Privacy Policy

What we collect

When you create an account, we collect your email address via Google OAuth. If you connect a bank account, we collect financial data through Plaid, including account names, balances, and transaction history. We also store notes and goals you create in the app, and summaries of your conversations with the AI coach.

Plaid and bank data

Bank connections are powered by Plaid. When you connect a bank account, Plaid retrieves your transaction history and account balances on our behalf. We store this data in our database to power your spending charts, AI coaching, and goal tracking. We do not sell or share your bank data with third parties for advertising purposes.

You can disconnect a bank at any time from the Finances tab. Disconnecting removes your Plaid access token and triggers deletion of your stored transaction and balance data for that account. You can also review and revoke the connections you have made through Plaid at my.plaid.com.

AI processing (Anthropic)

AI coaching features are powered by Anthropic. Your messages and relevant financial context are sent to Anthropic's API to generate responses. Under our commercial agreement with Anthropic, data submitted through the API is not used to train Anthropic's models. Anthropic's privacy policy governs their handling of API data.

Conversation history is stored in our own database (not Anthropic's) so you can reference past chats. Messages older than 30 days are automatically deleted.

How we protect your data

Sensitive financial data (transaction names, account names, and AI memory facts) is encrypted at rest using per-user AES-256-GCM keys. All data is stored in Supabase with row-level security policies that prevent any user from accessing another user's data. Communication between your browser and our servers is encrypted via HTTPS.

Plaid access tokens are stored encrypted and are never logged or exposed in API responses.

Text messages (SMS)

If you choose to enable text notifications, we collect the mobile phone number you provide and a record of your consent. We use your number only to send the account-notification texts you opt into — spending recaps, monthly summaries, and budget-pacing alerts. You verify ownership of the number with a one-time code before any text is sent.

We do not sell, rent, or share your mobile phone number or your SMS consent with third parties or affiliates for their marketing or promotional purposes. Text-messaging opt-in data and consent are not shared with any third parties for any purpose.

Message frequency varies (typically weekly or less). Message and data rates may apply. Reply STOP to cancel at any time, or HELP for help. You can also turn texts off whenever you like in Profile → Notifications.

Affiliate links

MyWealthPal may earn referral fees when you click on product recommendations and make a purchase. These relationships do not influence our AI coaching recommendations. See our Affiliate Disclosure for details.

How long we keep your data

We keep your personal data only as long as we need it, then delete it. How long depends on the type of data:

• Chat messages are automatically deleted 30 days after they are sent.
• Your profile, goals, budgets, and AI memory notes are kept while your account is open. You can delete individual AI memory notes any time from your Profile.
• Bank and financial data (transactions, balances, and the connection itself) is kept while a bank is connected, and is deleted when you disconnect that bank or delete your account.
• Everything we hold about you is permanently deleted when you delete your account (see below).

MyWealthPal is an educational app, not a bank or regulated financial institution, so we do not keep your data for long mandatory retention periods. To request access to or deletion of your data, contact support@mywealthwallet.com.

Deleting your account

You can delete your account from the Profile page. Deleting your account permanently removes all data we hold about you: your profile, bank connections, transaction history, goals, conversation history, and AI memory facts. This action cannot be undone.

Contact

Questions about this policy, or want to access or delete your data? support@mywealthwallet.com