Privacy Policy

Guest mode (no account): All transactions, account balances, budget limits, and categories you create are stored exclusively on your local device. No data leaves your phone and no internet connection is required.

If you create a walletOS account or sign in with Google: We collect the minimum information needed to provide cloud sync and authentication:

• Email address
• Display name and profile picture (Google Sign-In only, from your Google account)
• Your financial data (transactions, accounts, budgets) — synced to secure Supabase cloud servers to enable multi-device access

If you subscribe to walletOS Pro: Payment processing is handled entirely by RevenueCat and the Google Play Store. We do not receive or store your payment card details.

We never collect:

• Financial account credentials or bank login details
• Location data
• Device identifiers or advertising IDs
• Usage analytics or behavioral tracking data
• Crash reports or diagnostic data sent to our servers

Information you provide is used solely to power walletOS features. We do not sell, rent, or share your data with advertisers or data brokers — ever.

For all users (guest and signed-in):

• Displaying your transaction history and balance summaries
• Calculating budget progress within your Spaces
• Organizing transactions by account and category
• Running on-device AI for automatic transaction categorization

Additionally, for signed-in users:

• Syncing your financial data securely across your devices via Supabase
• Authenticating your identity to protect your cloud data

Additionally, for Pro subscribers:

• Processing subscription state via RevenueCat to unlock Pro features
• Generating AI spending insights and natural language query responses via a secure cloud proxy (your data is sent to our AI service, never to third-party AI providers directly)

Guest mode — local storage only: Your data is stored using your device's local storage, protected by your phone's built-in security (screen lock, biometric authentication, device encryption). No data leaves your device.

Signed-in users — cloud storage: Your financial data is synced to and stored on Supabase (supabase.com), a SOC 2 Type II certified cloud database provider. Data is encrypted in transit (TLS) and at rest. Supabase servers are located in the United States. By creating an account and enabling sync, you consent to this cross-border data transfer.

Backup & data loss:

• Guest mode users: uninstalling the app or factory-resetting your device will permanently delete all local walletOS data. We recommend periodically using the app's export feature to keep a backup.
• Signed-in users: your data is preserved in the cloud even if you uninstall the app or change devices. You can delete your cloud data at any time from Settings.

walletOS uses the following third-party services. We do not use any advertising networks, analytics platforms, or data brokers.

• Supabase (supabase.com) — Authentication and cloud database, used only when you create an account. Governed by the Supabase Privacy Policy.
• RevenueCat (revenuecat.com) — Subscription management for Pro plan. Handles purchase verification with Google Play. Governed by the RevenueCat Privacy Policy.
• Google Sign-In — Optional sign-in method. If you choose this, your Google account name, email, and profile picture are shared with us by Google. Governed by Google's Privacy Policy.
• Google Play Store — App distribution platform. Governs app installation and in-app purchase transactions.

We do not use Google Analytics, Firebase Analytics, Facebook SDK, Crashlytics, Sentry, any advertising SDK, or any social media integration.

walletOS does not knowingly collect personal information from children under the age of 13. In guest mode, the app collects no personal information from any user regardless of age.

Children under 13 should not create a walletOS account or enable cloud sync without parental consent. If you believe a child under 13 has created an account, please contact us and we will delete the account and associated data promptly.

The app contains no advertising and no social features. Pro subscriptions are managed through the Google Play Store, which supports parental controls to restrict in-app purchases.

For more detail on our approach to child safety, please see our Child Safety Standards page.

You have full control over your data at all times, regardless of whether you use guest mode or have an account:

• Right to access: All your data is viewable directly within the app. Signed-in users can also contact us to receive a copy of any personal data we hold.
• Right to deletion: You can delete individual transactions, accounts, or wipe all local data using "Wipe All Data" in Settings. Signed-in users can also delete their cloud account and all associated server-side data from Settings → Account → Delete Account.
• Right to portability: Pro subscribers can export their financial data as CSV or PDF at any time from Settings.
• Right to withdraw consent: Signed-in users can sign out at any time, reverting the app to guest mode. Your local data is retained; cloud data remains until you delete your account.
• GDPR / CCPA rights: If you are located in the EU, UK, or California, you have additional rights including the right to rectification and the right to object to processing. Contact us to exercise these rights.

For data deletion requests or any privacy concerns, please visit our Data Deletion page.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We will also notify users through an in-app notice for any material changes.

Continued use of walletOS after any changes indicates your acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your data, please contact us. We aim to respond to all privacy-related inquiries within 5 business days.