Privacy Policy

1. About WealthPulse

WealthPulse ("we", "our", "the app") is a personal finance tracker that helps you monitor investments, track expenses, manage goals, and get AI-powered financial insights. This Privacy Policy explains how we handle your information when you use our app.

By using WealthPulse, you agree to the practices described in this policy.

2. Data We Collect

We collect only the data you choose to enter into the app:

• Investments, current values, and portfolio history
• Expenses and spending categories
• Incomes and recurring income sources
• Monthly budgets and budget usage
• Insurance policies and premium schedules
• Financial goals and progress
• Loan and liability details
• Reminders and notification preferences
• App preferences (theme, display currency, privacy mask, language, sync mode)

When you sign in with Google, we also receive your display name and email address. These are used solely to identify your account — we do not access your Gmail, contacts, or any other Google data.

3. How We Store Your Data

Your data is always written first to a local, AES-256 encrypted database on your device. The encryption key is stored in iOS Keychain / Android Keystore and never leaves your device. Before you sign in, the app works entirely from this local copy.

After you sign in with Google, you choose where a second copy is synced. There are two user-selectable sync modes:

• Google Sheet mode — your financial data (investments, goals, expenses, incomes, budgets, insurances, loans and other liabilities) is written to a Google Spreadsheet in your own Google Drive. We do not keep a copy of your financial data on our servers in this mode.
• Cloud Server mode — all of your data (financial plus preferences) is written to our Supabase backend over TLS 1.3. Row-Level Security ensures only your signed-in account can read your rows.

Regardless of which sync mode you pick, a small amount of metadata is always stored on our Supabase backend so your settings follow you across devices. This metadata is limited to: app preferences (theme, display currency, privacy mask, language), reminder/notification schedules, badge counters, consent flags for the optional voice feature, and your sync-mode choice itself. No financial figures are written to Supabase in Google Sheet mode.

You pick your sync mode during first-time setup from Settings → Enable Cloud Sync. If you later want to move from Google Sheet to Cloud Server, tap Settings → Switch to Cloud. This migration is one-way: we copy your financial data from the Sheet into Supabase and then stop writing to the Sheet. The original spreadsheet stays in your Google Drive as a read-only snapshot — we do not delete it. Moving from Cloud Server back to Google Sheet is not currently supported.

Your sync-mode choice is tied to your account, not your device, so signing in on a new device resumes in the same mode you were using before.

4. Voice AI Feature (Pulse)

The Pulse voice assistant is entirely optional. It only activates after your explicit consent.

When you use Pulse:

• Your voice is streamed in real-time to Google's Gemini AI via an encrypted WebSocket connection through our relay server.
• A live snapshot of your portfolio numbers (total net worth, asset values, liabilities) is sent as context so the AI can give personalised advice.
• This data is not stored by us after the session ends.
• Conversations may be processed by Google under Google's Privacy Policy.

You can withdraw consent at any time. Once withdrawn, no voice or portfolio data is sent to any server.

5. Third-Party Services

WealthPulse uses the following third-party services:

• Google Sign-In — Authentication only
• Google Sheets API — For Google Sheet sync mode
• Supabase — Hosts your data in Cloud Server sync mode, and always hosts the small account-level metadata row (app preferences, reminders, consent flags, sync-mode choice) described in §3 (Supabase Privacy Policy)
• Google Gemini AI — For the Pulse voice assistant (optional, consent required)
• Firebase Crashlytics — Anonymous crash reports to help us fix bugs
• Firebase Analytics — Anonymous usage events (e.g. "app opened")

We do not sell your data to any third party. We do not show ads. We do not use your financial data for any purpose other than making the app work for you.

6. Crash Reports & Analytics

Firebase Crashlytics collects anonymous crash reports — these contain device model, OS version, and stack traces. They do not contain your name, email, or any financial data.

Firebase Analytics collects anonymous usage events such as "app opened". No financial data is ever included in analytics events.

7. Security Measures

• AES-256 encryption for all on-device databases (Hive)
• Encryption keys stored in OS-level secure storage (Keychain / Keystore)
• TLS encryption for all network communication
• Row Level Security in Supabase
• Code obfuscation in all release builds
• Android automatic backup disabled (data cannot be extracted via ADB)

8. Data Retention & Deletion

You can delete all your data at any time:

• Local data — Sign out and clear app data in your device Settings → Apps → WealthPulse → Clear Data.
• Cloud Server data — Email us at support.wealthpulse@gmail.com to request permanent deletion of your Supabase records (both financial rows and the small metadata row described in §3).
• Google Sheet data — Delete the WealthPulse spreadsheet directly from your Google Drive.
• After switching from Google Sheet to Cloud Server — the original spreadsheet remains in your Google Drive as a static snapshot until you delete it. The app no longer reads from or writes to it.

For step-by-step instructions, see our Account & Data Deletion page.

9. Children's Privacy

WealthPulse is not intended for anyone under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us and we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the "Last updated" date at the top will change. For significant changes, we will notify you within the app. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, want to request data deletion, or want to report a privacy concern, please contact us:

📧 support.wealthpulse@gmail.com