Privacy Policy
Introduction
WealthMinder ("we", "our", "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share your data when you use our personal finance management platform at wealthminder.co.
This policy complies with the General Data Protection Regulation (GDPR), South Africa's Protection of Personal Information Act (POPIA), Nigeria's Data Protection Regulation (NDPR), and other applicable data protection laws.
Data we collect
| Type | What it includes | When collected |
|---|---|---|
| Account data | Full name, email, phone number, country, currency preference | At registration |
| Financial data | Account balances, transaction descriptions, categories, goal amounts — entered by you manually | When you add data |
| Usage data | IP address, browser type, pages visited, features used | Automatically |
| Authentication data | Encrypted passwords, OAuth tokens (Google), MFA secrets — never in plaintext | At sign-up / sign-in |
How we use your data
- →Provide and improve the WealthMinder service
- →Calculate your Financial Health Score and generate insights
- →Send transactional emails (verification, password reset, weekly digest)
- →Detect and prevent fraud and unauthorised access
- →Comply with legal obligations
- →Generate anonymised, aggregated analytics to improve the product
We do not sell your personal data to third parties. We do not use your financial data for advertising purposes.
Data storage and security
Your data is stored on Supabase (PostgreSQL), hosted on AWS infrastructure. All data is encrypted at rest using AES-256 and in transit using TLS 1.3. Financial data is stored as integers (no floating point) to ensure accuracy.
We implement industry-standard security including JWT authentication, row-level security (RLS) ensuring users can only access their own data, rate limiting, and multi-factor authentication support.
Data retention
We retain your personal data for as long as your account is active. When you delete your account, your personally identifiable information (name, email, phone) is permanently anonymised within 24 hours. Transaction and financial records are retained in anonymised form for 7 years for audit purposes as required by financial regulations. Audit logs are retained for 90 days for security purposes.
Your rights
To exercise any right, go to Settings in your account or contact us at privacy@wealthminder.com
Third-party services
Cookies
We use only essential cookies required for authentication and security. We do not use tracking or advertising cookies.
AI and automated decisions
WealthMinder uses AI (Groq Llama 3.3) to generate personalised financial education recommendations. These recommendations are educational only and do not constitute financial advice. No automated decisions are made that have legal or similarly significant effects on you without human oversight.
Your financial data is sent to Groq's API for recommendation generation. Groq does not retain your data beyond the immediate request. You can opt out of AI recommendations by using rule-based mode in Settings.
Contact
WealthMinder Privacy Team
Email: privacy@wealthminder.com
Response time: within 30 days as required by GDPR
If you are in the EU and believe we have violated your rights, you have the right to lodge a complaint with your local data protection authority.