Privacy Policy

Worthful is a personal finance tracker for credit cards, bills, mortgages, installments, assets, and spending. This page explains what data it collects and how it's used.

Account info (if you create one): your email address, a username you choose, and a password. Passwords are never stored as plain text. They're hashed with PBKDF2 before being saved. If you sign up with Apple in the iOS app instead, we receive the email Apple shares (which may be a private relay address) and Apple's stable identifier for you. That account has no password.

Financial entries you add: credit cards, bills, mortgages, installments, assets, spending records, and optional card images. This is the data the app exists to track.

For logged-in accounts, we also record a simple "last active" time (no page views, clicks, or activity details). It's only used to show who's currently online in the admin dashboard. Nothing else is collected automatically: no analytics trackers, no ad pixels, and no third-party scripts reading your activity.

Free plan: everything stays in your browser's local storage. It never reaches our servers, and we have no copy of it. If you clear your browser data or switch devices, it's gone, unless you've exported a backup yourself.

Premium / Lifetime: your financial entries sync to Cloudflare D1 and are encrypted with AES-256-GCM. Uploaded card images are stored separately in Cloudflare R2. Your account and any Partner you connect can access shared data, and authorized admins can help with account support.

On the web, Premium (monthly or yearly) and Lifetime purchases are handled entirely by LYNK.ID, a third-party payment processor. We never see or store your card or payment details. LYNK.ID only tells us that a payment succeeded, for which email, and for which product, and that's what activates your account. In the iOS app, purchases go through Apple's In-App Purchase instead. Apple handles your payment details directly, and we only receive a signed transaction record to verify and activate your account.

Only to run the app: logging you in, syncing your data across your devices, and activating Premium or Lifetime after a purchase. We don't sell your data, share it with advertisers, or send marketing emails.

You can delete your account and synced data from Account settings in the iOS app, or contact us for help. Local data on the free plan can be cleared from your browser at any time. Card images are removed when you delete your account, and if cleanup fails for a moment, a server job tries again.

Sessions use secure, httpOnly cookies, passwords are salted and hashed, and all traffic goes over HTTPS. No system is perfectly secure, but we treat your financial data with the same care we'd want for our own.

Questions about this policy or your data: egifermn@gmail.com

If this policy changes in a meaningful way, the "last updated" date above will change with it.