Privacy policy

1. Information we collect

WAMM has no password of its own. You sign in with Google or with Apple, and we receive only what that sign-in hands us:

• Your email address
• Your name, where the provider supplies it

This is used to create and identify your account, and to send the reminder emails you switch on. Nothing more.

Three notes specific to Sign in with Apple. If you choose Hide My Email, we only ever see Apple’s relay address — we never learn your real one. Apple releases your name once, on your very first authorization; if you sign in with both Google and Apple using the same verified email address, both resolve to the one WAMM account rather than creating a second. And we keep one token from Apple, encrypted, for a single purpose: when you delete your account or unlink Apple, we use it to tell Apple to disconnect WAMM from your Apple ID.

2. The financial data you enter

WAMM is a personal finance dashboard, so the substance of it is what you record yourself. That may include:

• Bank and cash account balances
• Fixed deposits, funds, and retirement savings such as EPF
• Crypto and stock holdings
• Liabilities and loans
• Income, expenses, and recurring commitments
• Subscriptions, budgets, and net-worth history

Manual entry is the baseline: every figure in WAMM is one you typed. It is used only to render your own dashboard. We do not sell it, trade it, rent it, or share it with third parties, and we do not use it to target advertising — WAMM shows no ads.

3. Using the mobile app without an account

The WAMM mobile app works fully without signing in. In that mode your ledger lives in a database on your device only — it is never uploaded, and we hold nothing about you at all. If you later sign in, that local data is migrated up to your account so you keep it; if you never sign in, it never leaves the phone.

4. Households and shared data

A household is a shared space you can invite someone into. Anything you explicitly mark as shared becomes readable and editable by the members of that household. Everything else stays private to you — being in a household never exposes your personal rows. An invite resolves only for the email address it was sent to.

5. Premium purchases

When you buy Premium, the payment is handled entirely by Apple or Google. We never see or store your card or bank details.

RevenueCat manages subscriptions for us. It receives a random purchase identifier made for your account, not your email, your name or your WAMM account id, and the purchase records from the store you bought in. From RevenueCat we keep only what decides your access: whether a subscription is active, which store it is in, and when it ends.

Deleting your account deletes our record of your subscription, and with it the only link between you and that identifier. RevenueCat keeps its purchase records under the identifier, which nothing can connect back to you afterwards.

6. Storage and security

Your data is held in an encrypted, access-controlled database. Sensitive connection credentials — the Sign in with Apple token, and any future exchange or bank access tokens — are additionally encrypted at rest with AES-256-GCM before they are written, so they are unreadable even from the database itself. Traffic is HTTPS end to end.

7. Service providers

WAMM runs on infrastructure operated by others. These providers process data strictly to deliver the service, never for their own purposes:

• Application hosting — Amazon Web Services
• Database — Neon (managed PostgreSQL)
• Sign-in — Google and Apple
• Email delivery — Resend, for the reminders you enable
• Static assets — Cloudflare R2, for service and institution icons
• Subscriptions — RevenueCat, which manages Premium subscriptions across the App Store and Google Play
• Payments — Apple and Google, each for purchases made through its store
• Crash reports — Sentry, for the mobile app: what failed and where, with the device model and app version. Not tied to your account, and never your financial data
• App updates — Expo, which delivers updates to the mobile app. The requests carry the app version, the platform and a random install id, nothing about you

We also fetch market data — crypto prices, stock quotes, fund values, and exchange rates — from public pricing sources. Those requests carry only the identifier of the asset being priced, such as a ticker or a coin id. They never carry your identity, your holding size, or any account information, so a pricing provider cannot learn what you own.

8. Server logs

Our server logs are deliberately thin. A log line may record an account identifier, a row id, the route called, and whether it succeeded or failed. It never records financial values, balances, transaction descriptions, merchant or service names, email addresses, or tokens. This is enforced as an engineering rule, not left to discretion, so that deleting your account genuinely removes your financial data rather than leaving a readable copy behind in a log.

9. Your rights

You keep control of your data at all times:

• Export — download everything WAMM holds for you as a machine-readable file, from settings
• Delete your account — this permanently removes your data, including any household you own and its history, and disconnects Sign in with Apple. It does not cancel an App Store or Google Play subscription; cancel that with Apple or Google
• Delete local data — in the mobile app, wipe the on-device database without touching anything else
• Correct or remove — edit or delete any account, holding, transaction, or other entry directly from your dashboard

If you would like a copy of your data or its deletion carried out for you, contact us and we will action it.

10. Cookies

We set session cookies strictly to keep you signed in. There are no tracking cookies, no advertising pixels, and no third-party analytics on WAMM.

11. Children

WAMM is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will remove it.

12. Changes to this policy

If this policy changes in a way that materially affects how your data is handled, we will update the date below and notify you in the app before the change takes effect.

13. Contact

Questions about this policy, your data, or a deletion request: support@getwamm.com.