Privacy Policy

This policy applies to Wallet Tracker at wallet-tracker.app, its installable web app, the Wallet Tracker Android app, and the website waitlist. "We", "us" and "our" mean the team operating Wallet Tracker. The Android app can be used locally without a Wallet Tracker account; cloud sync and Google Drive backup are separate, optional features.

Most of what we hold is information you choose to enter:

• If you create a Wallet Tracker cloud account: your name, email address and password. The server stores a password hash, not your readable password. A local-only Android wallet does not require this account.
• Financial records: wallet accounts and balances, transactions, transfers and the exchange rates you used, categories, tags, budgets, subscriptions, bills, loans and loan payments, and any notes you add. Loan records may include the name of the other person involved.
• Attachments: receipts, invoices and other photos or PDFs you attach to a record.
• Preferences: your base currency, language, theme, number format, backup and notification choices. The Android app stores its app-lock PIN hash on your device.
• Waitlist details: your name, email address, preferred language, and when you agreed to receive updates.
• AI Assistant: if you turn it on, when you agreed to its notice. The questions you ask are sent to OpenAI to be answered but are not stored by us.
• Messages you send us, for example a support request.

We keep automatic collection to what the service needs to work and stay secure:

• Session cookies that keep you signed in, and a preference cookie that remembers your theme. We do not use advertising or cross-site tracking cookies.
• Technical logs our hosting providers generate when you use the service, such as IP address, browser type, and the time and outcome of requests. These help us diagnose problems and prevent abuse.
• If you turn on notifications, the push subscription address your browser provides so we can deliver them.
• In Android builds configured with Firebase Crashlytics, crash reports and technical diagnostics are sent to Google to help us fix app failures. Crash reporting is on by default and can be turned off in Android Settings. We do not intentionally add financial records to crash reports.

The web app stores an offline copy of your records and pending changes in your browser. Clear this site's data in your browser settings to remove that copy; unsynced changes will be lost.

The Android app stores wallet records, preferences and optional attachment files on your phone. In local mode, these records stay on that phone. If you turn on cloud sync, wallet records and attachments you add are sent to your Wallet Tracker account and can be viewed on the web and your other signed-in devices.

If you enable SMS import and grant SMS permissions, Android reads incoming messages and scans recent inbox messages to suggest transactions. It keeps matching message text, sender and parsed details locally for review; imported SMS messages are not uploaded. Accepted transactions can later be included in cloud sync or a Drive backup. Reviewed SMS text is cleared from the app's local import database after 90 days; you can turn off SMS import in Settings.

If you choose a photo or PDF attachment, the app accesses that selected file; using the camera requires camera permission. Android system notifications require notification permission.

When you connect Google Drive, the Android app asks Google for your email address to identify the selected account and the drive.appdata permission. This permission lets Wallet Tracker create, list, read and delete only files in its own hidden Google Drive app data folder. We do not request access to your other Drive files, contacts, Gmail or Google Photos.

The app stores the selected Google account email on your device. Google provides a short-lived access token to the app to perform the Drive operations; Wallet Tracker does not send that token or your Drive backups to its own server. The app can upload wallet records and, if enabled, attachments as a backup file to your Drive, list backups, download one for restore, and delete a backup you select. Scheduled backups may run while connected.

A backup is encrypted with a passphrase only if you set a backup passphrase in the Android app. Without a passphrase, the backup is an unencrypted archive in your private Drive app data folder. Setting or changing a passphrase affects future backups, not files already in Drive.

The app normally keeps the latest three backups from each device and tries to remove older ones. Disconnecting Drive revokes the app's access on that device but does not delete existing backups. Deleting a Wallet Tracker cloud account also does not delete backups in your Google Drive. To remove them, use the Android app's backup list while connected, or manage the app's hidden data in your Google Drive account.

The AI Assistant is off until you turn it on and agree to the notice shown first. It works with the records in your Wallet Tracker cloud account, so on Android it needs cloud sync.

When you ask a question, our server sends it to OpenAI together with a summary of your records for the period you choose: account names, types and balances, income and spending totals by category and by month, budgets, active subscriptions and loans, and your default currency. For periods of 45 days or less it also sends individual transactions (date, amount, category, account and your notes). It does not send your name, email address, attachments or password, and each request is tagged with a one-way coded identifier rather than your account details, so OpenAI can't tell who you are.

OpenAI returns the answer and we show it to you. We do not store your questions or the answers. For each question we keep a usage record (time, the period you chose, the AI model, the number of tokens processed, the cost and the credits charged) to apply your monthly credits and to monitor costs and abuse.

OpenAI does not use data sent through its API to train its models. We ask OpenAI not to store requests; it may still keep them for up to 30 days to detect abuse, and then deletes them.

Answers are generated automatically and can be wrong. They are general information, not financial, tax or legal advice, and the AI Assistant does not make decisions about you.

You can turn the AI Assistant off at any time on its page. After that, nothing more is sent to OpenAI unless you turn it on again.

We use your information only to:

• Provide the features you choose: store local records, sync cloud records, calculate balances and reports, and create or restore Google Drive backups.
• Answer the questions you ask the AI Assistant, and apply its monthly credits and cost limits.
• Send the notifications and digests you turn on, and the waitlist updates you sign up for.
• Keep the service and your account secure, and diagnose app failures when crash reporting is enabled.
• Respond to your questions and requests.
• Meet our legal obligations.

Google user data obtained for Drive backup is used only to provide that user-facing backup feature. We do not sell it, use it for advertising, train generalized AI or machine-learning models with it, or make automated decisions about you that have legal or similarly significant effects. We do not use your records to train AI models, and neither does OpenAI when answering your AI Assistant questions.

The following services handle data to deliver the features described here. Your use of Google Drive backup is governed by your own Google account and choices:

• Vercel, which hosts the website and web app and processes technical requests.
• A managed database provider, which stores your account and records.
• DigitalOcean Spaces, which stores the attachments you upload. Files are private and opened through short-lived links.
• Google Drive, only when you connect it on Android, which stores your app's backups in your own Google account. Backup file contents go directly between your device and Google Drive; they are not sent to Wallet Tracker's server.
• Google Firebase Crashlytics, in configured Android builds when crash reporting is enabled, which receives crash diagnostics.
• OpenAI, only when you use the AI Assistant, which generates the answers from your question and a summary of your records for the period you choose. OpenAI may keep requests for up to 30 days to detect abuse and does not use them to train its models.
• Resend, which delivers password-reset emails for cloud accounts.
• exchangerate-api.com, which supplies daily reference exchange rates. We send it only currency codes, never personal information.
• Your browser's push service (for example Apple, Google or Mozilla), which delivers the notifications you have turned on.

We may also disclose information when the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or acquisition, in which case this policy continues to apply to your information.

We keep cloud account records while your account is open. When you delete a cloud record, it is removed from the live service. Deleting your Wallet Tracker account deletes its cloud records and hosted attachments; routine provider backups expire on the provider's backup cycle. Local Android data can remain on your phone after cloud account deletion until you choose to remove it.

AI Assistant usage records (never the questions or answers) are kept while your account is open, so we can apply monthly credits and review costs, and are deleted with your account.

Waitlist details are kept until you unsubscribe or ask us to remove them. Technical logs are kept for a limited period for security and troubleshooting.

No online service can promise perfect security, but we take practical steps to protect your information:

• All traffic is encrypted in transit with HTTPS.
• Passwords and app lock PINs are stored only as salted hashes.
• Cloud records are tied to your user account, and requests to access them are checked against that account.
• Attachments are stored privately and opened through links that expire within minutes.

Drive backups are encrypted only when you set a backup passphrase. Use a strong, unique password and keep your devices locked. If you believe your account has been compromised, contact us straight away.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. Whatever the law where you are, we will:

• Let you view and edit your records directly in the app.
• Let you export your transactions as CSV or JSON from Settings.
• Let you delete your Wallet Tracker cloud account from Settings with your password; this removes cloud records and hosted attachments, but leaves any Google Drive backups or Android data you keep on your device.
• Let you disconnect Google Drive, delete individual Drive backups while connected, and switch off Android SMS import or crash reporting in Settings.
• Let you turn the AI Assistant off at any time on its page, which stops sending your data to OpenAI.
• Stop sending waitlist emails when you unsubscribe or ask us to.
• Let you turn notifications on or off at any time in Settings.

To make a request, email [email protected] from the address on your account. We may need to confirm your identity first. You can also complain to your local data protection authority.

Our providers may process information in countries other than yours, whose data protection laws may differ. Where required, we rely on appropriate safeguards for those transfers.

Wallet Tracker is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

We will update this policy when the service or the law changes. We will post the new version here with a new date, and if a change is significant we will tell you in the app or by email before it takes effect.