Trusted with the picture, never the money.
This page is the promises we can keep, in the words we would use across a kitchen table. Nothing here describes a feature that does not exist yet without saying so.
The three promises
Read only. Yours. Untouched.
Read only by design
WealthWelly records what you own and owe and does arithmetic on it. There is no facility anywhere in the product to transfer, withdraw, trade or move anything, and we will not build one. The strongest security control is not having the capability at all.
Your data leaves with you
One click, any time, everything you have entered, in a file your spreadsheet can open. Then delete your account wholesale if you wish. Export and leaving are free and will stay free; we would rather earn your renewal than trap you.
We never touch your funds
No payments flow through WealthWelly. We hold no card details, no client money, no custody of any asset. Your money stays exactly where it already is, with the institutions that hold it.
What is true today
Manual first, and honest about it.
Live bank connections are not available yet. These are the tools you can use today and the conditions for what comes next.
Today
You enter balances and valuations yourself. WealthWelly adds live exchange rates for foreign currency holdings and live pricing for crypto, keeps every value stamped with its date, and never asks for a bank login, a private key or a seed phrase. Crypto holdings are entered by hand and priced live; when wallet balance tracking arrives it will read public wallet addresses only, nothing that could ever move a coin.
When bank feeds come
Before live connections launch, we will name the provider, explain supported accounts and publish the permissions and terms that apply. Supplier approval, the appropriate operating permissions and tested customer consent are required first. The current connection prototype is restricted to invited tests with fictional bank data.
How your data is kept
Protection, in plain words.
Guarded at rest
Connections use HTTPS and passwords are stored as hashes. Authenticator secrets and stored provider credentials use individual encryption keys, wrapped by a master key held outside the database. Portfolio records are protected by database access controls. The vault specifically protects credentials and authenticator secrets.
An extra check at sign in
Enable an authenticator app in Account security. Each sign in then needs your password and a short lived code. Recovery codes work once each. Changing your security settings requires a fresh password and security check.
Your security activity shows recent changes. You can sign out other devices, and essential email notices are queued for important security events.
Account securityMinimal by habit
We use essential sign in cookies and our own page statistics. We do not add third party advertising scripts. The privacy page explains the account records, security information and technical data needed to operate the service.
History with a record of changes
Your history cannot be silently rewritten.
Recorded values and daily snapshots preserve their original amounts. Corrections add a new record and mark the earlier version. Deliberate account deletion is the exception, because your right to leave also covers your history.
Your rights, under GDPR
Review, export or delete your account from Account settings. Deletion removes your portfolio and sign in information from the live service. Any necessary provider withdrawal is handled separately, with a limited encrypted reference kept until it is resolved. The leaving page explains backups and the remaining details.
Leaving is a feature
The full exit is documented like any other feature, on its own page, because a product that holds your whole financial picture owes you a clear way out of it.