Privacy Policy
Last updated: February 2, 2026
At Wealthi AI, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal and financial information when you use our personal finance management application.
Data We Collect
Account Information
- Email address
- Name (optional)
- Password (securely hashed)
- Authentication preferences
Financial Data from Connected Services
When you connect your accounts, we receive:
From Plaid (US/CA/EU Banks)
- Account names and types
- Account balances
- Transaction history
- Merchant information
From Bank Statements You Upload
- The PDF statement file
- Account and statement details
- Transaction history
- Balance information
Statements are read by Google's Gemini AI model to extract transactions.
From SnapTrade (Brokerages)
- Brokerage accounts
- Holdings and positions
- Trade history
- Account balances
How We Use Your Data
Your data is used exclusively to provide you with:
- Personal financial insights and recommendations
- Spending analysis and budgeting tools
- Net worth tracking and visualization
- AI-powered financial assistant
- Subscription detection and management
- Credit card recommendations based on your spending
Our Privacy Promise
We will never sell, share, or monetize your personal financial data. Your data is processed solely to provide you with insights and recommendations. No third-party analytics, no advertisers, no data brokers—ever.
Data Security
We implement industry-standard security measures:
- Encryption at Rest: AES-256-GCM encryption for sensitive identifiers and credentials
- Encryption in Transit: TLS 1.2+ for all data transfers
- Multi-Factor Authentication: TOTP and email OTP for financial operations
- Secure Storage: Encrypted database connections (SSL required)
- Access Controls: Session-based authentication with user data isolation
Data Retention
| Data Type | Retention Period |
|---|---|
| Account & profile data | Until you delete your account |
| US/EU bank transactions (Plaid) | Until you delete your account |
| Transactions from uploaded statements | Until you delete your account |
| UAE transactions imported through a direct UAE bank connection (not currently offered) | 5 years (AML regulatory requirement) |
| Brokerage data (SnapTrade) | Until you delete your account |
| Audit logs | 7 years |
For UAE users: transactions imported through a direct UAE bank connection, which is not currently offered, are retained for 5 years after account deletion to comply with UAE Anti-Money Laundering regulations. Direct UAE bank connections are not currently offered; UAE bank data currently comes from statements you upload. This data is anonymized (personal identifiers are removed). Learn more about UAE data handling
Your Rights
You have the right to:
- Access: View all data we hold about you
- Export: Download your data in JSON or CSV format
- Rectify: Correct any inaccurate information
- Delete: Request deletion of your account and data
- Disconnect: Remove connected bank or brokerage accounts at any time
- Withdraw consent: Revoke any consent you have given
Third-Party Services
We use the following third-party services to connect your accounts:
- Plaid: For US, Canadian, and European bank connections
- Google Gemini: To read bank statements you upload and extract transactions
- SnapTrade: For brokerage connections
These services handle authentication with your financial institutions. We never receive or store your banking credentials.
Contact Us
If you have questions about this Privacy Policy or want to exercise your data rights, please contact us at [email protected]