Privacy policy

Walleet is a personal net-worth tracker available at https://walleet.app. This policy explains what personal data we collect, why we hold it, who we share it with, and what you can ask us to do with it.

Walleet does not connect to your bank. Every balance in the app is one you entered yourself.

The data controller is IE Ilia Linnik, Nucubidze 53, 0177 Tbilisi, Georgia. You can reach us at hello@walleet.app about anything in this policy, including any request to exercise the rights described below.

What we collect

Your account. Your email address, a hashed password, the date you registered, your main currency and your language. You provide these when you create an account.

The financial data you record. The accounts you create — their names, currencies and the institution you assign them to — and the balances you enter against them, with their dates. This is the substance of the service. We hold no financial data about you that you did not type in.

Subscription data. If you subscribe to a paid plan, our payment provider handles the payment and tells us your subscription status, plan and renewal date. Your card details go to the payment provider, never to us: we do not see or store them.

Technical data. Standard server request logs — IP address, browser type, referring page and timestamps — and the analytics described under Cookies below. Request logs are used to operate and secure the service, not to build a profile of you.

Why we use it

To run the service: your account, and the balances you record. This is necessary to perform our contract with you.
To take payment and manage your subscription. Also necessary to perform our contract.
To send transactional email — confirming registration, resetting a password. Also necessary to perform our contract.
To keep the service available and secure, including request logs. This is our legitimate interest in operating a secure service.
To understand how the site is used, through analytics.

We do not sell your data. Walleet carries no advertising, has no advertising partners, and we do not use your data to target ads.

Cookies

Walleet sets the following cookies of its own:

walleet_session — keeps you signed in. It is set when you log in, and outlives the browser session only if you tick "Remember me".
i18n_selected — remembers the language you chose.
selected-period — remembers the date range you last viewed.

We also use Google Analytics 4 to understand how the site is used. It loads on every visit and sets its own cookies, which begin with _ga. You can opt out through Google's browser add-on, and you can block or delete cookies through your browser settings — though blocking walleet_session will stop you being able to sign in.

Who else processes your data

Dodo Payments — payment and subscription processing.
UniSender Go — delivery of transactional email, with servers in Russia.
Google Analytics — website analytics.
Timeweb.cloud — hosting of the application and its database, in the Netherlands.

Each acts on our instructions or as an independent controller for its own service. The application and its database are hosted inside the European Economic Area. Some of the other providers listed above process data outside the European Economic Area, so data shared with them is transferred out of it; those transfers rely on TRANSFER MECHANISM — e.g. EU Standard Contractual Clauses.

How long we keep it

We keep your account and the balances you record for as long as your account exists, subject to the two rules below. Request logs are kept for RETENTION PERIOD. We may keep records of payments for as long as tax and accounting law requires.

If you delete your account. Deleting your account starts a 30-day grace period, during which you can sign in and cancel it. After those 30 days your account, your financial accounts and every balance you recorded are permanently deleted.

If you stop using Walleet. We close accounts that are not being used: an account whose email address was never confirmed and which has not been used for 14 days, and any account that has not been used for 180 days. We write to you first, at least 14 days before the account is closed, and signing in during that time keeps it. Closing it starts the same 30-day grace period as above, so nothing is deleted until 30 days after that. Accounts with an active subscription are not closed for inactivity.

Your rights

If you are in the UK or the European Economic Area you have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to receive a copy of it in a portable form, to object to or restrict how we use it, and to withdraw any consent you have given.

To exercise any of these, email hello@walleet.app. We will respond within one month. If you are not satisfied with our response, you may complain to your national data protection authority.

Children

Walleet is not intended for children and we do not knowingly collect personal data from anyone under 16, or under the minimum age set by your country's law where that is lower. If you believe a child has given us their data, contact us at hello@walleet.app and we will delete it.