of creating and identifying your account; we do not receive your Google or Apple password. If you elect to use Apple's Hide My Email feature, we receive a private relay address in place of your email address.

Financial Data

When you connect your bank accounts through Plaid, or your brokerage and investment accounts through Plaid or SnapTrade, we receive account balances, holdings, transaction history, and account details. We never have access to your login credentials for those institutions — they are handled entirely by Plaid or SnapTrade. Access is read-only in both cases: Whealth cannot move money, place trades, or change anything at your bank or broker.

Biometric Sign-In

If you enable Face ID, Touch ID, or a passkey, verification is performed entirely on your device. We do not receive or store fingerprint or facial data. We retain only a revocable credential confirming that your device completed verification, which you may remove at any time from Settings.

Payment Information

When you subscribe to Whealth Plus, payment is processed by Stripe (web) or Apple In-App Purchase (iOS). We store your subscription status, plan type, and billing period but do not store credit card numbers or payment method details. These are handled securely by Stripe or Apple.

Usage Data

We collect information about how you use the app, including features accessed and interactions with the AI assistant.

Location Data

We collect your approximate location (country/region only) based on your IP address when you sign up or use the app. This helps us understand our user base and improve our services. We do not collect or store precise GPS location or your IP address.

How We Use Your Information

  • Display your financial accounts and transactions
  • Provide personalized insights and budgeting recommendations
  • Power the AI assistant with context about your finances
  • Process subscription payments and manage your billing
  • Improve our services and user experience

How We Protect Your Information

We encrypt your information in transit and at rest, and restrict access to it within our systems. Access to your financial accounts is read-only: Whealth cannot move funds, place trades, or make changes at your bank or broker. Your credentials for those institutions are provided directly to Plaid or SnapTrade and are not received or stored by us.

Your account may additionally be protected by two-factor authentication, biometric sign-in, or a passkey. Biometric verification is performed on your device; we do not receive or store fingerprint or facial data.

Information provided to our AI assistant is processed under a zero data retention agreement, is not used to train models, and has personal identifiers removed before transmission. The assistant does not modify your information without your confirmation.

No system connected to the internet can be guaranteed secure, and we do not represent otherwise.

Third-Party Services

SnapTrade

We use SnapTrade to connect brokerage and investment accounts that Plaid does not support directly. As with Plaid, we never see your login credentials and access is strictly read-only — Whealth cannot place trades or move funds. SnapTrade's use of your data is governed by their privacy policy.

Google and Apple Sign-In

If you choose to sign up or sign in with Google or Apple, we receive your name and email address (or Apple's private relay address, if you hide your email) so we can create and identify your account. We never receive your Google or Apple password. Their handling of your data is governed by their own privacy policies.

Plaid

We use Plaid to connect to your financial institutions. Plaid's use of your data is governed by their End User Privacy Policy.

Stripe

We use Stripe to process web-based subscription payments. Stripe collects your email, name, and payment method details. Stripe's use of your data is governed by their Privacy Policy.

Apple In-App Purchase

On iOS, subscriptions are processed through Apple's In-App Purchase system. Payment details are managed entirely by Apple. Apple's use of your data is governed by their Privacy Policy.

Groq

Our AI assistant is powered by Groq, which processes your requests under a zero data retention agreement. Conversations are used to generate a response and are not stored, logged, or used to train models. Personal identifiers are removed before any data is sent.

Google Places

We use the Google Places API for address and location lookup. No personal financial data is shared with Google.

Data Retention

We keep your account data — profile, linked accounts, transactions, holdings, budgets and chat history — for as long as your account is open. Operational records such as connection events, API call logs and AI usage are kept only as long as they remain useful for diagnosing faults and improving the service, and are deleted with your account.

When you delete your account, we first revoke our access at Plaid and SnapTrade so the connection to your bank or broker is terminated on their side, then delete your data from our systems. Some records must be kept afterwards where the law requires it — principally subscription and payment records retained for tax and financial reporting.

Your Choices

You may access and correct your information, disconnect any linked account, and delete your account and its associated data at any time from within the app. Deleting your account also revokes our access to your connected financial institutions.

To request a copy of your information, or for any other request concerning your data, contact us at contact@whealthapp.com. We may need to verify your identity before responding.

Cookies

We use only strictly necessary first-party cookies, which keep you signed in and support sign-in with Apple. We do not use advertising cookies, tracking pixels, or third-party analytics that follow you across other websites.

Security Incidents

In the event of a breach affecting your personal information, we will notify you and any applicable regulators as required by law and without undue delay.

Children's Privacy

Whealth is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at contact@whealthapp.com.