WealthWise

Privacy Policy

Effective 14 July 2026

WealthWise is a personal finance app, which means we ask you to trust us with the most sensitive category of data there is. We designed the product so that you mostly don’t have to.

The short version. Your financial data — every transaction, account, balance, budget, merchant, category and note — stays on your device. It is not sent to our servers. We could not read it, sell it, hand it over, or leak it in a breach, because we never receive it.

Our servers exist to answer three questions: who are you, what have you paid for, and what should the app turn on for you. That is all they hold.

1. Who we are

Sumesphere (“we”, “us”) is the controller of the personal data described below. Reach us at sumesphere@gmail.com.

2. What stays on your device

WealthWise is offline-first. The following never leaves your device and is never transmitted to us:

  • transactions — amounts, dates, notes, attachments, receipts;
  • accounts, balances and net worth;
  • budgets, savings goals, debts and EMIs;
  • categories, merchants and payees;
  • the contents of anything automatic import reads. Parsing happens entirely on your device; the source messages and the transactions derived from them are never uploaded.

Insights, projections and categorisation are computed on your device from this local data.

Cloud backup

If you enable cloud backup, your data is encrypted on your device and written to your own iCloud account, not to our servers. The encryption key is generated on your device and held in your iCloud Keychain. We never receive the backup and we do not have the key — meaning we cannot decrypt your backup even if compelled to, and neither can anyone who compromises our infrastructure. The only thing our servers learn about a backup is the timestamp of the last one, so the app can tell you when you last backed up.

3. What we do collect

Account

  • Sign in with Apple / Google: a stable identifier from the provider, and the name, email address and avatar you choose to share. If you use Apple’s Hide My Email, we only ever see the relay address — that works fine, and we recommend it.
  • Guest use: you can use WealthWise without an account at all. We then hold an anonymous account identifier and no contact details.

Preferences and technical data

  • display currency, language and timezone — preferences, never balances;
  • app version, platform, and the number of devices on your account;
  • the timestamp of your most recent backup.

Subscription

If you subscribe, we record which tier you hold, when it expires, and the store transaction identifier, verified directly with Apple. We also record what you paid us — that is our revenue, and it is the only currency amount that exists anywhere in our database. We never see your card details. Payment is handled entirely by Apple.

Product analytics

We record a small, fixed set of events — that a budget was created, that an import ran, that the paywall was seen — to understand which features are worth building on. This list is a server-enforced allowlist: our backend rejects any event it does not already know about, and rejects any property that looks financial (an amount, a balance, a merchant, a category name, a note). This is not a policy we ask engineers to remember; it is a rule the server applies, covered by tests that block a release if they fail.

The result: we can see that you created a budget. We cannot see what it was for, or for how much.

Crash reports

When the app crashes we receive the error and stack trace so we can fix it. Messages and stack traces are scrubbed before storage to strip anything that looks like personal or financial content.

Notifications

If you enable notifications, we store a device push token so we can deliver them. Reminder content is generated on your device where it involves your data.

4. What we never collect

  • Your bank credentials. WealthWise never asks for them and cannot log in to your bank.
  • Your card or payment details. Apple handles payment.
  • Your financial data. Not the raw records, not aggregates, not “just the monthly total”, not a transaction count.
  • Your contacts, photo library or precise location.

5. Why we’re allowed to hold it (legal bases)

  • Contract: account, subscription and entitlement data — we cannot provide a paid app without them.
  • Legitimate interests: crash reports, security and abuse prevention, and the allowlisted product analytics — narrow, non-financial, and necessary to keep the app working and improving.
  • Consent: push notifications, and any optional feature you switch on. You can withdraw consent at any time in Settings.

6. Who we share it with

We do not sell your data. We do not share it with advertisers or data brokers. There are no third-party ad or tracking SDKs in WealthWise.

We share the limited data above only with:

  • Apple — sign-in and subscription processing;
  • our hosting and infrastructure providers, who process data on our instructions;
  • authorities, where we are legally compelled. Note that a valid legal order still cannot produce your financial records: we do not have them.

7. Retention

We keep account data while your account exists. Analytics events and crash reports are retained only as long as they are useful for the purpose above, then deleted or aggregated. Subscription and purchase records are kept as long as tax and accounting law requires.

8. Deleting your account

You can delete your account from within the app at any time. When you do:

  • every session is revoked immediately;
  • the app deletes your local data — which is where your financial records actually live;
  • your server-side record is hard-deleted after 30 days. The delay exists so you can recover from an accidental or malicious deletion, and nothing else.

Your iCloud backup belongs to you and is deleted through iCloud, not through us — we have no ability to reach into your iCloud account.

9. Your rights

Depending on where you live (including under the GDPR and India’s DPDP Act), you have the right to access, correct, export, delete and restrict the processing of your personal data, and to object to processing based on legitimate interests. Exercise any of them by emailing sumesphere@gmail.com; we respond within 30 days. You may also complain to your local data protection authority.

10. Security

Data in transit is encrypted with TLS. Backups are encrypted on your device before they ever leave it. Access to production systems is restricted and audited. But the strongest security property of WealthWise is architectural rather than procedural: the most sensitive data is not on our servers to be stolen.

11. Children

WealthWise is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us with data, contact us and we will delete it.

12. International transfers

Our infrastructure and providers may process the limited data described above in countries other than yours. Where required, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for those transfers.

13. Changes

We will update this policy as the product changes. Material changes will be notified in the app or by email before they take effect. The effective date at the top always reflects the current version.

14. Contact

sumesphere@gmail.com for privacy questions and data requests; sumesphere@gmail.com for everything else.