Privacy Policy

This Privacy Policy explains how Hallows Group LLC ("WorthSync," "we," "us," or "our") collects, uses, discloses, and safeguards your information when you visit worthsync.com, use the WorthSync application at app.worthsync.com, or use our iOS and Android apps (together, the "Services"). WorthSync is a personal net-worth tracking tool. Because the Services handle financial information, we treat that data as sensitive and apply heightened protections.

1. Who we are (data controller)

Hallows Group LLC is the controller responsible for your personal data. For any privacy question or to exercise your rights, contact us at support@worthsync.com or by mail at 5900 Balcones Dr #31966, Austin, TX 78731-4257, United States.

2. Information we collect

Information you provide

• Account & identity data — name and email address, managed through our authentication provider (Clerk) when you create an account.
• Financial data you enter — institutions, accounts, balances, dated snapshots, debts and liabilities, categories, goals, and planning inputs (for example, your age, income, expenses, and Social Security, pension and FIRE assumptions). This is sensitive financial information and is the core of the Services.
• Property and vehicle details — if you track a home or vehicle, the details you enter for it, such as a street address or VIN. If you turn on automatic value estimates, that address or VIN is sent to the valuation provider listed in Section 6 to get an estimate, and nothing else about you is sent with it.
• Insurance policies — insurer, policy type (including health insurance), policy number, coverage, premiums, agent contact details and your notes. We do not ask for medical or health-condition information, and you should not put it in notes.
• Documents you upload — appraisals, receipts, titles, photos and policy documents you attach in the vault or to an insurance policy.
• People in your household plan — names, relationships, dates of birth and notes you enter about family members, which can include children. Only enter information about other people that you are entitled to share with us.
• Household data — when you create or join a household, your membership, role, invitations, and the account visibility settings you choose (private, shared read-only, or shared full access).
• Billing data — subscription and payment information processed by Stripe. We do not store full card numbers; Stripe handles payment details directly.
• Communications — messages you send to support and your email and notification preferences.
• API and webhook settings — if you create API tokens or webhook endpoints, their names, scopes and the URLs you choose. Webhooks send the data you select to the URL you enter; that destination is yours, not ours.

Information collected automatically

• Technical & device data — IP address, browser/device type, and similar data needed to deliver and secure the Services.
• Error reports — when something fails in the app or on our servers, a diagnostic report with the error, the page or screen, your account identifier and device details goes to our error-monitoring provider (Sentry). We do not record your screen or what you type.
• How you found us — when you sign up, the campaign, referring site and first page recorded by the ws_attr cookie (below) are stored with your account so we can tell which of our content brings people to WorthSync.
• Cookies & analytics — see our Cookie Policy. We use only essential/functional cookies (for example, your theme preference), one first-party measurement cookie (ws_attr, which records the campaign or page you first arrived from so we can tell which of our own content leads people to WorthSync), and privacy-first, cookieless traffic analytics (Cloudflare Web Analytics) that does not set cookies, fingerprint your device, or track you across sites. ws_attr is written and read only by our own domains, carries no advertising identifier, and is deleted once recorded. We do not run third-party advertising trackers.
• Push tokens — if you enable notifications in our mobile apps, a device push token, delivered through the Expo push service (which relays to Apple Push Notification service and Firebase Cloud Messaging), so we can send reminders and recaps.

Age requirement. The Services are for adults only. You must be at least 18 to use WorthSync, and we do not knowingly collect data from anyone under 18. Our mobile apps read the age category your app store provides and block access when it reports a minor. If you believe someone under 18 has provided us data, contact support@worthsync.com and we will delete it.

3. How we use your information

• Provide, maintain, and secure the Services and your account.
• Calculate net-worth views, analytics, goals, and planning projections from the data you enter.
• Enable household sharing according to the visibility settings you select.
• Process subscriptions, payments, and billing through Stripe.
• Send service messages, snapshot reminders, household invitations, setup and tips emails, and (for eligible plans) the monthly recap email. Every one of these except service messages and invitations carries a one-click unsubscribe link that works without signing in.
• Get value estimates for a property or vehicle, when you turn that on for the account.
• Find and fix errors, and measure which of our own pages and campaigns bring people to WorthSync.
• Respond to support requests and detect, prevent, and address fraud, abuse, or security issues.
• Comply with legal obligations and enforce our Terms of Service.

4. Where we operate, and why we process your data

WorthSync is offered from the United States and is intended for users in the United States. We do not target, market, or offer the Services to individuals in the European Economic Area or the United Kingdom, and our app store listings are limited accordingly. We have not appointed a representative under Article 27 of the GDPR or UK GDPR because we do not offer the Services to, or monitor the behavior of, individuals in those regions. If that changes, we will appoint representatives and name them here before we begin.

We process your personal data in order to:

• Perform our contract with you — to provide the Services you sign up for, including storing and analyzing the data you enter and processing your subscription.
• Pursue legitimate interests — to secure the Services, prevent fraud, and communicate about your account, balanced against your rights.
• Act on your consent — for optional communications; you can withdraw consent at any time.
• Meet legal obligations — tax, accounting, and other legal requirements.

5. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose data only to:

• Service providers (sub-processors) who process data on our behalf under contract — see the list in Section 6.
• Other household members, but only for accounts you have explicitly set to a shared visibility level.
• Destinations you choose — if you set up a webhook or use an API token, the data you selected goes to the URL or tool you configured.
• Legal & safety — where required by law, to respond to lawful requests, or to protect the rights, safety, and property of WorthSync, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Sub-processors

We use the following providers to operate the Services:

We sign data processing agreements with our sub-processors and require them to protect your data consistent with this Policy. When we add or replace a sub-processor we update this list, and the date at the top of this page, before it receives any of your data.

7. Where your data is processed

We are based in the United States and your data is processed there. Some of the providers listed above operate infrastructure in other countries and may process or route data outside the United States in the course of delivering their service. In every case they are bound by a data processing agreement requiring protection consistent with this Policy. Contact us if you would like more detail about where a particular provider processes data.

8. Data retention

We keep your personal data for as long as your account is active and as needed to provide the Services.

When you delete your account from within the app, deletion starts immediately. Your sign-in identity is removed at once and any active subscription is cancelled. Your accounts, institutions, balance snapshots, goals, plans, insurance policies, uploaded documents, vault entries, change history, household membership, preferences and push tokens are then erased from our live systems as soon as our authentication provider confirms the deletion, normally within minutes. See Delete your account for the full list and for how to request deletion if you cannot sign in — in that case we verify your ownership of the account and complete the deletion within 30 days, and sooner where the law requires it.

After deletion, a limited set of data persists for a short, bounded period:

• Encrypted backups. Our database provider retains encrypted point-in-time backups on a rolling window, so a copy of your data may remain in backup storage after it is gone from the live system. Backups are not used to serve the Services, are overwritten as the window rolls forward, and are deleted or de-identified within 30 days of your deletion request.
• Payment and tax records. Our payment processor retains invoice and transaction records for the period tax, accounting, and anti-fraud law requires. These are not used for any other purpose.
• Subscription consent records. When you start a subscription we record the price, billing interval and renewal terms you were shown and when you agreed. We keep that record for at least three years, as auto-renewal law requires, even after you delete your account, so we can answer a billing dispute. It holds your account identifier and none of the financial data you entered.
• Bounced addresses. If email to your address hard-bounced, the address stays on our do-not-send list so we never email it again.
• Records belonging to other people. If you shared data with a household, records another member created remain theirs and stay with that household. Only your own records are deleted.

9. Your rights and choices

Depending on where you live, you may have the right to:

• Access a copy of your personal data and learn how we use it.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Export your data in a portable, machine-readable format.
• Restrict or object to certain processing, and withdraw consent.

You can exercise most of these rights yourself without contacting us: edit or delete any account, snapshot, goal or policy from within the app, export your full ledger as JSON, CSV or PDF from Reports, and delete your entire account from Settings → Privacy & data.

Otherwise, email support@worthsync.com. We will verify your request and respond within the time required by applicable law (45 days under CCPA/CPRA, extendable where permitted; sooner where another law requires it). Exercising these rights is free, and we will not discriminate against you for doing so. You may also contact your state attorney general if you believe we have not handled your request properly.

Do Not Track and Global Privacy Control

We do not track you across other websites, and we do not allow third parties to track you across sites or over time through our Services. So we treat every visitor the same whether or not their browser sends a Do Not Track or Global Privacy Control signal: there is no tracking for either signal to switch off. Because we never sell or share personal information, a Global Privacy Control signal already has the effect it asks for.

10. California privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you specific rights. This section describes them and the categories of personal information involved.

Categories we collect

We disclose these categories to the service providers listed in Section 6 for the business purposes described in Section 3, under contracts that prohibit them from using the data for their own purposes. We retain each category for the periods described in Section 8.

We do not sell or share your personal information

We have not sold personal information, and we have not shared it for cross-context behavioral advertising, in the preceding 12 months — including the personal information of anyone we know to be under 16. "Sell" and "share" carry their CCPA/CPRA meanings. We run no advertising trackers, no cross-site cookies and no cross-context behavioral advertising; our traffic analytics are cookieless and our one measurement cookie is strictly first-party (see our Cookie Policy), so there is no "Do Not Sell or Share My Personal Information" mechanism to offer.

Use of sensitive personal information

We use and disclose sensitive personal information only to perform the Services you asked for, to secure your account and prevent fraud, and for the other purposes permitted by California Civil Code §1798.121(a) without a right to limit. We do not use it to infer characteristics about you, and we do not use or disclose it for any purpose that would trigger the right to limit — so there is no separate "Limit the Use of My Sensitive Personal Information" link.

Your California rights

• Know / access — the categories and specific pieces of personal information we collect, the sources, the business purpose, and the categories of third parties we disclose it to.
• Delete — personal information we collected from you, subject to the legal exceptions in Section 8.
• Correct — inaccurate personal information.
• Portability — a copy in a readily usable format; our JSON and CSV exports are built for this.
• Non-discrimination — we will not deny service, charge a different price, or provide a different quality of service because you exercised these rights. We offer no financial incentives for personal information.

Submit a request by emailing support@worthsync.com. We verify requests against the email address on the account, and for deletion we require confirmation before acting. An authorized agent may submit a request on your behalf with written permission signed by you; we may still ask you to verify your own identity directly. We respond within 45 days, extendable by another 45 days where permitted, and we will tell you if we need the extension.

11. Security

We use technical and organizational measures to protect your data, including encryption in transit, encryption of the database volume at rest, field-level encryption of sensitive financial values, and database-enforced access controls (Row-Level Security). Documents you upload are kept in a private storage bucket that is encrypted at rest by our provider and reachable only through the app; they are not field-level encrypted. If you log balances in the web app while offline, they wait in your browser's local storage, unencrypted, until they sync. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here with a new date at the top of the page, which is the date it takes effect. For a material change we will also tell you by email or in the app before it applies to you.

13. Contact us

Hallows Group LLC — support@worthsync.com — 5900 Balcones Dr #31966, Austin, TX 78731-4257, United States.