Privacy Policy

What we collect

• Account details — your name, email address, a contact phone number if you signed up as an organization, and your password, which is stored only as a hash.
• Financial data — the accounts, balances, transactions and institution details pulled from the banks you choose to link, plus anything you enter by hand: budgets, categories, rules, envelopes and receipts you upload.
• Payment details — handled by Stripe. We receive the subscription status and the last four digits of a card; we never see or store a full card number.
• Technical data — sign-in times, the devices with an active session, IP address and user agent used for rate limiting and security alerts, and ordinary server logs.

Bank connections

Bank credentials are entered inside Plaid, never with MoneyWheel; we never see your online banking username or password. What Plaid returns is a per-connection token, which is encrypted before it is stored and used only to refresh the accounts and transactions you linked. Plaid’s own handling of your information is described in the Plaid End User Privacy Policy. Disconnecting a bank in MoneyWheel revokes the token at Plaid as well as deleting it here.

Why we use it

To run the service you signed up for: showing your balances and spending, detecting recurring charges, sending the verification codes and the bill reminders and digests you opt into, taking payment for a paid plan, preventing abuse of sign-in and signup, and answering you when you contact support. We do not use your financial data for advertising, and we do not sell personal information.

Who it is shared with

Only the providers needed to run MoneyWheel, each handling data on our instructions: Plaid (bank connections), Stripe (payments), Vercel (hosting and file storage for receipts), Neon (the database, in the United States), Resend (email), Anthropic (reading the receipts you upload, to suggest how to categorize or split them), and Brandfetch and Google’s favicon service (merchant logos, looked up by domain name — no data about you is sent). We also disclose information if the law requires it, or to protect the service and its users from fraud or abuse.

If MoneyWheel is ever sold or merged, your data would transfer with it, and you would be told before that happens.

Household and shared books

When you invite someone into a household, they see exactly what the role they were invited as allows, and only the accounts you chose to share. An account you keep to yourself is invisible to them — no row, no total, no transaction. You can remove a member at any time in Settings, which ends their access immediately.

How it is protected

Data is encrypted in transit, and bank tokens and two-factor secrets are encrypted at rest with AES-256-GCM. Passwords are hashed with scrypt, and only a hash of your session token is stored, so a copy of the database does not hand over live sessions. Sessions expire after 45 minutes idle, or seven days on a device you mark as trusted. You can turn on two-factor authentication, and see and sign out individual devices, in Settings.

How long it is kept

Your data is kept while your account exists. Deleting your account from Settings removes it — bank connections are revoked at the provider, uploaded receipts are deleted, and your transactions, budgets and sessions go with the account. Deletion is immediate and cannot be undone, though data may persist briefly in encrypted database backups until they age out. We keep an anonymous record of the closure — the plan, how long the account lasted, and how many transactions it held — which contains nothing that identifies you. Payment records are retained by Stripe for as long as financial regulation requires.

Your choices and rights

You can see and correct your details, export your transactions, turn off reminders and digests, and delete your account, all from Settings, without asking us. Depending on where you live — including California, and the EU and UK — you may also have the right to request a copy of your personal information, to have it corrected or deleted, and to object to certain processing. Write to support@moneywheel.app and we will answer within 30 days. We will not treat you differently for asking.

Children

MoneyWheel is not for children under 13, and we do not knowingly collect their information. A household’s dependent membership is intended for teenagers and is created by an adult in that household. If you believe a child under 13 has an account, write to us and it will be removed.

Changes

If this policy changes in a way that matters, the date at the top changes and, for material changes, you will be told by email before it takes effect.

Contact

MoneyWheel LLC — support@moneywheel.app.