Privacy Policy

This Privacy Policy explains how Hallows Group LLC ("WorthSync," "we," "us," or "our") collects, uses, discloses, and safeguards your information when you visit worthsync.com, use the WorthSync application at app.worthsync.com, or use our iOS and Android apps (together, the "Services"). WorthSync is a personal net-worth tracking tool. Because the Services handle financial information, we treat that data as sensitive and apply heightened protections.

1. Who we are (data controller)

Hallows Group LLC is the controller responsible for your personal data. For any privacy question or to exercise your rights, contact us at support@worthsync.com or by mail at 5900 Balcones Dr #31966, Austin, TX 78731-4257, United States.

2. Information we collect

Information you provide

• Account & identity data — name and email address, managed through our authentication provider (Clerk) when you create an account.
• Financial data you enter — institutions, accounts, balances, dated snapshots, debts and liabilities, categories, goals, and planning inputs (for example, retirement and FIRE assumptions). This is sensitive financial information and is the core of the Services.
• Household data — when you create or join a household, your membership, role, invitations, and the account visibility settings you choose (private, shared read-only, or shared full access).
• Billing data — subscription and payment information processed by Stripe. We do not store full card numbers; Stripe handles payment details directly.
• Communications — messages you send to support and your email and notification preferences.

Information collected automatically

• Technical & device data — IP address, browser/device type, and similar data needed to deliver and secure the Services.
• Cookies & analytics — see our Cookie Policy. We use only essential/functional cookies (for example, your theme preference) and privacy-first, cookieless analytics (Cloudflare Web Analytics) that does not set cookies, fingerprint your device, or track you across sites. We do not run third-party advertising trackers.
• Push tokens — if you enable notifications in our mobile apps, a device push token (via Firebase Cloud Messaging) so we can deliver reminders and recaps.

Age requirement. The Services are for adults only. You must be at least 18 to use WorthSync, and we do not knowingly collect data from anyone under 18. Our mobile apps read the age category your app store provides and block access when it reports a minor. If you believe someone under 18 has provided us data, contact support@worthsync.com and we will delete it.

3. How we use your information

• Provide, maintain, and secure the Services and your account.
• Calculate net-worth views, analytics, goals, and planning projections from the data you enter.
• Enable household sharing according to the visibility settings you select.
• Process subscriptions, payments, and billing through Stripe.
• Send service messages, snapshot reminders, household invitations, and (for eligible plans) the monthly recap email.
• Respond to support requests and detect, prevent, and address fraud, abuse, or security issues.
• Comply with legal obligations and enforce our Terms of Service.

4. Where we operate, and why we process your data

WorthSync is offered from the United States and is intended for users in the United States. We do not target, market, or offer the Services to individuals in the European Economic Area or the United Kingdom, and our app store listings are limited accordingly. We have not appointed a representative under Article 27 of the GDPR or UK GDPR because we do not offer the Services to, or monitor the behavior of, individuals in those regions. If that changes, we will appoint representatives and name them here before we begin.

We process your personal data in order to:

• Perform our contract with you — to provide the Services you sign up for, including storing and analyzing the data you enter and processing your subscription.
• Pursue legitimate interests — to secure the Services, prevent fraud, and communicate about your account, balanced against your rights.
• Act on your consent — for optional communications; you can withdraw consent at any time.
• Meet legal obligations — tax, accounting, and other legal requirements.

5. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose data only to:

• Service providers (sub-processors) who process data on our behalf under contract — see the list in Section 6.
• Other household members, but only for accounts you have explicitly set to a shared visibility level.
• Legal & safety — where required by law, to respond to lawful requests, or to protect the rights, safety, and property of WorthSync, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Sub-processors

We use the following providers to operate the Services:

We sign data processing agreements with our sub-processors and require them to protect your data consistent with this Policy.

7. Where your data is processed

We are based in the United States and your data is processed there. Some of the providers listed above operate infrastructure in other countries and may process or route data outside the United States in the course of delivering their service. In every case they are bound by a data processing agreement requiring protection consistent with this Policy. Contact us if you would like more detail about where a particular provider processes data.

8. Data retention

We keep your personal data for as long as your account is active and as needed to provide the Services.

When you delete your account from within the app, the deletion is immediate. Your sign-in identity, accounts, institutions, balance snapshots, goals, plans, vault entries, household membership, preferences, and push tokens are removed from our live systems as part of that request, and any active subscription is cancelled at the same time. See Delete your account for the full list and for how to request deletion if you cannot sign in — in that case we verify your ownership of the account and complete the deletion within 30 days, and sooner where the law requires it.

After deletion, a limited set of data persists for a short, bounded period:

• Encrypted backups. Our database provider retains encrypted point-in-time backups on a rolling window, so a copy of your data may remain in backup storage after it is gone from the live system. Backups are not used to serve the Services, are overwritten as the window rolls forward, and are deleted or de-identified within 30 days of your deletion request.
• Payment and tax records. Our payment processor retains invoice and transaction records for the period tax, accounting, and anti-fraud law requires. These are not used for any other purpose.
• Records belonging to other people. If you shared data with a household, records another member created remain theirs and stay with that household. Only your own records are deleted.

9. Your rights and choices

Depending on where you live, you may have the right to:

• Access a copy of your personal data and learn how we use it.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Export your data in a portable, machine-readable format.
• Restrict or object to certain processing, and withdraw consent.

You can exercise most of these rights yourself without contacting us: edit or delete any account, snapshot, goal or policy from within the app, export your full ledger as JSON, CSV or PDF from Reports, and delete your entire account from Settings → Privacy & data.

Otherwise, email support@worthsync.com. We will verify your request and respond within the time required by applicable law (45 days under CCPA/CPRA, extendable where permitted; sooner where another law requires it). Exercising these rights is free, and we will not discriminate against you for doing so. You may also contact your state attorney general if you believe we have not handled your request properly.

10. California privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you specific rights. This section describes them and the categories of personal information involved.

Categories we collect

We disclose these categories to the service providers listed in Section 6 for the business purposes described in Section 3, under contracts that prohibit them from using the data for their own purposes. We retain each category for the periods described in Section 8.

We do not sell or share your personal information

We have not sold personal information, and we have not shared it for cross-context behavioral advertising, in the preceding 12 months — including the personal information of anyone we know to be under 16. "Sell" and "share" carry their CCPA/CPRA meanings. We run no advertising trackers and our analytics are cookieless (see our Cookie Policy), so there is no "Do Not Sell or Share My Personal Information" mechanism to offer.

Use of sensitive personal information

We use and disclose sensitive personal information only to perform the Services you asked for, to secure your account and prevent fraud, and for the other purposes permitted by California Civil Code §1798.121(a) without a right to limit. We do not use it to infer characteristics about you, and we do not use or disclose it for any purpose that would trigger the right to limit — so there is no separate "Limit the Use of My Sensitive Personal Information" link.

Your California rights

• Know / access — the categories and specific pieces of personal information we collect, the sources, the business purpose, and the categories of third parties we disclose it to.
• Delete — personal information we collected from you, subject to the legal exceptions in Section 8.
• Correct — inaccurate personal information.
• Portability — a copy in a readily usable format; our JSON and CSV exports are built for this.
• Non-discrimination — we will not deny service, charge a different price, or provide a different quality of service because you exercised these rights. We offer no financial incentives for personal information.

Submit a request by emailing support@worthsync.com. We verify requests against the email address on the account, and for deletion we require confirmation before acting. An authorized agent may submit a request on your behalf with written permission signed by you; we may still ask you to verify your own identity directly. We respond within 45 days, extendable by another 45 days where permitted, and we will tell you if we need the extension.

11. Security

We use technical and organizational measures to protect your data, including encryption in transit, encryption of the database volume at rest, field-level encryption of sensitive financial values, and database-enforced access controls (Row-Level Security). No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date and, for material changes, provide additional notice.

13. Contact us

Hallows Group LLC — support@worthsync.com — 5900 Balcones Dr #31966, Austin, TX 78731-4257, United States.