Privacy Policy

1. Information We Collect

Information you provide

• Account information. Email address, password ( hashed and salted by our authentication provider), and any optional profile details you add such as display name.
• Financial preferences. Goals, budgets, tags, notes, and other content you create within the Service.
• Communications. Messages you send to support and feedback you submit through the Service.

Information from connected accounts

When you link an external bank, brokerage, or other financial account, we and our aggregation provider receive information such as account balances, transactions, holdings, and account metadata (for example, institution name and account type). We do not store your bank login credentials; those are held by the aggregator.

Information collected automatically

• Device and usage data. IP address, browser type, operating system, device identifiers, pages or screens viewed, and timestamps.
• Cookies and similar technologies. Used for authentication, session management, and basic analytics. See section 7 below.
• Crash and diagnostic data. Error logs and performance metrics that help us keep the Service reliable.

2. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Service.
• Authenticate your account, keep it secure, and detect or prevent fraud, abuse, or unauthorized access.
• Aggregate, categorize, and display the financial data you choose to share with us so you can see a unified view of your finances.
• Personalize your experience, for example by surfacing relevant insights or recommending goals based on your usage.
• Communicate with you about product updates, security alerts, service announcements, and (with your consent) marketing.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We do not share your financial data with third parties for their own advertising or marketing.

3. How We Share Information

We share information only as necessary to operate the Service:

• Service providers. Vendors that help us run the Service, including authentication (Google Firebase), hosting, analytics, customer support, and our financial-account aggregator. These providers may only use your data to perform services for us and are bound by confidentiality and security obligations.
• Legal and safety. When required by law, subpoena, or court order, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers. In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to standard confidentiality protections.
• With your consent. Any other sharing will be done only with your explicit permission.

4. Data Security

We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit (TLS) and at rest, scoped access controls, and routine security reviews. No system is perfectly secure, however, and we cannot guarantee absolute security. If we become aware of a security incident affecting your information, we will notify you in accordance with applicable law.

5. Data Retention

We retain your information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or de-identify your personal information within a reasonable timeframe, except where retention is required by law.

6. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and personal information.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable, machine-readable format.
• Withdraw consent where we rely on it for processing.
• Lodge a complaint with your local data-protection authority.

You can exercise most of these rights directly from your account settings. For everything else, email hello@henrywallet.com and we'll respond within the time required by applicable law.

7. Cookies and Similar Technologies

We use a small number of cookies and local-storage entries to keep you signed in, remember your preferences, and understand how the Service is used in aggregate. We do not use third-party advertising cookies. You can control cookies through your browser settings; disabling them may break parts of the Service such as authentication.

8. Third-Party Services

HENRY Wallet relies on a small set of trusted third parties, for example Google Firebase for authentication and an account-aggregation provider for connecting your financial institutions. These providers have their own privacy policies. We encourage you to review them.

9. International Users

HENRY Wallet is operated from the United States. If you are accessing the Service from outside the U.S., please be aware that your information will be transferred to, stored, and processed in the U.S. and other jurisdictions where our service providers operate. We take steps to ensure such transfers comply with applicable law.

10. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at hello@henrywallet.com and we will take appropriate steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the Service or by email before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.

12. Contact Us

Questions, requests, or concerns about your privacy? Reach us at hello@henrywallet.com.