Privacy policy

1. Information we collect

WAMM has no password of its own. You sign in with Google or with Apple, and we receive only what that sign-in hands us:

• Your email address
• Your name, where the provider supplies it
• Your profile picture, where the provider supplies it

This is used to create and identify your account, and to send the reminder emails you switch on. Nothing more.

Two notes specific to Sign in with Apple. If you choose Hide My Email, we only ever see Apple’s relay address — we never learn your real one. And Apple releases your name once, on your very first authorization; if you sign in with both Google and Apple using the same verified email address, both resolve to the one WAMM account rather than creating a second.

2. The financial data you enter

WAMM is a personal finance dashboard, so the substance of it is what you record yourself. That may include:

• Bank and cash account balances
• Fixed deposits, funds, and retirement savings such as EPF
• Crypto and stock holdings
• Liabilities and loans
• Income, expenses, and recurring commitments
• Subscriptions, budgets, and net-worth history

Manual entry is the baseline: with the exception of the optional Gmail import below, every figure in WAMM is one you typed. It is used only to render your own dashboard. We do not sell it, trade it, rent it, or share it with third parties, and we do not use it to target advertising — WAMM shows no ads.

3. Using the mobile app without an account

The WAMM mobile app works fully without signing in. In that mode your ledger lives in a database on your device only — it is never uploaded, and we hold nothing about you at all. If you later sign in, that local data is migrated up to your account so you keep it; if you never sign in, it never leaves the phone.

4. Households and shared data

A household is a shared space you can invite someone into. Anything you explicitly mark as shared becomes readable and editable by the members of that household. Everything else stays private to you — being in a household never exposes your personal rows. An invite resolves only for the email address it was sent to.

5. Gmail scanning (optional)

If you connect Gmail for receipt and subscription detection, we request read-only access, used solely to find subscription-related mail. We do not:

• Store the content of your emails
• Read emails unrelated to subscription and receipt detection
• Send email on your behalf
• Share any email data with third parties

Only the extracted details — service name, cost, billing cycle — are stored, and every import is shown to you for review before anything is saved. Nothing is added automatically. You can disconnect Gmail at any time from settings without losing what you have already recorded.

6. Storage and security

Your data is held in an encrypted, access-controlled database. Sensitive connection credentials — Gmail tokens, and any future exchange or bank access tokens — are additionally encrypted at rest with AES-256-GCM before they are written, so they are unreadable even from the database itself. Traffic is HTTPS end to end.

7. Service providers

WAMM runs on infrastructure operated by others. These providers process data strictly to deliver the service, never for their own purposes:

• Application hosting — Amazon Web Services
• Database — Neon (managed PostgreSQL)
• Sign-in — Google and Apple
• Email delivery — Resend, for the reminders you enable
• Static assets — Cloudflare R2, for service and institution icons

We also fetch market data — crypto prices, stock quotes, fund values, and exchange rates — from public pricing sources. Those requests carry only the identifier of the asset being priced, such as a ticker or a coin id. They never carry your identity, your holding size, or any account information, so a pricing provider cannot learn what you own.

8. Server logs

Our server logs are deliberately thin. A log line may record an account identifier, a row id, the route called, and whether it succeeded or failed. It never records financial values, balances, transaction descriptions, merchant or service names, email addresses, or tokens. This is enforced as an engineering rule, not left to discretion, so that deleting your account genuinely removes your financial data rather than leaving a readable copy behind in a log.

9. Your rights

You keep control of your data at all times:

• Export — download everything WAMM holds for you as a machine-readable file, from settings
• Delete your account — this permanently removes your data, including any household you own and its history
• Delete local data — in the mobile app, wipe the on-device database without touching anything else
• Correct or remove — edit or delete any account, holding, transaction, or other entry directly from your dashboard
• Disconnect Gmail — revoke scanning access at any time while keeping your recorded data

If you would like a copy of your data or its deletion carried out for you, contact us and we will action it.

10. Cookies

We set session cookies strictly to keep you signed in. There are no tracking cookies, no advertising pixels, and no third-party analytics on WAMM.

11. Children

WAMM is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will remove it.

12. Changes to this policy

If this policy changes in a way that materially affects how your data is handled, we will update the date below and notify you in the app before the change takes effect.

13. Contact

Questions about this policy, your data, or a deletion request: support@getwamm.com.