Privacy Policy

01Who we are

WealthR is a personal finance tracking application built and operated by WealthR Ltd — a company registered in Scotland (company number SC900929), whose registered office is at 5 South Charlotte Street, Edinburgh, EH2 4AN. WealthR Ltd is registered with the Information Commissioner's Office as a data controller, registration number ZC243084. WealthR Ltd is the data controller for all personal data processed through WealthR.

For the purposes of UK GDPR, WealthR Ltd is responsible for ensuring your personal data is handled lawfully, fairly and transparently.

You can reach us any time at privacy@wealthr.co.uk for privacy questions, data subject requests, or anything else covered by this policy. General support stays at support@wealthr.co.uk.

ADVAdvisers, firms & client portals — our role as a processor

Most of WealthR is a service we provide directly to you, where WealthR Ltd is the data controller — that's everything else on this page. The Adviser Workspace works differently. Where a financial adviser or firm uses WealthR to manage their own clients — entering figures, keeping notes, sharing a branded client portal, and exchanging messages and documents — the adviser firm is the data controller for that client information, and WealthR acts as their data processor, handling it only on the firm's documented instructions.

If you are a client of a firm that uses WealthR, your firm decides what information to hold about you and why. For questions about your data, or to exercise your rights, please contact your adviser firm in the first instance — they are the controller. We will support them in responding to you.

What we process on a firm's behalf can include: the client's name and contact details; the financial figures, fact-find and planning information the adviser enters; messages exchanged through the portal; documents the adviser or client upload to the secure document area; and a portal access PIN. We process this only to operate the service for the firm — never for our own purposes, never to advise the client, never for advertising, and never to train AI models.

How it's protected. Client data sits in the same EU-hosted Supabase infrastructure as the rest of WealthR, isolated per firm by database Row Level Security. Portal links require a per-client PIN (not derived from the client's data) with an automatic lockout after repeated wrong attempts. Documents are held in a private store reached only through short-lived, signed links — never a public URL — and can be set to auto-delete on a retention schedule, with an audit trail of every removal. Branded emails to a firm's clients are sent through our email provider (Resend) and carry only a name, a short message and a secure link — never financial figures.

The relationship between WealthR and each adviser firm — including our processor commitments, the sub-processors we use, security measures, breach notification, and what happens to data when a firm leaves — is governed by a separate Data Processing Agreement entered into with the firm. Firms can request a copy from partners@wealthr.co.uk.

02What data we collect

We collect the minimum data necessary to provide the service:

• Account data — your email address and a hashed password, or a Google OAuth token if you sign in with Google. We never see your raw password.
• Financial tracking data — the investment values, property figures, debt balances, asset values and monthly entries you choose to log. This data is stored against your account so it syncs across devices.
• Profile data — your name, date of birth (month and year only), target retirement age, monthly contribution and expected growth rate. These power your forecasts and are never shared.
• Tax calculator inputs — if you use the Tax tab, your gross salary, region, pension contribution percentages, student loan plan and any optional flags you set (e.g. children, marriage allowance) are saved to your profile so they pre-fill next time. This data is stored as part of your account, is not shared with anyone unless you include the Tax section in a share link you create, and can be deleted by clearing your profile or closing your account.
• Tax records you add — if you use Payslips on the Tax tab or prepare an accountant’s pack, the figures you enter from payslips, P60s and statements (pay, tax deducted, pensions received, interest, dividends, gains, reliefs), your tax code, and your answers to the pack’s questions. They are saved to your account so you can come back to them. They are never included in a share link.
• Company dividend records — if you record dividends from your own limited company: the company’s name, company number and registered office (already public at Companies House), the names of its directors and shareholders and how many shares each holds, and the date and amount of each dividend. We do not ask for anyone’s home address, date of birth, National Insurance number or tax reference. These records are never included in a share link.
• Subscription and billing data — if you subscribe to WealthR Pro, our payment processor Stripe collects and processes your card details, billing address and country for the transaction. We never see your full card number. Stripe returns us only a customer ID, a subscription status (active, trialing, past_due, canceled), the plan you're on and the renewal date. This is the data we use to unlock Pro features.
• Usage data — basic technical logs (errors, performance) to keep the app running. We do not use analytics platforms that track individual behaviour across sessions.
• Abuse-prevention signal — when you create an account, sign in or start a trial, we store a one-way cryptographic hash of your IP address — never the IP address itself. We use it solely to detect and prevent fraudulent or abusive account activity (for example, multiple accounts created to abuse free trials). The hash cannot be reversed back to your IP address, and it is automatically deleted after 180 days.
• Marketing email address — if you choose to join our product update list or Pro waitlist, we store the email address you provide. This is separate from your account email and is only used for the purpose you consented to. You can withdraw consent at any time by emailing support@wealthr.co.uk.
• 0% Balance Transfer Tracker (discontinued) — the tracker and its optional email reminders were discontinued on 11 September 2026. We no longer collect data for them, and the records held for reminder subscribers have been deleted.
• Adviser share tokens — if you generate a read-only share link, we store a randomly generated token linked to your account. Anyone with this token can view (but not edit) your dashboard. You can revoke this token at any time from Settings.

03Legal basis for processing (UK GDPR)

Under UK GDPR, we are required to identify a lawful basis for processing your personal data. We rely on the following:

04How we use your data

Your data is used exclusively to:

• Provide and sync your WealthR account across devices
• Generate your net worth calculations, forecasts, charts and insights within the app
• Send transactional emails (password reset, account confirmation, trial-ending reminder, payment failure notices, receipts) — no marketing without explicit consent
• Send product update or Pro launch emails — only where you have explicitly opted in via a consent checkbox
• Process Pro subscription payments and manage your subscription lifecycle (start trial, upgrade, downgrade, cancel, resume) via Stripe
• Power the adviser share link feature — if you generate a share link, the recipient can view your dashboard in read-only mode using a randomly generated token. We never proactively share your data; this is always user-initiated
• Fetch live cryptocurrency prices from CoinGecko — your device makes a direct request to CoinGecko's public API using a coin identifier (e.g. "bitcoin"). No personal data is sent to CoinGecko
• Fetch share and ETF prices from Yahoo Finance — our server asks for the price of a ticker symbol you have added (e.g. "VWRL.L") and caches the answer. Only the symbol is sent; no personal data goes to Yahoo
• Diagnose errors and improve the reliability of the service
• Produce anonymised, aggregated statistics about how WealthR is used and, in aggregate, the kinds of things people track — never figures about any individual. See Anonymised statistics below for the minimum group size we apply
• Maintain our customer relationship records — who you are, your subscription status, and our correspondence with you — so we can respond to support requests properly. These records never include your financial tracking data
• Operate the service efficiently using AI-assisted tooling (see Anthropic below) — for example helping us draft replies to emails you send us. A human reviews every reply before it is sent, and no automated decisions are made about you

We do not use your data for advertising, profiling, automated decision-making, or sale to third parties — under any circumstances.

STATSAnonymised statistics

We produce aggregated statistics from data WealthR already holds — partly to understand which parts of the app people actually use, and partly to see, in aggregate, the kinds of things people track. Two rules govern all of it.

• No figure is ever produced for a group of fewer than 20 people. If only a handful of accounts track a particular kind of holding, or fall in a particular age range, no representative figure is calculated for that group at all — a figure describing three people is a statement about those three people. Where a group is too small the statistic is withheld, not rounded or estimated.
• Nothing identifies an individual. The output is counts and representative (median) figures for groups — never a row, a name, an email address or an account. There is no way to work backwards from these statistics to any one person’s finances.

What it covers. Which tabs are opened and for how long; how many accounts track each kind of holding (pensions, property, ISAs, debts and so on) and the representative amount for that group; broad age ranges; and broad bands for total tracked wealth.

Who sees it. These statistics are internal to WealthR Ltd, and the functions that produce them are restricted to the account owner. If we ever publish any of them — in a report, an article, or on this site — the same minimum of 20 applies, unchanged. We will not publish a statistic about a smaller group in any form.

Test and staff accounts are excluded from every figure, so the statistics describe real use only.

This processing relies on our legitimate interests in understanding and improving the service, together with the UK GDPR’s provisions for statistical purposes (Article 89). It does not involve profiling you, and no decision about you is made on the basis of it. Your rights in section 08 are unaffected — though note that once a statistic has been aggregated to this standard it no longer contains personal data, so it cannot be traced back to you and removed individually.

OTHERSInformation about other people

Some features let you record details about someone else: your partner, if you plan as a household, and your company’s directors and shareholders if you record its dividends. Please add only what the feature asks for, and only for people you are entitled to share it about.

We keep these details to provide the feature you use them in (for example, to lay out a dividend voucher for each shareholder). We do not contact these people, market to them or use their details for anything else. Our lawful basis is legitimate interests: helping you keep the records you and they need for tax and company purposes, using the minimum information.

Anyone whose details you have added can ask us what we hold about them, or ask us to delete it, using the contact details below. Deleting your account deletes these details too.

FILESDocuments you download

Reports, packs, vouchers and minutes you download from WealthR (PDFs and spreadsheets) are made on your own device from your data. We do not upload or keep the files. Once downloaded, a file is yours to look after. It can contain your financial details, so keep it somewhere private and send it securely, for example through your accountant’s client portal rather than as an ordinary email attachment.

05Who we share data with

We use a small number of trusted infrastructure providers. No one else has access to your data.

Share links show only the sections you choose. Tax records, accountant’s pack answers and company dividend records are never included in a share link, whichever sections you choose. A link also leaves out your fact-find and adviser notes, includes dates of birth only with sections that need ages, and shows children’s names only if you share your Profile.

We do not use Google Analytics, Meta Pixel, or any advertising or behavioural tracking networks.

Affiliate links. Some links on WealthR may be affiliate links. Following one does not share your personal data with the merchant beyond the standard click referral, and affiliate activity never affects what we recommend. How we label and handle these is set out in our Terms and, in full, our Affiliate Disclosure.

06International data transfers

Your account and financial data is stored on Supabase infrastructure hosted in the European Union.

Some of our processors (notably Stripe, Render, Cloudflare, Resend, Anthropic and Yahoo Finance) are based in the United States and may process limited data there. Where personal data is transferred outside the UK, we rely on one of the following safeguards as required by UK GDPR:

• The UK's adequacy decision for the EU / EEA, where applicable
• The UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses
• Processors' participation in the UK–US Data Bridge extension to the EU–US Data Privacy Framework, where available

We keep transfers to the minimum necessary, and in all cases your financial tracking data stays on EU-hosted Supabase infrastructure.

07Data retention

Your data is retained for as long as your account is active. You can permanently delete your account at any time from Settings → Delete account inside the app. This immediately and permanently deletes all your financial data, profile information and activity history. This action cannot be undone.

If you subscribe to Pro and then cancel, your subscription record is marked cancelled but your account and data remain intact — you can resume at any time. If you delete your account, we also cancel any active Stripe subscription, and remove your customer record from our own database. We do not keep customer records in any third-party CRM.

We may retain billing records (invoice number, amount, tax, plan, date) for up to 6 years after the last transaction to meet UK tax and accounting obligations (HMRC). These records do not contain your card number.

We may retain anonymised, aggregated data (e.g. total number of active users) that cannot be linked to any individual.

Collector's Vault photos (Pro): encrypted photos you add to the Collector's Vault are retained while your Pro subscription is active. If a Free account with stored photos stays inactive for four months, we send a short series of reminder emails and then, after a further 30 days, remove the stored images — logging in or upgrading stops this at any time, and your item names and values are always kept. See the Collector's Vault photos section below for the full detail.

08Your rights under UK GDPR

You have the following rights in relation to your personal data. Most can be exercised directly within the app — for others, email privacy@wealthr.co.uk.

We will respond to all rights requests within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.

09Cookies

WealthR uses a single session cookie to keep you signed in, plus a short-lived cookie set by Stripe on the checkout page to enable secure payment processing and fraud prevention. We do not use tracking cookies, advertising cookies, or any third-party cookies for analytics or profiling.

No cookie consent banner is required because we use only strictly necessary cookies as defined under UK PECR.

10Security

We implement appropriate technical and organisational measures to protect your personal data:

Customer financial data is private by default. WealthR staff and AI systems may access your data only where necessary for a defined operational purpose, such as resolving a support issue you have raised. Access is limited to the minimum data required, identifying information is separated or pseudonymised wherever it is not required, and every privileged access is authorised, time-limited and logged. The full principle and how it is enforced is on the security page.

• All data is transmitted over HTTPS / TLS
• Passwords are hashed using industry-standard bcrypt — never stored in plain text
• Your financial data is stored with Row Level Security (RLS) enforced at the database level — each user can only ever access their own data, even at the query level
• Card payments are handled entirely by Stripe (PCI DSS Level 1 certified). We never store, log or process card numbers
• No financial institution credentials are ever requested or stored
• Photos in the Collector's Vault (Pro) are end-to-end encrypted on your device before upload — WealthR stores only ciphertext it cannot read (see the Collector's Vault photos section)

VAULTCollector's Vault photos

If you use the Collector's Vault (a WealthR Pro feature) to add photos of your items, those photos are encrypted on your own device before they are uploaded. WealthR stores only the encrypted result — we cannot see, open, index or recover your photos, and neither can anyone else without the keys that stay on your devices.

• What we store: the encrypted photo data, held in a private, access-controlled store hosted in the European Union (Paris), plus small technical items needed to encrypt and decrypt on your device (encrypted key "wrappers", random salts) — none of which can reveal your photos on their own.
• What we remove before upload: we strip location data and other hidden metadata (including GPS/EXIF) from every photo on your device, so your whereabouts are never uploaded.
• Your keys: your photos are locked with a passphrase you choose, and can also be unlocked with your device's fingerprint or face (passkey) or a one-time recovery key we show you at setup. We do not hold these and cannot reset them. If you lose all of them, your photos cannot be recovered — by you or by us. We make this clear at setup.
• Deleting photos: when you delete a photo (or it is removed under the retention rule below), the encrypted data and its keys are permanently destroyed. Because only you hold the keys, once it is gone it cannot be recovered.

How long we keep them. Your photos stay while your Pro subscription is active. If your account moves to Free, your photos are kept but hidden until you upgrade again. If a Free account with stored photos is inactive for four months, we will email you a few times and then, after a further 30 days, remove the stored images to free up space — you can stop this at any point by simply logging in or upgrading, and your item names and values are always kept either way.

Legal requests: because your vault photos are end-to-end encrypted, if we are ever legally compelled to disclose vault contents, all we are able to provide is the encrypted data, which we cannot decrypt.

11Data breach notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, as required by UK GDPR Article 33.

Where a breach is likely to result in a high risk to you personally, we will also notify you directly without undue delay, including what happened, what data was affected, and what steps we are taking.

12Children

WealthR is a financial tracking tool intended for adults aged 18 and over. We do not knowingly collect or process data from anyone under the age of 18. If you believe a minor has created an account, please email support@wealthr.co.uk and we will delete it promptly.

13Changes to this policy

We may update this policy from time to time to reflect changes in the law, our practices, or the services we offer. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

Continued use of WealthR after changes have been published constitutes your acceptance of the updated policy.

14Contact & data requests

Questions about this policy, how we handle your data, or to exercise any of your rights? The fastest route is email — we respond within 30 days (usually much sooner).

Prefer a form? Use the button below — it opens our contact form and goes to the same inbox.