The Short Version
Wealthr is built to be private by design. Every piece of financial data you enter — balances, holdings, bills, budgets, properties, pensions — lives only on your device, in your browser's local storage. We never see it, store it, or transmit it anywhere.
The one exception is Pro subscribers: to verify your subscription we hold your email address, a Stripe customer ID, and your subscription status on our servers. That's the entire footprint, and this policy explains it in full.
Who We Are
"Wealthr", "we", "us" and "our" refer to the developer of the Wealthr app, contactable at support@getwealthr.com. The app is operated from the United Kingdom and is governed by UK data protection law (UK GDPR and the Data Protection Act 2018).
Data Stored On Your Device Only
The following are stored exclusively in your browser's localStorage and IndexedDB on the device you're using. We have no access to any of it:
- Bank and savings account balances
- Stock and crypto portfolio holdings
- Fixed bills, subscriptions and income entries
- Budget categories and spending logs
- Pension and property records
- App settings and currency preferences
If you clear your browser data, uninstall the app, or switch devices, this data is permanently lost unless you have exported a backup. We strongly recommend using the Export Backup feature in Settings regularly.
Data We Hold For Pro Subscribers
If you subscribe to Wealthr Pro, we hold a small record on our backend (Supabase, hosted in Ireland) so we can verify your subscription status when you sign in. This record contains:
- Your email address — provided to Stripe at checkout, passed to us via webhook
- A Stripe customer ID — an opaque reference like
cus_XXX - Your subscription status — active, cancelled, or past due
Lawful basis: performance of a contract (UK GDPR Article 6(1)(b)) — we need this to provide the service you're paying for.
Retention: we keep this record for as long as you have an active or recently cancelled Pro subscription, plus a reasonable period thereafter for accounting purposes. You can request deletion at any time (see Your Rights below).
We do not link this record to any of the financial data you enter into the app. The financial data never leaves your device, so there is nothing on our side to link it to.
Payment Processing
Payments for Wealthr Pro are processed by Stripe Payments UK Limited. We never see or store your card details — Stripe handles all of that under their own privacy policy and PCI compliance. You can view Stripe's privacy notice at stripe.com/privacy.
You can cancel your subscription at any time through the Stripe customer portal, accessible from inside the app or directly at billing.stripe.com.
Anonymous Analytics
We use Plausible Analytics on both our marketing pages and inside the app to understand how the product is being used and which features lead to people upgrading. Plausible is a privacy-friendly, cookie-free analytics service hosted in the EU. It does not use cookies, does not track you across other sites, and does not collect any personal data — no IP addresses, user IDs or device fingerprints are stored.
Inside the app, we record a small number of anonymous behavioural events. These help us see, in aggregate, how new users flow through the product:
- App Opened and App Installed — when the app loads or is added to the home screen
- First Item Added (with the type of item, e.g. "bill" or "stock") — fired once per user when they save their first real entry
- Pro Modal Shown (with what triggered it) — to see which features drive interest in Pro
- Stripe Checkout Started (with the currency chosen) — to measure conversion
- Install banner clicks and dismissals
These events are stored as anonymous aggregate counts only. We have no way to link them back to you as an individual. Plausible's privacy policy is available at plausible.io/privacy.
Google Ads Conversion Tracking
If you arrive at Wealthr by clicking a Google Ads advertisement, we use Google Ads conversion tracking to measure whether the ad worked. This is done through a small Google tag loaded on our landing page and inside the app. The tag stores a click identifier (GCLID) on your device for up to 90 days, and if you click the "Upgrade to Pro" button within that window we tell Google "this person clicked through to checkout."
We do not send your name, email, financial data or any details about your usage of the app to Google. Google receives only the click identifier and the fact that a checkout-click event occurred. If you did not arrive via a Google Ads click, no conversion event is fired and Google receives nothing.
If you would prefer not to participate in conversion tracking, you can block the Google tag using a content blocker, or visit Google's ad settings at adssettings.google.com to opt out of personalised advertising.
Country Detection On First Load
The first time you open the app, it makes a single request to ipapi.co to determine your country, so we can pre-select a sensible default currency (GBP, USD or EUR). This request reveals your IP address to ipapi.co, which they use to look up the country code. We do not store your IP address, and the response we use is just the two-letter country code.
If you'd rather skip this, you can deny the request in your browser's network tools — the app will simply default to GBP, and you can change the currency manually in Settings at any time. ipapi.co's privacy policy is available at ipapi.co/privacy.
Third Party Services Used By The App
To show live prices, charts, news and exchange rates, the app makes requests directly from your device to the following services. As with any web request, your IP address is technically visible to each service for the duration of the call — this is how the internet works, and we do not pass any other identifying information:
- Yahoo Finance (finance.yahoo.com and query2.finance.yahoo.com) — stock and ETF prices, plus news
- CoinGecko — cryptocurrency price data
- ExchangeRate-API — currency exchange rates
- Bank of England — UK base rate data
- Land Registry — UK sold property prices
- Blockstream — Bitcoin wallet lookups (only if you use that feature)
- TradingView (s.tradingview.com) — embedded interactive price charts. TradingView may set its own cookies inside the chart frames; their privacy policy applies to anything that happens within those frames
- BBC, Sky News, CNBC, Bloomberg, Guardian, Reuters, FT, Investing.com — news RSS feeds
- AllOrigins, corsproxy.io, codetabs.com — CORS proxy services used as fallbacks to fetch the above feeds when their servers don't allow direct browser access
Each service's own privacy policy applies to requests made to their APIs.
Push Notifications
If you enable bill reminders, the app will request browser permission to send notifications. Notifications are generated locally on your device by the app's service worker — they do not pass through our servers, and we cannot see what they contain. You can revoke notification permission at any time in your browser or device settings.
Your Rights Under UK GDPR
If you are a Pro subscriber, you have the following rights regarding the small record we hold:
- Right of access — request a copy of the data we hold about you
- Right to rectification — correct inaccurate data
- Right to erasure — request deletion of your record
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to processing in certain circumstances
To exercise any of these rights, email support@getwealthr.com. We will respond within one calendar month. If you are unhappy with our response, you have the right to complain to the UK Information Commissioner's Office at ico.org.uk.
Because the financial data inside the app is held only on your device, you can already access, correct, export and delete it yourself at any time without contacting us.
Children's Privacy
Wealthr is not directed at children under the age of 13, and we do not knowingly collect any information from children under 13. If you are a parent or guardian and believe your child has subscribed without permission, please contact us and we will remove the record.
International Data Transfers
Stripe Payments UK Limited is based in the United Kingdom, so Stripe transactions are processed domestically. Supabase Inc. (the company) is incorporated in Singapore, but our project data is hosted in Ireland, within the European Economic Area, which the UK government recognises as offering an adequate level of protection. Where any onward transfers happen, they are protected by appropriate safeguards including the UK International Data Transfer Agreement (IDTA) and the EU Standard Contractual Clauses, which are incorporated into our processors' standard data processing agreements.
Changes To This Policy
We may update this policy from time to time. The "last updated" date at the bottom of this page will always reflect the current version. Material changes will be communicated to active Pro subscribers by email.
Contact
For any privacy questions, data requests, or concerns, contact us at support@getwealthr.com. We aim to respond within a few working days.