This page is the promises we can keep, in the words we would use across a kitchen table. Nothing here describes a feature that does not exist yet without saying so.
The three promises
WealthWelly records what you own and owe and does arithmetic on it. There is no facility anywhere in the product to transfer, withdraw, trade or move anything, and we will not build one. The strongest security control is not having the capability at all.
One click, any time, everything you have entered, in a spreadsheet-friendly file. Then delete your account wholesale if you wish. Export and leaving are free and will stay free; we would rather earn your renewal than trap you.
No payments flow through WealthWelly. We hold no card details, no client money, no custody of any asset. Your money stays exactly where it already is, with the institutions that hold it.
What is true today
No bank connections exist yet. Here is exactly what the product does today and what the regulated route will be when connections come.
You enter balances and valuations yourself. WealthWelly adds live exchange rates for foreign currency holdings and live pricing for crypto, keeps every value stamped with its date, and never asks for a bank login, a private key or a seed phrase. Crypto wallets are tracked by public address only.
Reading UK bank data is a regulated activity called account information services. We will offer connections as an agent of an FCA-authorised provider, who holds the permission and the consent flow, and we will name that provider on this page before the first connection ships. Until that sentence changes, no page of ours will claim bank feeds exist.
How your data is kept
Financial data is encrypted on our servers. The most sensitive values are sealed twice over: each is locked with its own key, and those keys are locked in turn by a master key kept in a separate, dedicated key store. Stealing a copy of the database is not the same as reading it.
We store what the picture needs and nothing speculative. Where a figure can be fetched on demand rather than hoarded, we prefer the fetch. Our analytics are our own and cookieless, which is why the site has no cookie banner: there is nothing to consent to.
The append-only promise
Not by us, and not by a bug. The database itself refuses to overwrite or delete your historical records; corrections are recorded alongside the original and leave a visible trail. What your picture said in March is what it will always say it said in March.
Access, correction, export and erasure, without friction. Export is self-serve from your account. Deletion removes your data wholesale: we process no payments and are required to keep nothing about you once you go. We do not sell personal data, aggregated or otherwise.
The full exit is documented like any other feature, on its own page, because a product that holds your whole financial picture owes you a clear way out of it.
