Privacy Policy
Introduction
WealthMinder ("we", "our", "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share your data when you use our personal finance management platform at wealthminder.co.
This policy complies with the General Data Protection Regulation (GDPR), South Africa's Protection of Personal Information Act (POPIA), Nigeria's Data Protection Regulation (NDPR), and other applicable data protection laws.
Data we collect
| Type | What it includes | When collected |
|---|---|---|
| Account data | Full name, email, phone number, country, currency preference | At registration |
| Financial data | Account balances, transaction descriptions, categories, goal amounts — entered by you manually | When you add data |
| Usage data | IP address, browser type, pages visited, features used | Automatically |
| Authentication data | Encrypted passwords, OAuth tokens (Google), MFA secrets — never in plaintext | At sign-up / sign-in |
How we use your data
- →Provide and improve the WealthMinder service
- →Calculate your Financial Health Score and generate insights
- →Send transactional emails (verification, password reset, weekly digest)
- →Detect and prevent fraud and unauthorised access
- →Comply with legal obligations
- →Generate anonymised, aggregated analytics to improve the product
We do not sell your personal data to third parties. We do not use your financial data for advertising purposes.
Data storage and security
Your data is stored on Supabase (PostgreSQL), hosted on AWS infrastructure. All data is encrypted at rest using AES-256 and in transit using TLS 1.3. Financial data is stored as integers (no floating point) to ensure accuracy.
We implement industry-standard security including JWT authentication, row-level security (RLS) ensuring users can only access their own data, rate limiting, and multi-factor authentication support.
Data retention
We retain your personal data for as long as your account is active. When you delete your account, your personally identifiable information (name, email, phone) is permanently anonymised within 24 hours. Transaction and financial records are retained in anonymised form for 7 years for audit purposes as required by financial regulations. Audit logs are retained for 90 days for security purposes.
Your rights
To exercise any right, go to Settings in your account or contact us at privacy@wealthminder.co
Third-party services
Cookies
We use only essential cookies required for authentication and security. We do not use tracking or advertising cookies.
AI and automated decisions
WealthMinder uses AI (Groq Llama 3.3) to generate personalised financial education recommendations. These recommendations are educational only and do not constitute financial advice. No automated decisions are made that have legal or similarly significant effects on you without human oversight.
When AI advice is on, we send figures about your finances (such as income, expenses, debt, savings and the names of your top spending categories), and anything you type into the AI chat or the investment analysis, to Groq's API so it can write the response. We do not send your name or email address. Groq processes this on our behalf, and its own terms and privacy policy apply to how it handles that data, so please read them. Do not type anything into the chat that you would not want processed this way.
You can turn AI advice off at any time in Settings, under AI advice. When it is off, nothing about you is sent to Groq and your advice comes from built-in rules instead. To save time and cost we keep your most recent AI recommendations on our servers and show them again until your figures change.
Contact
WealthMinder Privacy Team
Email: privacy@wealthminder.co
Response time: within 30 days as required by GDPR
If you are in the EU and believe we have violated your rights, you have the right to lodge a complaint with your local data protection authority.