1. Introduction
NetWorth Tracker ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial management service.
Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
2. Information We Collect
2.1 Personal Information
When you register for an account, we collect:
- Google Account Information: Name, email address, profile picture (via Google OAuth)
- PIN: Encrypted PIN for account security
- Referral Code: If you sign up using a referral link
2.2 Financial Data
You voluntarily provide the following financial information:
- Asset and liability account details
- Investment portfolio information (stocks, crypto, gold, silver, etc.)
- Bank account balances and transaction data
- Daily income and expense transactions
- Transaction categories and notes
- Country and currency preferences
2.3 Health Data (Pro Plan Only)
If you subscribe to Pro, you may provide:
- Health metrics and measurements
- Medication information
- Wellness tracking data
- Health-related notes
2.4 Automatically Collected Information
- Device information (browser type, operating system)
- IP address
- Usage data (pages visited, features used, time spent)
- Session information
3. How We Use Your Information
We use the collected information for:
- Service Provision: To provide and maintain the Service, including calculating net worth, tracking investments, and generating reports
- Account Management: To create and manage your account, process subscriptions, and handle referrals
- Data Analysis: To calculate portfolio performance, track expenses, and provide financial insights
- Price Updates: To fetch real-time prices for stocks, cryptocurrencies, gold, silver, and other assets
- Communication: To send you service-related notifications, updates, and security alerts
- Security: To protect against unauthorized access and verify your identity
- Improvement: To analyze usage patterns and improve the Service
- Legal Compliance: To comply with legal obligations
4. Data Storage and Security
4.1 Data Storage
Your data is stored in secure databases with the following protections:
- Encrypted connections (HTTPS/TLS)
- Encrypted PIN storage using bcrypt
- Regular security audits
- Access controls and authentication
4.2 Data Retention
We retain your data for as long as your account is active or as needed to provide services. You may request account deletion at any time, and your data will be permanently deleted within 30 days.
4.3 Security Measures
While we implement industry-standard security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to protect your data.
5. Data Sharing and Disclosure
5.1 We Do Not Sell Your Data
We do not sell, rent, or trade your personal or financial information to third parties.
5.2 Service Providers (Data Processors)
We use the following third-party service providers (data processors) who process data on our behalf:
- Google OAuth: Authentication and identity verification. Google Privacy Policy
- Render Services, Inc.: Cloud infrastructure, hosting, and database storage. Your data is stored on Render's servers located in the United States. Render acts as a data processor under a Data Processing Addendum (DPA) that incorporates EU Standard Contractual Clauses. Render DPA | Render Privacy Policy
- Financial Data Providers: Real-time price data (CoinGecko, etc.). Only non-personal data such as ticker symbols is shared.
5.3 Legal Requirements
We may disclose your information if required by law, court order, or government regulation.
6. Third-Party APIs and Services
The Service integrates with third-party APIs to provide functionality:
- CoinGecko: For cryptocurrency prices
- Yahoo Finance: For stock prices
- Gold/Silver Price APIs: For precious metal prices
- Currency Exchange APIs: For currency conversion
These services have their own privacy policies. We only share the minimum data necessary (e.g., ticker symbols) and do not share your personal information.
7. Your Rights and Choices
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate data
- Deletion: Request deletion of your account and data
- Export: Download your data in a portable format
- Opt-Out: Unsubscribe from non-essential communications
To exercise these rights, please contact us through the Service settings or support.
8. Cookies and Tracking
We use essential cookies and local storage to:
- Keep you logged in
- Remember your preferences (theme, currency)
- Maintain session security
We do not use third-party advertising or tracking cookies.
9. Children's Privacy
The Service is not intended for users under the age of 18. We do not knowingly collect data from children. If you become aware that a child has provided us with personal information, please contact us.
10. International Data Transfers
Your data is stored and processed in the United States via our hosting provider, Render Services, Inc. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, this constitutes a transfer of personal data outside your jurisdiction.
We ensure appropriate safeguards are in place for these transfers. Render participates in the EU-U.S. Data Privacy Framework and has executed Standard Contractual Clauses (SCCs) as required under GDPR. You can review Render's Data Processing Addendum at render.com/dpa.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last updated" date
- Sending you an email notification (for significant changes)
Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.
12. GDPR Compliance (EU Users)
If you are located in the European Economic Area (EEA), you have additional rights under GDPR:
- Right to data portability
- Right to restrict processing
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
13. CCPA Compliance (California Users)
If you are a California resident, you have additional rights under CCPA including:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information (we do not sell data)
- Right to non-discrimination for exercising CCPA rights
14. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
- Through the Service settings
- Via the contact form in the application
- By email at the address provided in the Service
15. Data Breach Notification
In the event of a data breach that affects your personal information, we will notify you within 72 hours and provide information about the breach, affected data, and steps being taken to address the issue.