Privacy Policy

1. Account and where your data lives

BeWealthy can be used without any account. You may optionally create a free account with Sign in with Apple or Sign in with Google, so your financial data can be safely backed up and restored on your devices. Everything described below about our database applies only if you create that account. Your financial data is stored in an encrypted database on your device, and securely backed up to our database, hosted by Supabase in the EU (Frankfurt, Germany), tied only to your account. This includes financial transactions (amount, date, description, category), accounts and balances, financial goals and debts, and app settings and language preferences. We never sell this data, never share it with third parties, and never use it for advertising. Account data from Sign in with Apple/Google (your email address and display name) is used only to identify your account. Shared pools and co-owned accounts you invite others to are also stored in this same account-linked database, synced in real time so invited participants see the same data, see section 7.

2. API keys and secure storage

You may optionally provide your own API keys (e.g. a CoinGecko Demo key) to raise market-data request limits. Keys are stored only in your device's system Keychain with the kSecAttrAccessibleWhenUnlockedThisDeviceOnly attribute. They are inaccessible while the device is locked, are not copied to iCloud or iTunes, are removed on factory reset, and are never transmitted to our servers.

3. Network connections

BeWealthy connects only to a fixed allow-list of approved API domains:

• frankfurter.app & exchangerate-api.com, currency exchange rates (anonymous)
• query1/query2.finance.yahoo.com, stock and ETF prices (public API, no key)
• api.coingecko.com, cryptocurrency prices (public API)
• eodhd.com, alphavantage.co, data.nasdaq.com, optional stock/ETF prices (only if you add your own free API key)
• api.worldbank.org, inflation data for indexed bonds (anonymous)
• assets.parqet.com, company logos in ticker search (only the ticker symbol is sent)

All connections are encrypted (HTTPS) and any connection outside this list is blocked at the network layer.

4. Biometric data

If you enable Face ID / Touch ID lock, BeWealthy uses Apple's system LocalAuthentication framework. Biometric data never leaves your device, BeWealthy has no access to it and does not store it.

5. No ads in the app. Anonymous usage measurement

The BeWealthy iOS app contains no advertisements and never shares your data with data brokers. It does measure two things, and neither of them touches your finances. First, anonymous product usage: which onboarding step you reached, whether a paywall was shown, whether a purchase completed. These events carry only a step name and a random installation identifier that disappears when you uninstall the app. They never contain amounts, balances, account names, transactions, your email or your location. Second, install attribution: if you arrived from one of our ads, the app uses the TikTok Business SDK to report that the install came from that campaign. This runs only with your consent through Apple's App Tracking Transparency prompt; if you decline, no advertising identifier is read.

6. Subscriptions and payments (RevenueCat)

Pro subscriptions and the one-time Lifetime purchase are handled through Apple's In-App Purchase. To process purchases, restore them across your devices and verify subscription or purchase status, the app uses RevenueCat as a payment-processing provider. RevenueCat receives your App Store purchase data and an anonymous app user identifier (plus related device identifiers required to complete the purchase). It does not receive the financial records you enter in the app, your name or your email, and processes this data solely to operate subscriptions. See RevenueCat's privacy policy at revenuecat.com/privacy.

7. Shared pools & co-owned accounts

Shared expense pools and co-owned accounts let you invite other people, by sharing a short code or QR image, to see and edit a specific pool or account together. This shared data, its name, participants and entries, is stored in our database described in section 1 (hosted by Supabase in the EU) and synced in real time so every invited participant sees the same data. It is encrypted with a key derived from the invite code itself, and the code is never stored in the database, so its contents are readable only by people who have the code. Only people who use your invite code or QR can access a shared pool or account; you can remove a participant or leave a pool at any time. If you never create or join a shared pool, no shared data is created.

8. This website (cookies & marketing)

One distinction matters here: the app never touches your financial data for marketing, and this marketing website (bewealthy.cloud) may use cookies to measure our advertising, but only after you give consent via the cookie banner. If you accept, we load analytics/advertising tools (such as the Meta Pixel, TikTok Pixel and Google Analytics), which record anonymous website actions (such as page views and clicks on “Download”) so we can measure and improve our ad campaigns. If you decline, no marketing cookies or pixels are loaded. These website cookies have no access whatsoever to the financial data inside the app. You can withdraw consent any time by clearing your browser cookies for this site.

9. Children

BeWealthy is not intended for children under 13 and does not knowingly collect any data from such users.

10. Your rights (GDPR)

You have full control over your data: the right of access (data is visible directly in the app), erasure (use "Delete account" in the app to permanently delete your account and all cloud-stored data, uninstalling the app alone does NOT delete your cloud backup), rectification (edit anything at any time), portability (export your transactions to CSV at any time, on every plan including Free), and objection (the app processes data only to provide you the service, sign-in, backup, sync and restore, no profiling or marketing).

11. Changes

Any changes to this policy will appear here with an updated date. Continued use after changes constitutes acceptance of the updated policy.

12. Data controller & contact

Data controller: Jakub Klamka, Poland. Privacy / GDPR enquiries: bewealthy.app@gmail.com. We respond within 30 days. You have the right to lodge a complaint with your data protection authority (in Poland: the President of the Personal Data Protection Office, UODO) if you believe processing of your data violates GDPR.