Security and privacy
WealthyJack shows you your money.
Through Plaid: balances and transactions, nothing more
You connect a bank by signing in to it through Plaid, a service banks and apps use to share account data safely. WealthyJack never sees your bank password. The connection can read balances and transactions and nothing else: it cannot move, send or spend money.
Bank connections locked away
The key that lets WealthyJack read your bank is encrypted with a separate key before it is stored. Your password is kept only in scrambled form, never as the password itself, and everything travels encrypted.
Two-step sign-in, with passkeys
Before anything sensitive, like connecting a bank, exporting or deleting, the app asks for a second check: a passkey (Face ID, a fingerprint or your phone's lock), an authenticator app or an email code. Your face and fingerprint never leave your device.
Payments through Stripe
Stripe handles the payment. We never see your card. Standard and Premium are paid on Stripe's own pages, and you can cancel any time.
Three things we never do
- Move, send or spend your money.
- Sell your data, or show you ads.
- Show our staff your amounts. Our team sees counts and how the system is running, never your amounts, payees or account numbers, unless you ask us to help with something specific.
Delete everything, any time
In the app, open Settings → Export to download everything first, then Settings → Delete my account. Deleting removes your data and cuts off bank access at Plaid. If you cannot sign in, email privacy@wealthyjack.com from your account email and we will do it for you.
How long we keep things
- Your data: for as long as your account exists.
- When you delete your account: your data is deleted and bank access is cut off at Plaid. A scrambled copy of your email is kept for a short time, so we can show the deletion happened, then removed.
- Logs: never with amounts or payees, kept for a limited time and then deleted.
- Backups: encrypted, kept for a limited time and then deleted.
- Trusted devices: after a second check, the browser you used is trusted for 30 days. You can remove any of them in Settings → Security.
The fine print
Read the Terms of Service and the Privacy Policy. Questions or a problem: Support.