Privacy Policy

1. Overview

Wallit (“we,” “our,” or “the app”) is a financial wellness app that automatically enforces your spending limits, so you can spend freely knowing there’s a safety net in place. Spending tracking and alerts are built in, but enforcement is the core. This policy describes what data we collect, how we use it, and your rights.

2. Data We Collect

• Your email address (via Google OAuth sign-in)
• Financial transaction data retrieved from your bank accounts via Plaid (merchant name, amount, date, category)
• Bank account metadata (institution name, account type)
• Spending limits and budget settings you configure
• Push notification subscription tokens (if you opt in to notifications)
• Enforcement settings and preferences (if you use the Safety Net feature)

3. How We Use Your Data

We use your data solely to provide the Wallit application’s features: enforcing your spending limits when they are reached, tracking your spending history, and sending alerts as you approach your limits. We do not sell, rent, or share your financial data with any third parties.

4. Data Storage and Security

All data is stored in Google BigQuery (Google Cloud Platform, US region). Data is encrypted at rest using AES-256 encryption and in transit using TLS 1.2 or higher. Access to production data is restricted to authorized personnel only and protected with multi-factor authentication.

5. Data Retention

We retain your data only while you have an active Wallit account. There is no minimum retention period. You may permanently delete all of your data at any time from the Settings page inside the app.

6. Your Rights

• Access: You can view all your data within the app.
• Deletion: You can permanently delete all your data from Settings → “Delete all my data.” Deletion is immediate and irreversible.
• Portability: Email us at hello@usewallit.com to request a copy of your data.

7. Third-Party Services

Wallit uses the following third-party services to operate:

• Plaid — connects to your bank accounts. Subject to Plaid’s Privacy Policy.
• Google — authentication and cloud storage.
• Vercel — application hosting.