Privacy Policy

Your financial data: In guest mode, transactions, accounts, balances, budgets, categories and notes are stored only on your device. If you sign in, this data is synced to our servers to enable backup and multi-device access. If you join a shared split group, the expenses you add to that group are visible to its other members.

Account information (only if you sign in):

• Email address
• Display name (and, with Google Sign-In, the name and email from your Google account)
• An account ID that identifies you to our servers

Usage analytics and diagnostics (all users, can be turned off): We use PostHog, hosted on our own domain, to understand how the app is used and to fix bugs. This includes:

• Feature usage events (e.g. "transaction added", "budget created") and app open/close events
• Crash and error reports
• A random app-generated identifier and basic device information (model, OS version, app version, language)
• Session replays for a small sample (about 10%) of sessions: a recording of the app's screens with text inputs and headline balances masked. Other on-screen content, such as amounts in transaction lists, may be visible in these recordings
• If you are signed in, analytics are linked to your account ID and the domain of your email address (e.g. "gmail.com"), not the full address

Analytics events never include transaction amounts, notes, payee names or account balances. Session replays are used only to debug and improve the app, are never shared outside our team, and stop entirely when you turn analytics off. You can turn analytics off at any time in Settings → Analytics.

Purchases: If you subscribe to walletOS Pro, payment is processed by Apple (App Store) or Google (Play Store). RevenueCat receives your purchase history and account ID to verify your subscription. We never receive your payment card details.

We never collect:

• Bank login details or financial account credentials
• Location data, contacts, photos or microphone data
• Advertising identifiers (IDFA / AAID)

We use information only to run and improve walletOS. We do not sell, rent, or share your data with advertisers or data brokers, and we do not use it for tracking across other companies' apps or websites.

• Showing your transactions, balances, budgets and reports
• Syncing your data across devices and sharing split-group expenses with group members (signed-in users)
• Authenticating you and protecting your account
• Verifying Pro subscriptions and unlocking Pro features
• Generating AI spending insights for Pro subscribers via our own cloud service
• Understanding which features are used, diagnosing crashes and improving performance (analytics)

On your device: Local data is stored in the app's private storage, protected by your device's screen lock and encryption.

In the cloud (signed-in users): Synced data is stored on servers we operate using Appwrite. Data is encrypted in transit (TLS), and access is restricted to your account (and to members of split groups you join). By signing in you consent to your data being processed on these servers, which may be outside your country.

Retention:

• Guest mode: uninstalling the app or using "Wipe All Data" permanently deletes your local data. Use the export feature to keep a backup.
• Signed-in users: cloud data is kept until you delete it or delete your account.
• Analytics data is retained for up to 12 months and then deleted.

walletOS uses the following services. We do not use any advertising networks or data brokers.

• Appwrite (self-hosted) — Authentication and cloud sync, used only when you sign in.
• PostHog (self-hosted proxy at a.walletos.space) — Product analytics, crash reporting and sampled session replay. Can be disabled in Settings. Governed by the PostHog Privacy Policy.
• RevenueCat — Subscription management for Pro. Governed by the RevenueCat Privacy Policy.
• Google Sign-In — Optional sign-in method. Google shares your name and email with us. Governed by Google's Privacy Policy.
• Apple App Store / Google Play Store — App distribution and in-app purchase payments.

walletOS does not knowingly collect personal information from children under the age of 13. In guest mode, no personal information such as name or email is collected; only anonymous usage analytics, which can be turned off in Settings.

Children under 13 should not create a walletOS account or enable cloud sync without parental consent. If you believe a child under 13 has created an account, please contact us and we will delete the account and associated data promptly.

The app contains no advertising and no public social features. Pro subscriptions are purchased through the App Store or Google Play, both of which support parental controls to restrict in-app purchases.

For more detail on our approach to child safety, please see our Child Safety Standards page.

You have full control over your data at all times, regardless of whether you use guest mode or have an account:

• Right to access: All your data is viewable directly within the app. Signed-in users can also contact us to receive a copy of any personal data we hold.
• Right to deletion: You can delete individual transactions, accounts, or wipe all local data using "Wipe All Data" in Settings. Signed-in users can also delete their cloud account and all associated server-side data from Settings → Delete account.
• Right to portability: Pro subscribers can export their financial data as CSV or PDF at any time from Settings.
• Right to opt out of analytics: Turn off Settings → Analytics at any time.
• Right to withdraw consent: Signed-in users can sign out at any time, reverting the app to guest mode. Your local data is retained; cloud data remains until you delete your account.
• GDPR / CCPA rights: If you are located in the EU, UK, or California, you have additional rights including the right to rectification and the right to object to processing. Contact us to exercise these rights.

For data deletion requests or any privacy concerns, please visit our Data Deletion page.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We will also notify users through an in-app notice for any material changes.

Continued use of walletOS after any changes indicates your acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your data, please contact us. We aim to respond to all privacy-related inquiries within 5 business days.