Privacy Policy
How we collect, use, store, and protect your information when you use Total Wealth Tracker and the connected cloud service.
Welcome to Total Wealth Tracker. This Privacy Policy explains how we collect, use, store, and protect your information when you use the mobile application and the connected cloud service.
1. Information we collect
- Email address
- Password (stored only as a secure hash on our server)
Investment entries you add manually (names, amounts, types, dates, currencies, and related fields) are stored on our servers when you use cloud sync.
If you invite or accept a portfolio partner, we store invite records (email, status) and membership links between accounts.
We may process limited technical data needed to run the service securely and keep the app up to date: IP address in server logs, app/API errors, app version, and device or installation identifiers used to check for application updates (via Expo / EAS Update). These identifiers are not used for advertising.
The app may keep a local copy of your portfolio entries and a session token so you can use the app. Those local files are not encrypted by the application itself (the device operating system may still protect storage when the phone is locked).
2. How we use information
We use your data only to:
- Provide and maintain your account
- Sync your portfolio across devices
- Enable optional partner access to a shared portfolio (with your consent)
- Keep the service secure and reliable
- Check for and deliver application updates
3. Legal basis for processing
Where the GDPR applies, we process personal data based on the following legal bases:
- User consent — when you accept this policy at registration and when you accept a partner invite
- Performance of services requested by the user — account, cloud sync, and portfolio features you use
- Legitimate interests related to application security, stability, and functionality — including abuse prevention and limited server logs
4. Storage and hosting
Your account and portfolio data are stored on EU-based servers.
Connections to our service are protected with HTTPS (TLS), and HTTP traffic is automatically redirected to HTTPS.
Passwords are protected using secure one-way hashing and are never stored in plain text.
Account and portfolio data are not currently encrypted at rest. Backup copies are also not encrypted and are stored separately from the main server.
5. Data retention
Personal data is retained only for as long as necessary to provide application functionality, comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account, we remove your user record and portfolios you own from our active database. Residual copies may remain for a limited time in the hosting provider’s technical backups, which are not encrypted.
6. International data transfers
User account and portfolio data are primarily stored and processed within the European Union.
To deliver over-the-air application updates, the app communicates with Expo’s update service (EAS Update). That service may process device or installation identifiers and related technical data outside the European Union. We use this only to keep the app up to date, not for advertising. Where required by law, we rely on appropriate safeguards for such transfers.
7. Analytics & tracking
We may use Google Analytics for Firebase (Google Analytics 4) to collect limited analytics events about how you use the app. Analytics data helps us understand usage patterns and improve features and reliability.
Optional: We only enable analytics collection after you provide consent in the app. You can enable or disable analytics later in the app settings. If you do not consent, we do not collect or send analytics events.
What we collect: When analytics is enabled, we send only screen view information and named user actions (example event names include screen_view and operation-like actions such as add_investment / realize_investment). We do not send investment names, financial amounts, or account email addresses in analytics events.
The app does not use advertising cookies, advertising identifiers for ad targeting, or invasive tracking technologies.
When Google Analytics is enabled, Google may infer non-sensitive information such as approximate geographic region based on IP address, and it may use device/app identifiers to measure usage. Google processes analytics data on our behalf as a processor (see Google Privacy Policy).
Limited technical logs may also be collected for security and operational purposes (for example, IP address in server logs and error diagnostics). Device or installation identifiers may be sent to Expo so the app can receive updates, as described above.
8. Partner portfolios
If you use the investment partner feature, you choose whether to accept access to another user’s portfolio. Nothing is added automatically — you must confirm in the app.
9. Affiliate links
The app may show links to third-party platforms (e.g. brokers). Those sites have their own privacy policies. We may receive compensation if you register through an affiliate link. See our Affiliate Disclosure for more detail.
10. User rights
Users located in the European Union may have the right to:
- Access their personal data
- Request correction of inaccurate data
- Request deletion of data
- Restrict or object to certain processing activities
- Request a copy of stored personal data (data portability, where applicable)
In the app (Settings) you can export your account data (JSON) or delete your account permanently (password required).
Requests may be submitted to: contact@totalwealthtracker.com
11. Financial disclaimer
12. Children
The service is not intended for users under 18.
13. Changes
We may update this policy. The “Last updated” date will change. Continued use after updates means you accept the revised policy.
14. Contact
Privacy questions: contact@totalwealthtracker.com · Contact page
