WealthWizard is a personal budgeting app that forecasts your account balance so you can see where your money is heading. This policy explains what data the app touches, what we deliberately never keep, and the choices you always have.
This is the part most privacy policies do not have, and it is the core of how WealthWizard is built.
Never written to storage
Merchant names, transaction descriptions, locations, and counterparties are never written to our storage. Not encrypted, not anonymized. Never stored at all.
The transaction records we keep are stripped down to what the forecasting model actually needs: a date, an amount, a spending category, and which account it belongs to. This stripping happens the moment data arrives, is enforced by an allowlist in our ingestion code, and is guarded by automated tests that fail our software build if a forbidden field could ever reach the database. Raw bank data exists only in server memory while a sync is running, and is gone when it finishes.
Your data is used for exactly one thing: producing your balance timeline and forecast, for you. We do not sell your data. We do not share it with advertisers. We do not use it to market to you. We do not train shared models on your personal transactions; our forecasting models are trained on synthetic data.
Our roadmap goes further: we are building toward an architecture where transaction data is never stored on our servers at all, and lives only encrypted on your own device. This policy will be updated as that ships.
Two service providers, and only because the product cannot work without them: Plaid, which connects to your bank on your instruction, and Amazon Web Services (Cognito), which stores your account identity. No one else. No data brokers, no analytics resellers, no advertising networks.
Deletion means deletion
When you delete your data in the app, we delete your stored financial records outright and revoke our connection to your bank at Plaid in the same operation. There is no soft delete, no tombstone, and no retention copy.
You can also delete the encryption key on your device at any time, which permanently destroys the local copy of your data. You can disconnect your bank whenever you want. If you have a privacy question or request this page does not cover, email us and a person will answer.
We keep the minimized records described above only while your account is active and your bank is connected. Forecast outputs and operational logs are kept for running the service; logs exclude financial payloads by policy. When you delete your account or your data, retention ends immediately.
WealthWizard is not directed at children under 13, and we do not knowingly collect data from them.
When this policy changes, the version and effective date at the top change with it, and meaningful changes will be announced in the app. Prior versions are available on request.
Kevin Brown, CISSP, Chief Information Security Officer
kbrown0093@gmail.com