Privacy Policy

Effective: October 28, 2026 · Controller: Wealthy Jack LLC, 971 US Highway 202N, Suite N, Branchburg, New Jersey 08876 · Contact: support@wealthyjack.com

WealthyJack exists to show you your own money. This policy says what we hold, why, who else touches it, and what you can do about it. We do not sell personal data and we do not run advertising.

What we collect

• Account: email address, display name, a hashed password (never the password itself), your theme and view preferences.
• Ways to prove it's you: we ask for a second check only before something sensitive (connecting a bank, your household, exporting or deleting data, changing your email or password, AI help, plans). For a passkey we keep its public key, a name you can change and when it was added; Face ID, fingerprints and your phone's lock stay on your device and never reach us. For an authenticator app we keep its secret and your backup codes encrypted. Email codes (when offered) are six digits, stored only as a hash, valid ten minutes and usable once.
• Trusted devices: after a check, the browser you used is trusted for 30 days. It holds a random id in a cookie; we keep only a hash of that id, a name like "Safari on iPhone" (from the browser's description of itself), and when it was trusted and last seen. You can revoke any of them in Settings → Security, and signing out everywhere revokes them all.
• Password reset emails: when you ask to reset your password, we email a link to that address only if it has an account (the screen says the same either way). The link works once and for 30 minutes; using it signs you out everywhere and removes your trusted devices. We record that a reset was asked for and whether the email was delivered, never the address or the link.
• Financial data you connect: through Plaid, with your permission: account names and types, masked account numbers, balances, credit limits, and up to 24 months of transactions, then ongoing updates. We hold the connection token encrypted and never see your bank credentials.
• Financial data you add yourself: CSV imports, manual accounts, transactions, budgets, goals, bill and payday confirmations, debt terms (rate, payment, due dates).
• What the app works out: categories, detected subscriptions, bills and paydays, budgets' pace, goal progress, payoff plans, health score, achievements and heads-up notes, and insights (an unusual or large charge, a price rise, two services that overlap, card limit use creeping up, a budget on pace to go over, a short week before payday, a saving streak) with what you did with each (dismissed or done). What counts as a "large charge" is an amount you set in Settings → Heads-ups.
• Tips and moments: which tip cards you have been shown ("your first paycheck", "your first card" and so on), when, and whether you tapped "Got it". They are personal: in a household a guardian sees only how many a dependent has seen and how many are waiting, never a figure.
• Weekly summary: once a week, on the day and hour you choose in your time zone, the app writes a short summary of last week (money in and out, the categories that led, the bills and payday ahead, your progress and that week's insights) and shows it in the app. We keep your time zone (taken from your device unless you pick one), the day and hour, and each week's summary.
• Weekly summary emails (opt-in): only if you switch on "Email it to me" in Settings → Heads-ups (on Plus) do we email the same summary to your account address; nothing is sent without that switch. The email contains the summary's sentences and amounts and a link back to the app, and every one carries an unsubscribe link (also offered to your mail app as a one-click unsubscribe) that turns the email off without signing in. The link carries only your account id, its purpose and an expiry, signed so it cannot be altered. We record that a summary was sent or failed, never the address or the link; after two failed sends in a row the email turns itself off and the app tells you.
• Household data: the household name, members' names and roles, and which accounts each member may see.
• Security records: sign-ins, exports, deletions, bank connections and admin actions, kept as an audit trail you can see in Settings.
• Technical logs: request logs without amounts or payees, kept for a limited period.
• Early access list: if you leave your email on wealthyjack.com, we keep that email and the date, use them only to send your invitation, and remove them on request to privacy@wealthyjack.com.
• Feedback you send: when you use Send feedback (or "Report this" on an error), we keep what you write, its kind (something's wrong, an idea, a question), whether we may email you about it, and what the app fills in on its own: the page as a route with ids removed (never a search or an amount), your household view, theme, screen size, browser family, app version, plan and household role, and for an error the error's words. A screenshot is attached only if you pick one; it may show amounts, so it is stored encrypted and only our team can open it, after a fresh second check. Nobody else in your household sees your reports. If you allowed it, we may email you a reply. You can delete a report any time in Settings → Feedback; reports and screenshots are in your export and are deleted with your account.

We do not collect precise location, contacts, advertising identifiers or third-party tracking.

Why we use it

To show your finances, detect patterns you asked us to detect, keep your account secure, run and support the service, and meet legal duties. If we ever want to use data for a new purpose, we will ask first.

Who else processes it

• Plaid Inc. connects to your bank and processes your bank data under its End User Privacy Policy (https://plaid.com/legal/#end-user-privacy-policy).
• A US-based cloud hosting provider hosts our servers and encrypted backups.
• A public exchange-rate service provides daily exchange rates; no personal data is sent.
• Our email delivery provider delivers our emails (invitations, sign-in codes and, if you switch it on, the weekly summary) when we send them. It receives the recipient's address and the message. Our emails come from no-reply@wealthyjack.com and replies go to support@wealthyjack.com.
• Stripe processes Plus payments on its own pages. It receives your email (and the name you give it at checkout); we receive your plan's status and dates, never card numbers.
• Anthropic receives, only after you switch AI help on in Settings, the minimum text needed for the feature (for example a merchant name to categorise); never account numbers or your full history. Anthropic does not train on this data under our agreement, and you can switch the feature off at any time.

We share data with nobody else, except when the law requires it, and then only what is required.

How long we keep it

As long as your account exists. When you delete your account, your data is deleted and bank access is revoked at Plaid; a hash of your email is kept for a short time so the deletion can be proven and re-invites handled, then removed. Logs and encrypted backups are kept for a limited period and then deleted.

How we protect it

Encryption in transit; bank tokens encrypted at rest with a separate key; hashed passwords; a passkey, authenticator code or email code before any sensitive action on a device that isn't trusted; restricted access and a fresh second factor for any admin action (a trusted device never counts there); audit trail; least-privilege access. Our staff see counts and system health, never your amounts, payees or account numbers, unless you ask us for help with a specific issue (a screenshot you attach to feedback counts as asking).

Your rights and controls

In Settings you can export everything (JSON and CSV), disconnect a bank and delete what it brought in, leave a household, switch features off, and delete your account. Depending on where you live you may also have rights to access, correct, restrict or object; write to support@wealthyjack.com and we will answer within 30 days. You can complain to your local data protection authority.

If you live in the United States

We do not sell personal data, do not share it for targeted advertising, and do not use it for profiling with legal effects, so there is nothing to opt out of. Under state privacy laws such as New Jersey's you may ask to see, correct, delete or receive a copy of your data; Settings does all four, and support@wealthyjack.com handles anything Settings cannot. We will not treat you differently for using these rights. If we refuse a request you can appeal by replying to our answer.

Children

WealthyJack is for people 13 and older. Under-18s use it inside a household run by a parent or guardian. We do not knowingly collect data from children under 13; if you believe we have, contact us and we will delete it.

Changes

We will post changes here and tell you in the app before they take effect.

Cookie Notice

WealthyJack uses only the cookies it needs to work. There are no advertising or analytics cookies.

Plaid's bank-connection window may set its own cookies under Plaid's policies. The marketing site sets no cookies unless you sign in.