Privacy Policy — WealthSync AI

Effective date: July 18, 2026

Last updated: July 2, 2026

The short version

WealthSync AI helps you see all your money in one place: your accounts, your spending, your goals, plus Milo, our AI companion you can talk to about it.

To do that at the speed and scale a modern app needs, we store your financial data in a secure, encrypted cloud database in the United States. Your Google Sheet stays connected as a place you can view and edit that same data, but the database is now the official copy that powers the app.

We do not sell your data. We do not run ads. You can export everything and permanently delete everything, anytime.

Questions: reggie@officialwealthsyncai.com.

Who runs WealthSync AI

WealthSync AI is operated by Wealth Journey Collective LLC ("WealthSync AI," "we," "us"), a company organized in the State of Nevada, United States.

- Email: reggie@officialwealthsyncai.com

- Website: https://www.officialwealthsyncai.com

- Mailing address: Wealth Journey Collective LLC, 732 S 6th St, Ste N, Las Vegas, NV 89101, USA

What we collect

We collect only what the product needs to work. Here is the complete list.

When you sign up

- Email address. Creates your account and links it to your purchases.

- Name. Greets you in the app and personalizes Milo.

- Sign-in identity. If you sign in with Google, the Google account identifier we receive; if you sign in with Apple, the Apple subject identifier. We never see or store your Google or Apple password.

Your financial data

This is the part that changed. WealthSync AI now stores your financial data in our secure cloud database so the app can compute, sync, and scale reliably:

- Transactions. Date, merchant, amount, category, and account for the transactions you bring in.

- Balances. Current and available balances per account (checking, savings, credit, investment).

- Holdings. Brokerage positions and values, if you connect an investment account.

- Debts. Balances and details you track.

- Manual entries. Anything you add by hand.

- Goals and preferences. Your net-worth target and app settings.

Your Google Sheet stays linked as a view and edit surface. The data shown there mirrors what is in the database.

Connection tokens

When you link a bank or brokerage, we store the access token that lets us read your data on your behalf. These tokens are kept encrypted in a dedicated secrets vault, separate from the rest of your data. We never store your bank or brokerage password.

From your device

- Push token from Apple (APNs) or Google (FCM), if you opt into notifications.

- Device type (iOS and Android) and app version, for formatting and debugging.

- Time zone, so scheduled nudges arrive in your morning.

Conversations with Milo

- Your messages to Milo and Milo's responses.

- Reactions and choices you tap (for example, marking a charge "planned").

This history is what lets Milo remember context across conversations.

Operational and diagnostic data

- Error and crash reports (via Sentry) to find and fix bugs. We use reasonable technical measures to limit Sentry's access to your financial data, including scrubbing known financial fields before transmission. We cannot guarantee complete exclusion in all error scenarios, and we review Sentry's data capture configuration regularly.

- Aggregate usage counts (for example, total active users in a day). These contain no information about you individually.

- License validation and usage audit logs. When you use the app, we log activity necessary to validate your license and detect misuse, such as the time and outcome of your license checks. These logs are tied to your account identifier and are retained for 90 days.

Things we do NOT collect

- Your bank or brokerage password (Plaid and SnapTrade handle login).

- Your photos, contacts, microphone audio, or location.

- Your browsing history outside our app, or your activity in other apps. We do not track you elsewhere.

Why we collect it

Each item maps to a feature.

- Email, name, sign-in identity — Create and secure your account, personalize the app.

- Transactions, balances, holdings, debts — Show your finances and let Milo answer questions.

- Connection tokens — Refresh your data from your bank or brokerage.

- Goals, preferences — Track progress and remember your settings.

- Push token, time zone — Deliver check-ins, alerts, and recaps when you are awake.

- Chat history — Let Milo remember context.

- Error reports, usage counts — Keep the app stable and understand load.

Where your data lives and how it is stored

- Cloud database (Postgres), hosted in the United States. This is the system of record for your financial data. Access is locked down by row-level security so one account cannot read another's data, and our servers reach it through a controlled access layer.

- Secrets vault. Bank and brokerage tokens are stored encrypted, separate from your other data.

- Your Google Sheet. A connected view and edit surface in your own Google account. You can keep it, edit it, or remove the connection.

- Edge servers (Cloudflare). Our application logic runs at the edge and routes traffic to the database. Traffic is encrypted in transit.

Your data is encrypted in transit (HTTPS / TLS) and at rest.

Who we share it with

We share data only with the companies that help us run the product (our "sub-processors"). We never sell your data, and we have no advertising or data-broker business model.

- Supabase — Database, auth, and vault hosting. Receives your account and financial data and your encrypted tokens, to store and serve your data and handle sign-in.

- Cloudflare — Edge compute / CDN. Receives encrypted requests passing through our backend, to run our app logic and speed and protect the service.

- Plaid — Bank data provider. Receives your bank login (handled by Plaid; never shared with us), to pull your transactions and balances.

- SnapTrade — Brokerage data provider. Receives your brokerage login (handled by SnapTrade; never shared with us), to pull your investment holdings.

- Resend — Transactional email. Receives your email address and the message we send, to send account and notification emails.

- Sentry — Error monitoring. Receives diagnostic and crash data (financial fields scrubbed before transmission), to find and fix bugs.

- Google — Sign-in and spreadsheet. Receives your Google sign-in token and your linked Sheet contents, to authenticate you and sync the Sheet view.

- Apple — Sign-in and push (APNs). Receives your Apple sign-in token and your device push token, to authenticate you and deliver iOS push.

- Firebase Cloud Messaging (Google) — Push delivery. Receives your device push token and push contents, to deliver Android push notifications.

- OpenAI — AI model provider. Receives the financial context our AI features need to generate a response, from both the mobile app and the Google Sheets add-on. From the mobile app (Milo): your messages plus account balances, recent transactions, spending category totals, debt balances, and investment holdings. From the add-on: for the WealthSync AI assistant, your transaction history; for the AI Summary, your income, expense, and balance totals, up to your 300 most recent transactions, and your email address; for the DebtSync insight, your debt balances and interest rates; for the Wealth Momentum insight, your savings and investing figures. OpenAI does not receive your bank or brokerage credentials or connection tokens.

- Railway — App / data hosting for Milo. Receives your Milo chat history, device push tokens, and the financial context required to generate a response, specifically: account balances, recent transactions, spending category totals, debt balances, and investment holdings. Railway does not receive your bank or brokerage credentials or connection tokens.

- SamCart and Stripe — Payments. Receive your name, email address, billing address, and payment card information (processed and stored by Stripe; we receive only the last four digits and card type for confirmation), to process your purchase and manage your subscription.

Each sub-processor is bound by its own terms and handles your data under contract with us.

Payments

Checkout runs through SamCart, with Stripe as the underlying card processor. Your full card number is handled by them, not by WealthSync AI. We receive confirmation of your purchase and your subscription status, not your card number.

AI features and OpenAI

Some WealthSync AI features use OpenAI to generate text. When you use them, the financial context the feature needs is sent to OpenAI to produce a summary, insight, or reply. Under OpenAI's API terms, your data is not used to train their models. This reflects OpenAI's API terms as of the effective date of this policy. If those terms change in a way that affects your data, we will update this policy and notify you by email before the change takes effect.

In the mobile app (Milo): when you chat with Milo, your message and a snapshot of the financial context Milo needs (account balances, recent transactions, spending category totals, debt balances, and investment holdings) are sent to OpenAI to generate a reply. When you activate Milo for the first time, you are shown a consent screen describing what data is sent to OpenAI and asking for your explicit confirmation before Milo becomes active. You may withdraw this consent at any time in Settings, Milo, Disable.

In the Google Sheets add-on: several add-on features also send your financial data to OpenAI. The WealthSync AI assistant sends your transaction history to answer your questions. The AI Summary sends your income, expense, and balance totals, up to your 300 most recent transactions, and your email address, and it runs automatically after a bank sync. The DebtSync insight sends your debt names, balances, and interest rates, and the Wealth Momentum insight sends your savings and investing figures.

If you would rather OpenAI never sees your financial context, do not use these AI features. Viewing and editing your data in WealthSync AI does not, by itself, send your financial data to OpenAI.

How long we keep it

- Account info (email, name, sign-in identity) — Until you delete your account.

- Financial data (transactions, balances, holdings, debts, manual entries) — Until you delete your account, then purged immediately (see below).

- Connection tokens — Until you disconnect the account or delete your account.

- Goals, preferences — Until you delete your account.

- Chat history with Milo — Until you delete your account.

- Push tokens — Until your device deregisters or you delete your account.

- Error and diagnostic logs — Up to 90 days, then automatically purged.

- Aggregate usage counts — Indefinitely (anonymous; no information about you individually).

How to export and delete your data

Export

Email reggie@officialwealthsyncai.com with the subject "Export my data" and we will send you a copy of your data in a portable format (for example, JSON or CSV) within 30 days. Your Google Sheet is also always yours to keep. We may ask you to verify your identity before fulfilling an export request. We will complete your request within 30 days of identity verification, or notify you if we need up to an additional 30 days. Data will be provided in JSON or CSV format.

Delete

In the app: Settings, Delete Account, Confirm. This immediately:

- Permanently deletes your financial data from our database (transactions, balances, holdings, debts, manual entries).

- Deletes your connection tokens from the vault (your bank and brokerage links stop working at once).

- Deletes your chat history with Milo.

- Deletes your goals, preferences, and push tokens (notifications stop immediately).

- Anonymizes your account record (meaning the record is stripped of all fields that could identify you, including email, name, sign-in identifiers, and device tokens, and retains only a deletion timestamp and an internal record ID that cannot be reverse-mapped to you) so it holds no personal information.

This is irreversible. To use WealthSync AI again you would start fresh. You can also request deletion by emailing us with the subject "Delete my account"; we complete it within 7 days and confirm by email.

What we keep after deletion

- An anonymous stub recording only that an account existed and was deleted on a given date, with no email, name, or financial data. This supports fraud prevention and is expected under financial-services recordkeeping rules.

- Aggregate, anonymous usage counts that say nothing about you specifically.

Your rights

Wherever you live, you can:

- See what we have on you. Email us for a copy.

- Correct it. Tell us what is wrong and we will fix it.

- Delete it. Use Settings, Delete Account, or email us.

- Take it with you. Email us for a portable export.

- Opt out of non-essential email. Every non-essential email has an unsubscribe link.

If you are in California (CCPA / CPRA)

You have the right to know what personal information we collect, to access and delete it, to correct it, and to not be discriminated against for exercising these rights. We do not sell or "share" your personal information as those terms are defined under California law, so there is no sale to opt out of. To exercise any right, email us; we may need to verify your identity first.

We collect financial-account information, which is sensitive personal information under California law. We use it only to provide the service you asked for, and we do not use it to infer characteristics about you, so the "Limit the Use of My Sensitive Personal Information" right does not apply.

We do not disclose personal information to third parties for their own direct marketing purposes. California residents may confirm this by contacting us at reggie@officialwealthsyncai.com.

If you are in the EEA, UK, or Switzerland (GDPR / UK GDPR)

WealthSync AI is currently available to users in the United States only. If you access the service from the EEA, UK, or Switzerland, you do so outside our intended service area. We nonetheless respect your rights under GDPR and UK GDPR (access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local data protection authority), and we rely on Standard Contractual Clauses for any transfers of your data outside those regions.

Where GDPR applies, our legal bases map to specific processing activities:

- Contract performance: account creation, financial data storage and display, bank and brokerage connection, and push notifications needed for the service to function.

- Consent: the Milo AI companion (collected at the point of activation) and optional marketing emails.

- Legitimate interests: security monitoring, fraud prevention, crash and error diagnostics, and aggregate usage analytics.

For Milo specifically, we rely on your consent as the legal basis for sending your financial context to OpenAI. You give this consent when you activate Milo, and you may withdraw it at any time by disabling Milo in Settings. The add-on AI features in the Google Sheets add-on also send your financial data to OpenAI when you use them, and the AI Summary does so automatically after a bank sync. We are working to give you a clear way to turn these AI features off.

Financial data (GLBA)

As a service that handles consumer financial information, we follow the principles of the Gramm-Leach-Bliley Act. We maintain a written information security program that includes: encryption of data in transit and at rest, role-based access controls and row-level database security, a designated person responsible for overseeing our data security program, regular review of our sub-processor security practices, and an incident response process for data breaches. We do not disclose your financial information to nonaffiliated third parties except to provide the service you requested.

To exercise any right, email reggie@officialwealthsyncai.com.

Cookies and tracking

The mobile app does not use cookies and does not track you across other apps or websites. The website uses standard analytics to understand how visitors find us; we do not use those analytics inside the app. We do not use advertising trackers, cross-site pixels, or fingerprinting.

Security

- Data is encrypted in transit (HTTPS / TLS) and at rest.

- Your financial data is isolated per account by row-level security in the database.

- Bank and brokerage tokens live in a separate encrypted vault.

- App sessions are signed and expire automatically.

- Inbound data from our providers (for example, webhooks from Plaid and SnapTrade) is signature-verified before we act on it.

No system is perfectly secure, but we work to protect your data and to keep improving. If we ever discover a breach that affects you, we will notify you without undue delay and, where required, within 72 hours of confirming it. Where a breach poses a high risk to your rights or finances, we will also notify you directly by email without undue delay, describing what happened, what data was affected, and what we are doing about it.

Children

WealthSync AI is for users 18 and older. We do not knowingly collect data from anyone under 18. If we learn that we have, we delete it promptly.

Changes to this policy

If we make a material change, we will email you at the address on file before it takes effect. Minor wording or formatting fixes do not trigger an email. The "Last updated" date at the top always reflects the current version.

How to reach us

Email: reggie@officialwealthsyncai.com (we answer within 2 business days). For an urgent privacy concern, put "Privacy" in the subject line.

Mail: Wealth Journey Collective LLC, 732 S 6th St, Ste N, Las Vegas, NV 89101, USA

This policy is written in plain language on purpose. The practices described above are what govern how we handle your data.