Privacy Policy

We collect the following categories of data:

• Account data — name, email address, date of birth (for onboarding).
• Financial records — assets, policies, fixed deposits, liabilities, and goals you enter into the app. We do not access live bank or brokerage accounts.
• Usage data — pages visited, feature interactions, and error logs, used to improve the Service.
• Payment data — billing is handled entirely by Paddle. We do not store card numbers or full payment details on our servers.
• Device & technical data — browser type, IP address, and operating system, collected automatically for security and diagnostics.

• To provide, operate, and improve the Service.
• To send transactional emails (invites, billing receipts, password resets).
• To send push notifications you have opted in to.
• To detect and prevent fraud or abuse.
• To comply with legal obligations.

We do not sell your personal data to third parties or use it for advertising purposes.

Your data is stored in Google Firebase (Firestore), hosted in secure Google Cloud data centres. We apply industry-standard safeguards including encryption in transit (TLS) and at rest. Access to production data is restricted to authorised personnel.

No system is 100% secure. If you discover a security vulnerability, please contact us at support@welcy.app.

We rely on the following sub-processors:

• Google Firebase — authentication and database.
• Paddle — payment processing and subscription management.
• Resend — transactional email delivery.
• Twelve Data — market price lookups for assets (no personal data shared).
• Firebase App Hosting — hosting and serverless functions.

Each provider operates under its own privacy policy and data processing agreements where applicable.

We use a minimal session cookie to keep you logged in and a preference cookie to remember your dark/light theme choice. We do not use tracking or advertising cookies. A cookie consent banner is shown on first visit; you may withdraw consent by clearing your cookies.

If you use the Family plan, items you explicitly mark as shared are visible to the family members you grant access to. You control sharing permissions per item. Family owners can see member email addresses and names.

We retain your personal data for as long as your account is active. When you delete your account via Settings, your data — including all assets, policies, fixed deposits, liabilities, and financial records — is permanently and immediately deleted from our databases. Anonymised aggregate statistics may be retained indefinitely.

Depending on your jurisdiction you may have the right to access, correct, export, or delete your personal data. You can export your data from within the app and delete your account via Settings. For other requests contact us at support@welcy.app.

The Service is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us and we will delete it.

We may update this Privacy Policy periodically. We will notify you of material changes via email or an in-app banner. Continued use after the effective date constitutes acceptance.

For privacy-related enquiries: support@welcy.app.