Privacy policy.

What we collect

Your email address, your name if you give one, and the financial records you choose to enter: assets, liabilities, valuations and the settings that shape your picture. If you join the waitlist we hold your email and what you said you were interested in. Security records include password hashes, sign in activity and, if enabled, an encrypted authenticator secret and hashed recovery codes.

Optional bank connections

Bank connections currently run as a restricted private pilot through TrueLayer. They are not available to every account. If you choose to connect, we store permission details and encrypted provider access credentials. With the read-only permission you approve, we retrieve and store account details, balances and their dates. Transaction history requires permission for settled transaction amounts, currencies and dates, with categories and protected transaction references where available.

We use returned transactions and a dated balance to reconstruct earlier daily balances where the available records support this. These records, including the ownership settings used, support your graph, statistics and reports. Available history depends on the bank, and reconstructed records are identified. We do not collect or store your bank password and cannot use this connection to move money.

Connecting is optional. You can disconnect in Connections to stop new retrievals and request provider withdrawal, and you can also remove permission directly with your bank. Your recorded financial history remains after disconnecting. Account deletion removes the associated bank records from the live service, subject to the withdrawal and backup handling described below.

How we use it

To run your account and draw your picture, to email you about your own account, and, only if you have not opted out, to tell you about WealthWelly itself. Every marketing email carries an unsubscribe link that works. We never ask for bank logins, private keys or seed phrases, and where a figure can be fetched on demand rather than stored, we prefer the fetch.

Welly family access

If you choose to link another Welly account for free access, each platform confirms an opaque membership reference and whether that account is eligible. We store the linked platform, verification dates and protected credentials needed to recheck eligibility. We do not share your balances, assets, debts or financial plans with the other platform to verify this benefit. Links are optional and can be removed. Trial and subscription status are shared between your website and app sessions and included in your account export.

Security notifications

We record important security changes, including password resets, authenticator updates and session revocations. Routine maintenance removes these activity records after 90 days. They are included in your account export. We use our email service, Resend, to send essential security notices separately from the optional weekly letter. A queued notice holds its recipient and fixed message while delivery is attempted. Sending stops within 24 hours, and routine cleanup removes expired message content. We also remove that content when sending finishes. Our email provider may keep its own delivery records.

Where it lives

The service runs on our infrastructure in the EU. Connections use HTTPS, and passwords are stored as hashes. Authenticator secrets and stored provider credentials use individual encryption keys wrapped by a master key outside the database. Portfolio records use database access controls. We hold no client funds.

Analytics

We use essential cookies to maintain your sign in and protect forms. Our own page statistics use page paths and a daily pseudonymous visitor key derived from technical request information. We exclude sensitive token routes. There are no third party advertising or analytics scripts.

Deletion and backups

Account deletion removes your portfolio and sign in information from the live service. A limited encrypted reference may remain while necessary provider withdrawal completes. Existing backups are separate copies and are not immediately rewritten. The leaving page explains how to request further handling of backup copies and remaining records.

Your rights

Under UK GDPR you can see what we hold, correct it, export it and have it erased. Export and deletion are available directly from your account, described plainly on the leaving page. For anything else, or to complain, email hello@wealthwelly.com; you also have the right to complain to the Information Commissioner's Office.

What we will never do

We do not sell personal data. Not aggregated, not anonymised, not as a business pivot. If that sentence ever needed to change, the honest course would be to shut the product instead, and we mean that.