How worthi handles your information.

Account information, such as your email address, name if provided, authentication provider details, and sign-in session information.

Financial records you choose to enter, including accounts, assets, holdings, transactions, recurring rules, categories, currencies, settings, and financial history.

Billing and purchase status, including Stripe customer, checkout, subscription, product, and price identifiers for web purchases, and RevenueCat purchase status for mobile access.

Support information, including the name, email address, and message you submit through the support form.

Technical and usage information, such as basic request metadata, diagnostics, analytics events, and cookie or similar technology data from the website.

Provide, secure, and maintain your worthi account, dashboard, web app, and mobile app.

Save the manual financial records you enter and calculate dashboard views, totals, recurring cash flow, holdings, asset history, and currency conversions.

Authenticate sign-ins, send one-time sign-in emails, verify Apple sign-in, and manage mobile refresh sessions.

Process access and billing status through Stripe, RevenueCat, Apple, and related payment infrastructure.

Respond to support requests, prevent misuse, debug issues, understand product usage, and improve the service.

worthi is manual-first. We do not ask for your bank, brokerage, or card login credentials.

You decide what financial records to enter. Public market and FX lookups may use ticker symbols, exchange names, dates, and currency codes, but not your bank credentials.

Card payment details are handled by Stripe or Apple payment infrastructure. worthi does not store full card numbers.

worthi uses HTTPS in transit and application-level encryption for sensitive finance fields before ordinary database storage.

Sensitive finance fields are protected with AES-256-GCM and per-user data keys. Encrypted values include authenticated metadata tied to the user, record type, field, and encryption version.

No service can be guaranteed perfectly secure, but we use safeguards intended to reduce unauthorized access, disclosure, alteration, or loss.

We use service providers to operate worthi, including hosting, database, email delivery, analytics, payments, purchase validation, authentication, market data, and FX rate providers.

Current examples include Stripe for web checkout, RevenueCat for mobile purchase validation, Apple for Sign in with Apple and App Store purchases, Resend for sign-in email delivery, Google Analytics for website measurement, and public market or FX data providers.

These providers may process information for us under their own terms and privacy commitments.

We do not sell your personal information.

We do not use your manually entered financial records for third-party advertising.

We may share information with service providers, when you direct us to, to protect worthi and users, or when required by law.

We keep account and financial records while your account is active or as needed to provide the service.

Support requests, billing records, logs, backups, and security records may be retained as needed for support, accounting, fraud prevention, compliance, and business continuity.

You can request access, correction, export, or deletion of your information by contacting support.

You can choose what financial records to enter, edit, or remove in the app.

You can avoid entering optional fields, use Apple private relay email where available, and contact support for account or data requests.

Browser controls may let you limit cookies or similar technologies, though some site features may depend on them.

worthi is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We may update this policy as worthi changes. When we do, we will update the date on this page.