Who controls your data
The controller of personal data processed by Wealth Watcher is Hynek Bocan, Jezernice 255, 751 31 Lipník nad Bečvou, Czechia. Privacy requests can be sent to hynek@bhive.cz.
Data we process
We process your email address and account identifier; the assets, liabilities, values, dates, currencies, and notes you enter; subscription entitlement status; and AI request usage. We do not sell personal data or use it for advertising.
Why and where it is processed
Account and portfolio data are processed to provide, secure, support, and improve the service and to manage subscriptions. Google Firebase and Google Cloud host authentication, database, and backend functions. RevenueCat processes subscription entitlement data, and Apple processes App Store purchases. When you use an AI feature, the portfolio context shown by that feature is sent through our backend to Google's Gemini API to generate the response.
AI data sharing and your permission
Only after you explicitly allow it and request an AI feature, Wealth Watcher sends data through its Firebase backend to Google Gemini. Depending on the feature, this can include your AI prompt and recent AI conversation; portfolio totals; entry names, types, categories, current values, currencies and rates; and, for a value estimate, the acquisition date and relevant extra entry details. We do not automatically include your account email or ID, saved notes, or free-text detail fields. Extra valuation details are limited to numeric quantities, amounts, rates, sizes, weights, years, and mileage. Entry names and chat messages are shared as typed; avoid personal identifiers in them. Google processes the data to generate the requested insight, answer or estimate and may retain inputs and outputs for a limited period for abuse prevention and legal obligations. Google is required to provide the same or equivalent protection described in this policy and processes this data under its applicable data-processing terms and security safeguards. Refusing permission does not affect non-AI features. Withdraw permission at any time in Dashboard menu → Legal → AI data sharing; future AI transfers then stop. Spreadsheet import, where available, requires additional permission to send the displayed cell text, sheet names and your clarifications to Gemini. Remove unrelated sheets and personal identifiers first. The original file is read on your device, not uploaded. Normalized import drafts and completion receipts are stored in your account; drafts can be confirmed for one hour. Expiry does not delete the draft. Account deletion removes these records.
Apple and Google sign-in
If you choose Apple or Google sign-in, that provider and Firebase process the account identifier, name, email address, and technical data needed to sign you in. The Google Sign-In SDK manifest also declares phone number, coarse location, device identifier, usage data, and other data for app functionality and analytics; Wealth Watcher does not request iOS phone or location permission. Apple may provide a private relay email address. We use this data only to authenticate and operate your account.
Limited product analytics
PostHog Cloud EU processes anonymous usage data so we can understand product use, diagnose errors, and improve Wealth Watcher. The website records cookieless page views and selected link actions. The app may record an anonymous installation identifier, screens viewed, app lifecycle and allowlisted feature events, technical device and app attributes, and redacted error details. We do not send portfolio values, entry names or notes, email addresses, account identifiers, AI prompts, or AI responses. Advertising, cross-site tracking, person profiles, and session recordings are disabled. Events are retained for no more than 12 months.
Retention and deletion
App data is kept while your account exists. You can permanently delete the account and associated app data inside the app; this also deletes the associated RevenueCat customer record. Deletion does not cancel your subscription or Apple's purchase records; cancel the subscription separately in the App Store. Infrastructure backups may persist for the limited rotation periods operated by our service providers.
Your choices and rights
You can export portfolio data from the app. Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing, and may complain to your local data-protection authority. Contact us to exercise these rights.
Security and children
We use authenticated access controls, provider-managed encryption in transit and at rest, and an optional local PIN or biometric lock. No service can guarantee absolute security. Wealth Watcher is not directed to children.