Privacy Policy
What we collect
We collect only what is necessary to run the service: your name and email address, the financial records you enter, app-usage information that does not include financial figures, device identifiers and push-notification tokens, and IP address or general region for security and fraud detection.
Third-party services
WiseFlow relies on a small number of providers, and each one receives only the data needed to provide its service:
- Supabase provides the database, authentication, file storage, and backend functions. Supabase remains the authoritative record of your account and subscription entitlement.
- Plaid connects a supported bank account and returns account and transaction data, only if you choose to link a bank.
- RevenueCat processes subscription purchases and reconciles entitlement status across Google Play and the Apple App Store.
- Google Gemini, and optionally Anthropic Claude, process your Wisey messages and a summary of relevant financial context to generate a response. These optional AI features run only after you give explicit consent (see “Optional AI features and consent” below).
- Google Cloud Vision extracts text and details from a receipt image when you use the receipt scanner.
- Google Cloud Speech-to-Text transcribes a voice recording when you use voice entry.
- Firebase Cloud Messaging delivers the push notifications you enable.
- Resend delivers support and account email that you or we send in connection with your request.
Optional AI features and consent
Wisey and the other optional AI features send your messages and a summary of relevant financial context, such as balances, spending patterns, and upcoming obligations, to the AI providers named above to answer your question. Before any of your data is sent to a third-party AI provider, WiseFlow asks for your explicit consent. If you decline, the AI features stay off and the rest of the app stays fully usable, including manual tracking, budgets, planned items, goals, and reports. You can change this choice later, and you can stop using Wisey at any time without affecting the rest of your account.
Notifications and analytics
If you allow notifications, WiseFlow can send alerts such as spending summaries, bill reminders, and budget warnings. You can turn them off at any time. We may collect anonymized, aggregated feature-use and performance information to improve the app; this information does not include your financial figures. WiseFlow does not currently use an automatic crash-reporting service.
Peer comparison
Where available, peer comparison uses derived, de-identified metrics, such as a savings rate range. It never uses your raw transactions, balances, or identity, and it never shares them with other users. There is no toggle for this in Settings; if you want to object to your de-identified metrics being used this way, contact support and we will handle your request.
Legal basis and automated decisions
For EU and UK users, we process data to perform our contract with you, for legitimate interests such as security and improvement, with consent for optional notifications or marketing, and where legally required. Wisey provides information and suggestions only; no decision affecting your legal rights or financial standing is made automatically. You may request human review of a specific Wisey output.
Storage, retention, and deletion
Data is stored on Supabase infrastructure hosted on AWS in Frankfurt, Germany. Data is kept while an account is active. After account deletion, we target deletion or de-identification within 30 days, except where law or legitimate security needs require retention. Security, fraud, dispute, and compliance records may be retained for up to 180 days, and encrypted backups may persist up to 90 days.
Your rights
You can ask for access, correction, deletion, portability, or restriction/objection where applicable. California residents can request information about data collected, correction, deletion, and opt-out of sale or sharing; WiseFlow does not sell personal information. EU and UK residents may complain to their local data-protection authority.
You can delete your account and its data from inside the app in Settings. You can also exercise any privacy right by emailing contact@wiseflowapp.com with your account email and request. We respond within 30 days. Deleting your WiseFlow account does not cancel a paid subscription; manage that through Google Play on Android or your Apple ID subscription settings on iPhone.
Security and children
WiseFlow uses security measures including encryption in transit and at rest, access controls, incident-response procedures, and regular policy review. No system is completely secure. WiseFlow is not intended for anyone under 18.