Privacy Policy

Effective date: June 2026

1. Overview

Track Wiser is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights under the EU General Data Protection Regulation (GDPR). We do not sell your data. We do not show you ads.

2. Data We Collect

We collect only the information necessary to provide the service:

  • Account information — your name, email address, and hashed password.
  • Financial data you enter — wallets, transactions, budgets, categories, and group expenses.
  • Preferences — default currency, notification settings, and theme choice.
  • Payment data — processed and stored by Stripe. We only store your Stripe customer ID, not your card details.

We do not collect location data, device identifiers, or usage analytics.

3. How We Use Your Data

  • Provide and maintain the service (displaying balances, budgets, groups).
  • Generate AI-powered spending insights and budget health scores.
  • Send transactional emails (password resets, weekly digests, claim reminders).
  • Convert currencies using live exchange rates.
  • Process payments and manage subscriptions.

4. Third-Party Services

We share limited data with the following services to operate Track Wiser:

  • Stripe (payments) — receives your email and payment details to process subscriptions. Stripe Privacy Policy.
  • Groq (AI insights) — receives anonymised spending summaries to generate insights. No personally identifiable information is sent. Groq Privacy Policy.
  • Resend (email) — receives your email address to deliver transactional emails. Resend Privacy Policy.
  • Frankfurter API (exchange rates) — no user data is sent. We only fetch public exchange rate data.

5. Data Storage & Security

Your data is stored in an encrypted PostgreSQL database hosted in the European Union. Passwords are hashed with bcrypt and are never stored in plaintext. All connections use TLS encryption. We follow industry best practices to protect your data, but no method of transmission over the internet is 100% secure.

6. Your Rights (GDPR)

As an EU resident, you have the following rights:

  • Access — request a copy of all data we hold about you.
  • Rectification — correct inaccurate personal data.
  • Erasure — delete your account and all associated data.
  • Portability — export your data in a machine-readable format (CSV).
  • Objection — object to processing of your data.

To exercise any of these rights, email support@trackwiser.app. We will respond within 30 days.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data — wallets, transactions, budgets, categories, group memberships, and notifications — is permanently erased. We may retain anonymised, aggregated data for internal analytics.

8. Cookies

Track Wiser uses only essential session cookies required for authentication and security (CSRF protection). We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

9. Children

Track Wiser is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email or an in-app notification at least 30 days before they take effect. The "Effective date" at the top indicates the last revision.

11. Contact

For privacy-related questions or to exercise your GDPR rights, contact us at support@trackwiser.app.